Retired power battery management method and system
By adopting tree-shaped server-side, LDAP and zero-knowledge proof technologies in the retired power battery management system, the problems of privacy protection and trust in the blockchain are solved, and more efficient and safer power battery cascade utilization is achieved.
Patent Information
- Application Number
- CN202110992501.2
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-08-27
- Publication Date
- 2025-03-21
- Estimated Expiration
- 2041-08-27
AI Technical Summary
The privacy protection and trust issues of blockchain in the cascade utilization of power batteries have led to user privacy leakage and the destruction of market order.
A retired power battery management system was designed to use the server side and LDAP with a tree structure for identity verification and real-name certificate distribution, combining zero-knowledge proof and smart contracts to ensure data privacy and trust.
It effectively solves the privacy protection problem in blockchain, ensures the credibility of different nodes in blockchain, and improves the efficiency and security of the system.
Smart Images

Figure CN113673893B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of blockchain, and in particular to a retired power battery management method and system. Background Art
[0002] As resource consumption and environmental pollution become increasingly severe worldwide, the electric vehicle market is growing rapidly, but this also brings safety risks and resource recycling pressures for retired batteries. Refined cascade utilization of retired batteries can fully explore the residual value of batteries and reduce resource waste, thereby improving the economic value, environmental value and social value of battery utilization.
[0003] However, at this stage, there are still several major difficulties to be solved for the cascade utilization of power batteries:
[0004] (1) Battery data is at risk of being tampered with. The battery recycling market has the problem of illegally tampering with and falsifying battery data for improper profit. On the one hand, the collected batteries may be scrapped batteries that have been refurbished; on the other hand, some companies may illegally dismantle and reassemble retired batteries and sell them as finished recycled batteries. The performance and safety of retired batteries cannot be guaranteed, and illegal activities disrupt the market order and cause a crisis of trust.
[0005] (2) Battery information data storage is not real-time and comprehensive. The circulation and data exchange of second-use batteries, the upstream and downstream enterprises in the industrial chain have not yet standardized in key information communication links such as communication protocols and historical data. There are problems such as lack of trust, opaque data storage, and difficulty in resource sharing, which indirectly lead to battery safety risks.
[0006] In response to the above problems, blockchain technology has entered people's field of vision with its characteristics of trustlessness, decentralization, time-series data, and anti-tampering and forgery. A power battery recycling solution based on blockchain technology has been designed.
[0007] However, there are some drawbacks to applying blockchain to the cascade utilization of power batteries, including:
[0008] The user transaction data in the blockchain is open and transparent, which brings up the issue of user privacy protection. Attackers can obtain valuable information by analyzing transaction records, such as capital flow and transaction content, but users often do not want this information to be discovered by others. In some transaction processes, attackers can even discover transaction plans and matching records, and then grasp user transaction trends and disrupt market order. The decentralized network distribution structure of the blockchain is difficult to block the spread and leakage of transaction data. Therefore, the anonymity of users, that is, identity privacy, also needs to be taken into consideration. The operations between commercial independent entities are independent, and there are various asymmetric information flows and communication gaps in the business chains and production circulation environments of different systems. There is no timely information flow sharing distributed network system and a system that can solve the trust problem.
[0009] Therefore, it is necessary to propose a technical solution to solve the above technical problems. Summary of the invention
[0010] In view of the privacy protection and trust issues in the blockchain, the present invention provides a retired power battery management system, including: a server, the server is a tree structure, there is a root security certificate issuing server as the root node of the tree structure, there are multiple intermediate security certificate issuing servers, each intermediate security certificate issuing server is configured with a security certificate issuing server cluster, the server is responsible for verifying the true identity of the parties involved in the retired power battery and distributing real-name certificates; LDAP, the data of all intermediate security certificate issuing servers are stored in LDAP; at least two nodes, the nodes include, Orderer node, used to package transactions and provide sorting services; Peer node, and the Orderer node constitutes a blockchain network for storing block data and running maintenance code; client, used to call the server, and the data information related to the retired power battery is uploaded to the chain through the client, the client includes at least a first client and a second client;
[0011] Among them, the client is also configured to request a digital signature scheme, and the digital signature scheme shown includes a public key and a private key; the first client and the second client negotiate to generate a first parameter sequence for zero-knowledge proof, and based on the first parameter sequence, the first client uses a multiple discrete logarithm formula to generate a commitment value sequence. The intermediate security certificate issuing server trusted by the first client and the second client is responsible for the delivery of the commitment value sequence. The first client uses a hash function to calculate the private key of the first client to generate a second parameter for zero-knowledge proof, and the identity of the first client is verified through a zero-knowledge proof protocol. After the zero-knowledge proof is passed, the first client and the second client trade through a smart contract.
