A logistics information traceability system and method

Abstract

The present invention discloses a logistics information traceability system and method. The system includes a traceability information generation end, a traceability information update end, an information traceability terminal, and an identification and resolution system. The traceability information generation end is used to send the initial information of goods and the node permission configuration information to the identification and resolution system. The identification and resolution system generates a traceability code and a key pair, encrypts the traceability code with the public key, and records the private key in the private key configuration information of each node with decryption permission. The traceability information generation end writes the encrypted traceability code into the NFC module carried by the goods. Both the traceability information update end and the information traceability terminal can identify the encrypted traceability code recorded by the NFC module. The traceability information update end transmits the node goods logistics information to the identification and resolution system to realize the update of the goods logistics information. The information traceability terminal sends a traceability request to the identification and resolution system based on the encrypted traceability code, and the identification and resolution system returns the goods logistics information bound to the goods according to the node permissions. The present invention can provide a more secure and reliable logistics information update and traceability process, and the application process is simple and convenient.

Description

Technical Field

[0001] The present invention relates to the technical field of logistics information traceability, and in particular to a goods logistics information traceability system and method applicable to the construction machinery industry. Background Art

[0002] With the continuous development of production in the construction machinery industry and the rapid increase in logistics demand, the demand for full-process traceability of goods logistics has also increased year by year, and the information security issue of traceability in each link after the goods leave the factory has become the primary concern of people.

[0003] Traditional logistics management often only records the real-time location of the logistics, while the record of detailed information such as the warehouse location of goods in and out, the operator, the operation time, and the real-time status of goods in each link of the logistics tends to be blank, which is far from sufficient for the demand of accurate traceability. In addition, the previously open and transparent traceability information is also easily cracked, maliciously used, and copied, causing losses to multiple parties. Summary of the Invention

[0004] The purpose of the present invention is to provide a logistics information traceability system and method, which can provide a more secure and reliable logistics information update and traceability process, and is simple and convenient to operate during the application process. The technical solution adopted by the present invention is as follows.

[0005] On the one hand, the present invention provides a logistics information traceability system, including a traceability information generation end, a traceability information update end, an information traceability terminal, and an identification and resolution system. The traceability information generation end is set on the initial node in the goods logistics link, and an NFC module for recording the encrypted traceability code of the goods is provided on the goods;

[0006] The traceability information generation end is used to access the identification and resolution system, and send the initial information of the goods and the node permission configuration information to the identification and resolution system; the identification and resolution system generates a traceability code and a key pair according to the initial information of the goods, encrypts the traceability code with the public key in the key pair, records the binding relationship between the goods and the traceability code, the encrypted traceability code, the key pair, and the goods logistics information, and updates the private key in the key pair to the private key configuration information of each node with decryption permission according to the node permission configuration information; the traceability information generation end obtains the encrypted traceability code of the goods from the identification and resolution system, and writes the encrypted traceability code into the NFC module;

[0007] The traceability information update end is used to identify the encrypted traceability code data recorded by the NFC module, access the identification and resolution system based on the identified data, and transmit the goods logistics information at the current node to the identification and resolution system, requesting the identification and resolution system to update the logistics information bound to the goods corresponding to the traceability code;

[0008] The information traceability terminal is used to identify the encrypted traceability code data recorded by the NFC module, send a traceability request message to the identification resolution system based on the encrypted traceability code data, and the identification resolution system looks up the private key configuration information of the corresponding node according to the received traceability request message to determine whether the node has the decryption permission. If the node has the decryption permission, the goods logistics information bound to the traceability code is returned to the information traceability terminal.

[0009] In the above solution, the traceability information update end can be set on each logistics link node where new logistics information may be generated. Even if it does not have the decryption permission, since the binding relationship between the goods and the encrypted traceability code has been recorded in the identification resolution system, the accurate update of the goods logistics can still be achieved.

[0010] Optionally, the information traceability terminal and the traceability information update end are integrally designed as a node terminal, which is set on the intermediate node or the end node of the goods logistics link;

[0011] The node terminal is configured to: identify the encrypted traceability code data recorded by the NFC module, send a traceability request to the identification resolution system based on the encrypted traceability code data, and receive the goods logistics information returned by the identification resolution system after successfully judging the decryption permission in response to receiving the traceability request; and transmit the goods logistics information on the current node to the identification resolution system based on the encrypted traceability code data, and request the identification resolution system to update the logistics information bound to the corresponding traceability code of the goods. This implementation method enables the logistics link node to not only trace the goods logistics information but also update the logistics information.