[0012] The relevant data information includes one or more of the following information types: battery parameter information, battery manufacturer information, processor information, transporter information, and seller information.
[0013] The zero-knowledge proof is designed based on a multiple discrete logarithm problem. The first client negotiates with the second client and uses an intermediate security certificate issuing server trusted by both the first client and the second client to generate a first parameter sequence for zero-knowledge proof. The first parameter sequence includes a randomly selected hash function, a first large prime number and a first element set. The first element set is calculated based on the definition of the multiple discrete logarithm problem and the first client and the second client can both obtain the first parameter sequence.
[0014] The first client calculates the private key of the first client by using the hash function in the first parameter sequence to obtain the second parameter, and the second parameter is used as a solution to a multiple discrete logarithm problem.
[0015] Wherein, according to the first parameter sequence and the second parameter, a commitment value sequence is generated using a multiple discrete logarithm formula.
[0016] Among them, the relevant participants of the retired power batteries submit a user registration application through the client. After the server verifies the true identity of the relevant participants of the retired power batteries and distributes a real-name certificate, the relevant participants of the retired power batteries can perform read and write operations on the blockchain.
[0017] Among them, the read and write operations include uploading the relevant data information of the retired power battery to the chain, reading the information in the blockchain, and conducting transactions.
[0018] Among them, the client sets the level authority for the reading and writing operations of the blockchain, and the client determines the identity of the relevant participants of the retired power batteries based on the real-name certificate; each identity of the relevant participants of the retired power batteries corresponds to one level authority, and the identities of the relevant participants of the retired power batteries include battery manufacturers, battery processors, transporters, sellers, regulatory authorities and consumers; the relevant participants of the retired power batteries perform the reading and writing operations on the blockchain within the scope of the level authority corresponding to their identities.
[0019] When the information is uploaded to the chain through the client, the client selects the level of authority of the information. The client sets the information so that only the retired power battery-related participants corresponding to the level of authority can read and write the information based on the selected level of authority.
[0020] Among them, a multi-signature approach is established, and there is at least one private key that can sign the account. When the number of signatures for the account reaches a preset ratio, the funds in the account can be used.
[0021] Wherein, the multi-signature approach is established through a smart contract, the preset ratio that the number of account signatures needs to reach is adjustable, and the requirement for the number of account signatures is identified by a logical operator in the smart contract, and the logical operator includes AND and OR.
[0022] The present application also provides a retired power battery management method, comprising the following steps:
[0023] Construct a server, which is a tree structure, and sets a root security certificate issuing server as the root node of the tree structure, sets at least one intermediate security certificate issuing server, and configures a security certificate issuing server cluster on each intermediate security certificate issuing server. The server is responsible for verifying the true identity of the parties involved in the retired power battery and distributing real-name certificates;
[0024] Store the data of all intermediate security certificate issuing servers in LDAP;
[0025] At least two nodes are set, including: an Orderer node, which is used to package transactions and provide sorting services; a Peer node, which forms a blockchain network with the Orderer node and is used to store block data and run maintenance codes;
[0026] The client calls the server to upload data information related to the retired power battery to the chain, wherein the client includes at least a first client and a second client;
[0027] Obtaining a digital signature scheme through a client request, wherein the digital signature scheme includes a public key and a private key;
[0028] The first client and the second client negotiate to generate a first parameter sequence for zero-knowledge proof. Based on the first parameter sequence, the first client generates a commitment value sequence using a multiple discrete logarithm formula. An intermediate security certificate issuing server trusted by the first client and the second client is responsible for transmitting the commitment value sequence. The first client calculates the private key of the first client using a hash function to generate a second parameter for zero-knowledge proof. The identity of the first client is verified through a zero-knowledge proof protocol. After the zero-knowledge proof is passed, the first client and the second client trade through a smart contract.