[0012] For the information traceability terminal, a certain node may be configured as a node with traceability permission for multiple batches of goods, that is, the private key configuration information of a certain node may be configured with private keys corresponding to multiple batches of goods. In order to quickly and accurately judge the traceability permission of the node for any batch of goods, optionally in the present invention, the identification resolution system looks up the private key configuration information of the corresponding node according to the received traceability request message to determine whether the node has the decryption permission, including:

[0013] In response to receiving a traceability request sent by the information traceability terminal on the logistics link node, the identification resolution system determines the private key in the key pair corresponding to the goods ID according to the encrypted traceability code in the traceability request and the binding relationship between the goods, the encrypted traceability code, and the key pair, and matches the determined private key with the private keys already configured in the private key configuration information of the information traceability terminal node. If the match is successful, it is judged that the node has the decryption permission; otherwise, it is judged that the node does not have the decryption permission.

[0014] Further, if the node has the decryption permission, the goods logistics information bound to the traceability code is returned to the information traceability terminal, including: for the node determined to have the decryption permission, the identification and resolution system sends the logistics information bound to the determined goods ID to the information traceability terminal on the node.

[0015] Preferably, if the node has the decryption permission, the goods logistics information bound to the traceability code is returned to the information traceability terminal, including: for the node determined to have the decryption permission, the identification and resolution system decrypts the encrypted traceability code in the traceability request using the corresponding private key in the matched node private key configuration information, compares the decrypted traceability code with the traceability code corresponding to the determined goods ID, and if the two are the same, sends the logistics information bound to the goods to the information traceability terminal on the node.

[0016] The traceability request verification and information return mechanism of the present invention can either adopt the above-mentioned former more efficient form or the above-mentioned latter more secure form, which can avoid misjudgment of node permissions caused by errors in the private key matching process or other reasons, and can promptly terminate the return of traceability request data without actual permission, ensuring data security.

[0017] Further, in order to make the permission management in the logistics link more flexible, optionally, the traceability information generation end is further configured to send a permission configuration change request to the identification and resolution system, and the permission configuration change request includes goods ID information;

[0018] The identification and resolution system responds to receiving the permission configuration change request and reconfigures the private key corresponding to the goods for the node with permission change.

[0019] As a feasible implementation manner, the permission configuration change request may carry the node information with permission change and the permission flag bit information before and after the node permission change. The identification and resolution system can, according to the permission flag bits before and after the node permission change, delete the private key in the node permission configuration information that originally had traceability permission but no longer has it after the change, and write the private key corresponding to the goods ID into the node permission configuration information that originally did not have traceability permission but has it after the change. Thus, the traceability permission management of the initial node in the logistics link for each node in the entire logistics link can be realized, and the management takes effect immediately.

[0020] Optionally, the initial goods information sent by the traceability information generation end to the identification and resolution system includes at least one or more of the following: the storage location of the goods in and out of the warehouse, the operator, the operation time, and the goods status information.

[0021] Optionally, the node permission configuration information sent by the traceability information generation end to the identification and resolution system includes the node composition architecture information covered by the goods logistics link and the traceability permission configuration information corresponding to the nodes.

[0022] Optionally, the identification resolution system uses the SM9 identification cryptography algorithm to generate a key pair for encrypting and decrypting the goods traceability code. The SM9 identification cryptography algorithm is a reliable data protection method that is not easily tampered with or cracked. Although it adds an encryption / decryption step and takes a certain amount of time, since the length of the traceability code is very short, it will not cause waste of working time, but greatly improves data security.

[0023] In a second aspect, the present invention provides a logistics information traceability method, which is executed by an identification resolution system. The method includes:

[0024] Receiving the initial goods information and node permission configuration information sent by the initial node of the logistics link,

[0025] Generating a traceability code and a key pair according to the initial goods information, encrypting the traceability code using the public key in the key pair, and recording the binding relationship between the goods ID, the traceability code, the encrypted traceability code, the public key pair, and the goods logistics information;

[0026] Allocating the private key in the key pair to the private key configuration information of each node with decryption permission according to the node permission configuration information;

[0027] Receiving a logistics information update request sent by a node in the logistics link, obtaining the encrypted traceability code data and the goods logistics information to be updated, determining the bound goods ID according to the encrypted traceability code, and updating the goods logistics information to be updated to the goods logistics information bound to the determined goods ID;

[0028] Receiving a traceability request sent by a node in the logistics link, obtaining the encrypted traceability code data and the node information, searching for the private key configuration information of the corresponding node to determine whether the node has decryption permission, and if the node has decryption permission, returning the goods logistics information bound to the traceability code to the information traceability terminal.

[0029] Optionally, the searching for the private key configuration information of the corresponding node to determine whether the node has decryption permission includes:

[0030] According to the encrypted traceability code in the traceability request and the binding relationship between the goods, the encrypted traceability code, and the key pair, determining the goods ID and the corresponding private key in the key pair, and matching the determined private key with the private key already configured in the node private key configuration information corresponding to the node. If the match is successful, it is determined that the node has decryption permission; otherwise, it is determined that the node does not have decryption permission.

[0031] Further, the step of, if the node has decryption permission, returning the goods logistics information bound to the traceability code to the information traceability terminal includes: for the node determined to have decryption permission, the identification resolution system sends the logistics information bound to the determined goods ID to the information traceability terminal on the node;

[0032] Alternatively, for the nodes determined to have decryption permissions, the identification and resolution system decrypts the encrypted traceability code in the traceability request using the corresponding private key in the node private key configuration information that is matched, compares the decrypted traceability code with the traceability code corresponding to the determined goods ID, and if the two are the same, sends the logistics information bound to the goods to the information traceability terminal on the node.

[0033] Thirdly, the present invention provides an identification and resolution system, including:

[0034] An initial information acquisition module, configured to receive the initial goods information and node permission configuration information sent by the initial node in the logistics link;

[0035] A traceability code generation module, configured to generate a traceability code and a key pair according to the initial goods information, encrypt the traceability code using the public key in the key pair, and record the binding relationship between the goods ID and the traceability code, the encrypted traceability code, the key pair, and the goods logistics information;

[0036] A permission configuration module, configured to update the private key in the key pair to the private key configuration information of each node with decryption permissions according to the node permission configuration information;

[0037] A logistics information update module, configured to receive a logistics information update request sent by a node in the logistics link, obtain the encrypted traceability code data and the goods logistics information to be updated, determine the bound goods ID according to the encrypted traceability code, and update the goods logistics information to be updated to the goods logistics information bound to the determined goods ID;

[0038] And a traceability request response module, configured to receive a traceability request sent by a node in the logistics link, obtain the encrypted traceability code data and node information, search for the private key configuration information of the corresponding node to determine whether the node has decryption permissions, and if the node has decryption permissions, return the goods logistics information bound to the traceability code to the information traceability terminal.

[0039] Beneficial effects

[0040] The present invention combines the traceability code with data encryption technology and uses the NFC chip to carry the encrypted traceability code, which can realize the secure management of goods logistics data. Each node in the logistics link can obtain the encrypted traceability code through near-field wireless communication, and then interact with the identification and resolution system to realize the traceability of logistics information or the update of logistics information. The operation of each link is convenient, the timeliness is good, and the user experience can be improved.

[0041] Meanwhile, in the private key matching and traceability information return mechanism during the traceability process of the present invention, the encrypted traceability code is decrypted using the matched node private key, realizing a reliable data protection method that is not easily tampered with or cracked, and helping to identify defective goods and incorrect logistics information in the logistics link. BRIEF DESCRIPTION OF THE DRAWINGS

[0042] Figure 1 The figure shows a schematic structural diagram of an embodiment of the logistics information traceability system of the present invention;

[0043] Figure 2 The figure shows a schematic working process diagram of the logistics information traceability system in an embodiment of the present invention;

[0044] Figure 3 The figure shows a schematic flow diagram of an embodiment of the logistics information traceability method executed by the identification resolution system. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0045] The following is further described in conjunction with the accompanying drawings and specific embodiments.