[0029] The system provided by the present invention effectively solves the privacy protection problem in the blockchain through zero-knowledge proof, while ensuring the credibility of different nodes in the blockchain and improving efficiency. BRIEF DESCRIPTION OF THE DRAWINGS
[0030] Figure 1 This is a schematic diagram of the system architecture of this application;
[0031] Figure 2 A schematic diagram of a multi-layer configuration for using encryption system tools and resources;
[0032] Figure 3 Establish node process and sorting service process diagram. DETAILED DESCRIPTION
[0033] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the optional implementations disclosed in the utility model are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.
[0034] like Figure 1 As shown, the present invention provides a retired power battery management system, including: a server, the server is a tree structure, and there is a root security certificate issuing server 11 as the root node of the tree structure, which is used to establish a basic trust system. There are multiple intermediate security certificate issuing servers 12, and each intermediate security certificate issuing server 12 is configured with a security certificate issuing server cluster. The server is responsible for verifying the true identity of the relevant participants of the retired power battery and distributing real-name certificates. Among them, the security certificate issuing server is the issuing server of the certificate, which is the core of the public key infrastructure (PKI). The security certificate issuing server has the functions of issuing certificates, authenticating certificates, and managing issued certificates.
[0035] LDAP13 (Lightweight Directory Access Protocol) is a lightweight directory access protocol. As a unified authentication solution, LDAP13 can quickly respond to user search needs. All data of the intermediate security certificate issuing server 12 is stored in LDAP13.
[0036] The system provided by the present invention also includes multiple nodes 15 of different types. There are mainly four types of nodes 15: client nodes, ordinary nodes, sorting service nodes, and security certificate issuance server nodes. Among them, Peer nodes are called ordinary nodes, which can be divided into accounting nodes (committer), endorsement nodes (endorser), master nodes (leader) and anchor nodes (anchor) according to the roles they play. The sorting service node (Orderer) is used to package transactions and provide sorting services. Peer nodes and Orderer nodes constitute a blockchain network for storing block data and running maintenance codes.
[0037] The system provided by the present invention also includes a client 14, which must be directly or indirectly connected to a certain Peer node or sorting service node to communicate with the blockchain network. In the present invention, the client 14 can be used to call the server, and the data information related to the retired power battery is uploaded to the chain through the client 14. Among them, the client 14 is also configured to request a digital signature scheme, and the digital signature scheme shown includes a public key and a private key. When there are two clients for trading, one of them is called the first client and the other is called the second client. The first client negotiates with the second client to generate a first parameter sequence for zero-knowledge proof. Based on the first parameter sequence, the first client generates a commitment value sequence using a multiple discrete logarithm formula. The intermediate security certificate issuing server 12 trusted by the first client and the second client is responsible for the transmission of the commitment value sequence. The first client uses a hash function to calculate the private key of the first client to generate a second parameter for zero-knowledge proof, and the identity of the first client is verified by the zero-knowledge proof protocol. After the zero-knowledge proof is passed, the first client and the second client trade through a smart contract. Through zero-knowledge proof, the identity of the transaction object can be confirmed without leaking private information, and the protection of key privacy information in the blockchain can be realized.
[0038] Among them, the relevant data information of retired power batteries includes one or more of the following information types: battery parameter information, battery manufacturer information, processor information, transporter information and seller information.
[0039] As shown in Table 1, the format for generating a digital signature has the following components, including: version number, serial number, signature algorithm flag, publisher name, available time interval, domain name, domain public key information, etc.
[0040]
[0041] Table 1
[0042] As an optional implementation, CA< >=CA{V,SN,AI,CA,Ta,A,Ap} represents the X.509 security certificate of entity A.
[0043] Y< <x>>,user X, Y:CA, indicates the Y system authentication of user X, where Y is the security certificate issuing server.
[0044] y{I},signing of I by Y,encrypted hash code appended. indicates the signature of information I by the certificate issuing server Y, and the hash code is added after the signature.
[0045] like< / x> Figure 2As shown in the figure, as an optional implementation method, after establishing a secure certificate issuance server, the secure transport layer protocol (TLS), membership service provider (MSP) and public key infrastructure (PKI) can be used to complete the registration of relevant participants of retired power batteries. Among them, MSP provides a process for the issuance and verification of certificates, and can be combined with stronger verification as an optional implementation method to provide confidentiality, anonymity and zero-knowledge proof.
[0046] Among the three roles of user, issuer of identity verification information, and verifier, the user owns the identity information, the issuer issues the identity information, and the verifier verifies the identity information. This process can be completed through idemix (IdentityMixer) in MSP, which is an advanced identity authentication function provided by MSP.
[0047] Use the security certificate server and related encryption system to set node-related security certificates at the business node. The hierarchical management of nodes and retired power battery-related participants is established through the operation mode of the alliance chain. For different entities of the business party, different departments or units within the entity can achieve fine control by configuring the membership service MSP. For consensus network channels, data collections (collections) and smaller data keys (keys) controlled data, establish a control policy and group management. The system operates according to this ACL (Access Control List) definition.
[0048] Optionally, the identities of relevant participants in retired power batteries include battery manufacturers, battery processors, transporters, sellers, regulatory authorities and consumers.
[0049] The client 14 requests registration, and after completing the membership, the digital signature scheme can be obtained. Use the security certificate issuing server to generate two digital certificate keys, including a public key (ECDSA) and a private key. The client 14 sends the public key (ECDSA) to the intermediate security certificate issuing server 12, and the encoded certificate sent back by the intermediate security certificate issuing server 12 is the signature certificate. The renewal and termination of the certificate are both completed through the security certificate issuing server. As an optional implementation method, the process of network deployment of the system provided by the present invention includes the deployment of CA (security certificate issuing server) and TLSCA (transaction layer security certificate authority server).
[0050] After the user completes the registration through the client 14, the production environment test is carried out. When it is detected that the node 15 linked to the client 14 is in the alliance chain, the information in the alliance chain can be opened to the client 14 under the node to provide the startup node service. The purpose of the production environment test is to maintain a relatively closed environment in the product circulation field of retired power batteries, and to achieve the effect of protecting privacy to a certain extent.
[0051] like Figure 3 As shown, after the client 14 starts the node service, the following steps are performed in sequence during the transaction process, including:
[0052] Generate the ordering node identity and MSP. Determine the resources in the ordering phase, including the transaction target of the client 14 and the transaction object used to pay for the transaction. Determine the resources of the cluster including the mutual trust mechanism. As an optional implementation method, a smart contract can be used as the mutual trust mechanism. Deploy the ordering node service, start the ordering node service, and perform network operation and maintenance.
[0053] In the system provided by the present invention, digital signature is used to replace human pen signature, which can effectively prove the ownership of the owner, and has authenticity and unchangeability. With the application of this technology, the time for signature and signature verification is about 1 to 2 milliseconds, which greatly improves efficiency.
[0054] In addition, the system provided by the present invention also establishes a multi-signature approach, and there is at least one private key that can sign the account. When the number of signatures on the account reaches a preset ratio, the funds in the account can be used. The preset ratio is adjustable and optional as a relevant parameter of the security system. As an optional implementation method, in the consensus algorithm of the alliance chain, the signature requirements can be identified according to logical operators. For example, AND('Org1.member','Org2.member','Org3.member') means that the signatures of members of the organizations Org1, Org2, and Org3 are required, or: OR('Org1.member','Org2.member') means that the signatures of any member of the organization Org1 or Org2 are required.
[0055] The blockchain network is a shared ledger of an encryption system. The core consensus algorithm is designed to establish a mathematical basis for trusted computing when multiple parties account for the majority of network nodes. Even if there are malicious or deceptive nodes or nodes with errors and incomplete work, the distributed system can still work autonomously. When designing the system provided by the present invention, commercial needs and actual engineering architecture and purposes are taken into consideration to avoid problems where engineering projects cannot solve actual problems or efficiency and cost do not match. The present invention applies secure multi-party computing and zero-knowledge proof in cryptography to achieve multi-party trust on the network.
[0056] As an optional implementation, the present invention uses zero-knowledge proof to implement anonymous authentication between two clients 14, thereby achieving the purpose of protecting privacy. This implementation uses the mutual authentication process between the first client and the second client to specifically illustrate how the present invention incorporates zero-knowledge proof into the blockchain.
[0057] The basic concept of zero-knowledge proof is: assuming that the prover P has some secret information, through a series of protocol processes, P can prove to the verifier V that he knows this information, but at the same time will not disclose any related information to V. In mathematics, there are multiple discrete logarithm problems, based on which a zero-knowledge proof protocol based on the solution of discrete logarithm problems is designed.
[0058] Regarding the basic concept of zero-knowledge proof, it is assumed that there are at least two clients 14, wherein the first client wants to prove its identity to the second client without revealing relevant information. The system provided by the present invention supports the zero-knowledge proof process, and the zero-knowledge proof process includes the following steps:
[0059] First, there is a system initialization phase for zero-knowledge proof. In the system initialization phase, the first client negotiates with the second client and generates a first parameter sequence for zero-knowledge proof using the intermediate security certificate issuing server 12 trusted by the first client and the second client. The steps of generating the first parameter sequence include:
[0060] S101. The intermediate security certificate issuing server 12 randomly selects a large prime number P, and uses a group generator calculation method to obtain a first generator. As an optional implementation method, α1 is used in the present invention to represent the first generator.
[0061] S102, randomly select a series of other large prime numbers smaller than the large prime number P, use the first generator, and perform calculations based on the definition of the generator to obtain a first element set. As an optional implementation method, the present invention randomly selects n-1 large prime numbers x1, x2, x3, ..., x n <P, the definition formula of the generator is as follows Get a series The elements α2, α3, α4, …, α n .
[0062] S103, randomly select a hash function, write the large prime number P, the first element set and the hash function into the same set, obtain a first parameter sequence, publish the first parameter sequence, and make it available to both the first client and the second client. The hash function can be represented by H, and the first parameter sequence is expressed as {P, α2, α3, α4, …, α n ,H}, at this point, the system initialization is completed.
[0063] After the system is initialized, the first client calculates the private key of the first client using the hash function selected in step S103 to obtain a second parameter, which is used as a corresponding solution x0 of the multiple discrete logarithm problem.
[0064] According to the first parameter sequence and the second parameter, a commitment value sequence is generated using a multiple discrete logarithm formula. For the convenience of explanation, the multiple discrete logarithm formula in the present invention is expressed as i=1,2,…,n, after calculation, we get the commitment value sequence, which is expressed as β1,β2,β3,…,β n .
[0065] Verifying the identity of the first client through the zero-knowledge proof protocol includes the following steps:
[0066] The first client randomly generates integers (r1, r2, r3, ..., r k ) and keep it secret. Use this sequence and the first parameter sequence to calculate And sent to the second client, where i=1, 2, ..., n, j=1, 2, ..., k.
[0067] S201: The first client and the second client generate a random number set using a coin tossing protocol. The value of an element in the random number set is 0 or 1. The random number set is represented by (c1, c2, c3, ... c k ).
[0068] S202, the first client sends a deformed random number sequence to the second client according to the value of the element in the random number set. After receiving the random number sequence, the second client selects the corresponding formula for verification according to the value of the element in the random number set. When the element value is 1, the first formula is selected for verification. When the element value is 0, the second formula is selected for verification. The first formula is expressed as: j =(r j -r t )mod(P-1), where t is the value that satisfies c t =1, the verification formula is
[0069] The second formula is expressed as: The random number is r j , the verification formula is
[0070] S203, the first client performs calculations using the third formula and sends the result to the second client, and the second client performs verification based on the multiple discrete logarithm problem. When the verification result passes, the identity of the first client is confirmed. The third formula is: z = (x0-r t )mod(P-1). Second client verification
[0071] If all the above processes are verified, the second client believes that the first client has the discrete logarithmic equation The solution x0 for i=1, 2, ..., n. Therefore, the first client does not disclose the private key of the first client, and the second client believes that the first client has the private key, thereby verifying the identity of the first client.
[0072] A multi-signature approach is established through smart contracts. The preset ratio of the number of account signatures that needs to be reached is adjustable. The signature requirements are identified by logical operators in the smart contract, and logical operators include AND and OR.
[0073] The purpose of the present invention is also to define the confidentiality requirements of the environment based on a trusted business environment, including: classification of information-sensitive information, classification of personnel and unit departments, definition of various information management and control modes, clear boundaries and owners of shared relationships of key information, and establishment of user trusted identities.
[0074] As an optional implementation method, the present invention provides a user registration function, wherein the parties involved in the retired power battery can submit a user registration application through the client 14, and the party involved in the retired power battery can read and write to the blockchain only after the server verifies the true identity of the party involved in the retired power battery and distributes a real-name certificate.
[0075] The read and write operations include uploading the relevant data information of the retired power battery to the chain, reading the information in the blockchain, and conducting transactions. The client 14 can be used to set the level of authority for the read and write operations of the blockchain. The client 14 determines the identity of the relevant participants of the retired power battery based on the real-name certificate obtained by the relevant participants of the retired power battery. Each identity of the relevant participants of the retired power battery corresponds to a level of authority. The identities of the relevant participants of the retired power battery include the battery manufacturer, battery processor, transporter, seller, regulatory department, and consumer.
[0076] The participants related to the retired power battery perform read and write operations on the blockchain within the scope of the level authority corresponding to their identity. When the information is uploaded to the blockchain through the client 14, the level authority of the information to be uploaded is selected by the client 14. According to the selected level authority, the client 14 sets the information so that only the participants related to the retired power battery corresponding to the level authority can perform read and write operations on the information.
[0077] Based on the above-mentioned retired power battery management system, the present application also provides a retired power battery management method, comprising the following steps:
[0078] Construct a server, which is a tree structure, and sets a root security certificate issuing server as the root node of the tree structure, sets at least one intermediate security certificate issuing server, and configures a security certificate issuing server cluster on each intermediate security certificate issuing server. The server is responsible for verifying the true identity of the parties involved in the retired power battery and distributing real-name certificates;
[0079] Store the data of all intermediate security certificate issuing servers in LDAP;
[0080] At least two nodes are set, including: an Orderer node, which is used to package transactions and provide sorting services; a Peer node, which forms a blockchain network with the Orderer node and is used to store block data and run maintenance codes;
[0081] The client calls the server to upload data information related to the retired power battery to the chain, wherein the client includes at least a first client and a second client;
[0082] Obtaining a digital signature scheme through a client request, wherein the digital signature scheme includes a public key and a private key;
[0083] The first client and the second client negotiate to generate a first parameter sequence for zero-knowledge proof. Based on the first parameter sequence, the first client generates a commitment value sequence using a multiple discrete logarithm formula. An intermediate security certificate issuing server trusted by the first client and the second client is responsible for transmitting the commitment value sequence. The first client calculates the private key of the first client using a hash function to generate a second parameter for zero-knowledge proof. The identity of the first client is verified through a zero-knowledge proof protocol. After the zero-knowledge proof is passed, the first client and the second client trade through a smart contract.
[0084] The above are only preferred specific embodiments of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily thought of by a person skilled in the art within the technical scope disclosed by the present invention should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention shall be subject to the protection scope of the claims.
Claims
1. A retired power battery management system, comprising: The server is a tree structure, with a root security certificate issuing server as the root node of the tree structure, at least one intermediate security certificate issuing server, and a security certificate issuing server cluster configured on each intermediate security certificate issuing server. The server is responsible for verifying the true identity of the parties involved in the retired power battery and distributing real-name certificates; LDAP, the data of all intermediate security certificate issuing servers are stored in LDAP; At least two nodes, including: an Orderer node, which is used to package transactions and provide sorting services; a Peer node, which forms a blockchain network with the Orderer node and is used to store block data and run maintenance codes; A client, used to call the server, and upload data information related to the retired power battery to the chain through the client, wherein the client includes at least a first client and a second client; The client is further configured to request a digital signature scheme, wherein the digital signature scheme includes a public key and a private key; The first client negotiates with the second client to generate a first parameter sequence for zero-knowledge proof. Based on the first parameter sequence, the first client generates a commitment value sequence using a multiple discrete logarithm formula. An intermediate security certificate issuing server trusted by the first client and the second client is responsible for transmitting the commitment value sequence. The first client calculates the private key of the first client using a hash function to generate a second parameter for zero-knowledge proof. The identity of the first client is verified through a zero-knowledge proof protocol. After the zero-knowledge proof is passed, the first client and the second client trade through a smart contract. The zero-knowledge proof is designed based on a multiple discrete logarithm problem. The first client and the second client negotiate and use an intermediate security certificate issuing server trusted by the first client and the second client to generate a first parameter sequence for zero-knowledge proof. The first parameter sequence includes a randomly selected hash function, a first large prime number, and a first element set. The first element set is obtained by calculation based on the definition of the multiple discrete logarithm problem and using the first large prime number. Both the first client and the second client can obtain the first parameter sequence. The first client calculates the private key of the first client by using the hash function in the first parameter sequence to obtain the second parameter, and the second parameter is used as a solution to a multiple discrete logarithm problem.
2. The retired power battery management system according to claim 1, characterized in that: The relevant data information includes one or more of the following information types: battery parameter information, battery manufacturer information, processor information, transporter information, and seller information.
3. The retired power battery management system according to claim 1, characterized in that: A commitment value sequence is generated using a multiple discrete logarithm formula according to the first parameter sequence and the second parameter.
4. The retired power battery management system according to claim 1, characterized in that: The party involved in the retired power battery submits a user registration application through the client. After the server verifies the true identity of the party involved in the retired power battery and distributes a real-name certificate, the party involved in the retired power battery can perform read and write operations on the blockchain.
5. The retired power battery management system according to claim 4, characterized in that: The read and write operations include uploading the relevant data information of the retired power battery to the blockchain, reading the information in the blockchain, and conducting transactions.
6. The retired power battery management system according to claim 4, characterized in that: The client sets the level of authority for the read and write operations of the blockchain, and the client determines the identity of the relevant participants of the retired power battery according to the real-name certificate; Each identity of the retired power battery-related participants corresponds to one of the level permissions, and the identities of the retired power battery-related participants include battery manufacturers, battery processors, transporters, sellers, regulatory authorities, and consumers; The retired power battery-related participants perform the read and write operations on the blockchain within the scope of the level of authority corresponding to their identities.
7. The retired power battery management system according to claim 6, characterized in that: When the information is uploaded to the chain through the client, the client selects the level of authority of the information. The client sets the information so that only the retired power battery-related participants corresponding to the level of authority can read and write the information according to the selected level of authority.
8. The retired power battery management system according to claim 1, characterized in that: Establish a multi-signature approach, where at least one private key can sign the account. When the number of signatures for the account reaches a preset ratio, the funds in the account can be used; The multi-signature approach is established through a smart contract, the preset ratio that the number of account signatures needs to reach is adjustable, and the requirement for the number of account signatures is identified by a logical operator in the smart contract, and the logical operator includes AND and OR.
9. A method for managing retired power batteries, characterized in that: The following steps are involved: Construct a server, which is a tree structure, and sets a root security certificate issuing server as the root node of the tree structure, sets at least one intermediate security certificate issuing server, and configures a security certificate issuing server cluster on each intermediate security certificate issuing server. The server is responsible for verifying the true identity of the parties involved in the retired power battery and distributing real-name certificates; Store the data of all intermediate security certificate issuing servers in LDAP; At least two nodes are set, including: an Orderer node, which is used to package transactions and provide sorting services; a Peer node, which forms a blockchain network with the Orderer node and is used to store block data and run maintenance codes; The client calls the server to upload data information related to the retired power battery to the chain, wherein the client includes at least a first client and a second client; Obtaining a digital signature scheme through a client request, wherein the digital signature scheme includes a public key and a private key; The first client negotiates with the second client to generate a first parameter sequence for zero-knowledge proof. Based on the first parameter sequence, the first client generates a commitment value sequence using a multiple discrete logarithm formula. An intermediate security certificate issuing server trusted by the first client and the second client is responsible for transmitting the commitment value sequence. The first client calculates the private key of the first client using a hash function to generate a second parameter for zero-knowledge proof. The identity of the first client is verified through a zero-knowledge proof protocol. After the zero-knowledge proof is passed, the first client and the second client trade through a smart contract. The zero-knowledge proof is designed based on a multiple discrete logarithm problem. The first client and the second client negotiate and use an intermediate security certificate issuing server trusted by the first client and the second client to generate a first parameter sequence for zero-knowledge proof. The first parameter sequence includes a randomly selected hash function, a first large prime number, and a first element set. The first element set is obtained by calculation based on the definition of the multiple discrete logarithm problem and using the first large prime number. Both the first client and the second client can obtain the first parameter sequence. The first client calculates the private key of the first client by using the hash function in the first parameter sequence to obtain the second parameter, and the second parameter is used as a solution to a multiple discrete logarithm problem.
Citation Information
Patent Citations
Anonymous authentication method and system
CN112364331A
Electric power industry digital identity card management method and system based on block chain technology
CN112950376A