[0046] Embodiment 1

[0047] This embodiment introduces a logistics information traceability system. Referring to Figure 1 , the system includes a traceability information generation end, a traceability information update end, an information traceability terminal, and an identification resolution system.

[0048] The traceability information generation end is set on the initial node in the goods logistics link. The traceability information update end and the information traceability terminal are set on other nodes in the goods logistics link. Among them, the traceability information update end can be set on each logistics link node where new logistics information may be generated.

[0049] An NFC module for recording the encrypted traceability code of the goods is provided on the goods. A goods management center is provided in the identification resolution system. When new goods information is received, a unique goods ID is assigned to the goods batch, that is, each batch of goods corresponds to a goods ID, and each goods ID corresponds to a traceability code. The generation and encryption of the traceability code are both completed by the identification resolution system.

[0050] Referring to Figure 2 , the traceability information generation end accesses the identification resolution system at the starting node of the goods logistics, and sends the initial goods information and the node permission configuration information corresponding to the goods batch to the identification resolution system. The initial goods information includes, but is not limited to, the storage location of the goods in and out of the warehouse, the operator, the operation time, and the goods status information. The node permission configuration information includes the traceability permission configuration information of the node for the current batch of goods, and may also include the node composition architecture information covered by the current batch of goods logistics link. Of course, the node composition architecture information covered by the goods logistics link can also be determined by the identification resolution system according to the pre-registered logistics organization architecture.

[0051] The identification resolution system sets up a traceability center. In the traceability center, the national top-level node assigns a unique traceability code to each batch of goods according to the rule of "prefix number + ID information + serial number", and then generates a key pair for each batch of goods using the SM9 algorithm. The identification resolution system encrypts the traceability code using the public key in the key pair, returns the encrypted traceability code to the traceability information generation end, and records the binding relationship between the goods, the traceability code, the encrypted traceability code, the key pair, and the goods logistics information. The identification resolution system also sets up a permission management center. In the permission management center, each logistics node is respectively set with private key configuration information stored. After the identification resolution system receives the node permission configuration information sent along with the initial information of the goods, the permission management center writes the private key in the key pair corresponding to the goods batch into the private key configuration information of the node with decryption permission according to the node permission configuration information. Thus, when there are overlaps or intersections in the logistics links of different batches of goods, the private keys corresponding to multiple batches of goods may be written into the node permission configuration information of a single node.

[0052] At the initial node of the goods logistics, the traceability information generation end obtains the encrypted traceability code of the goods from the identification resolution system and writes the encrypted traceability code into the NFC module that flows with the goods.

[0053] In order to make the permission management in the logistics link more flexible, in this embodiment, the traceability information generation end can send a permission configuration change request to the identification resolution system. The permission configuration change request includes the goods ID, the node information where the permission change occurs, and the permission flag bit information before and after the node permission change. The identification resolution system responds to receiving the permission configuration change request and reconfigures the private key corresponding to the goods for the node where the permission change occurs, including: deleting the private key in the node permission configuration information that originally had traceability permission but no longer has traceability permission after the change, and writing the private key corresponding to the goods ID into the node permission configuration information that originally did not have traceability permission but has traceability permission after the change. Thus, the traceability permission management of all nodes in the entire logistics link can be realized at the initial node of the logistics link, and the management takes effect immediately.

[0054] The traceability information update end is used to identify the encrypted traceability code data recorded by the NFC module, send a logistics information update request to the identification resolution system based on the identified data, transmit the goods logistics information at the node where it is located to the identification resolution system, and request the identification resolution system to update the logistics information bound to the goods corresponding to the traceability code.

[0055] Reference Figure 3As shown in the figure, when the identification resolution system receives a logistics information update request, it first determines the goods ID according to the encrypted traceability code in the logistics information update request and the binding relationship between the recorded goods, the encrypted traceability code, and the key pair, and then updates the goods logistics information sent by the node to the logistics information bound to the goods ID. Even if the node where the traceability information update end is located does not have the decryption permission, due to the recorded binding relationship between the goods and the encrypted traceability code in the identification resolution system, the accurate update of the node goods logistics information can still be achieved.

[0056] The information traceability terminal is used to identify the encrypted traceability code data recorded by the NFC module, send a traceability request message to the identification resolution system based on the encrypted traceability code data, and the identification resolution system looks up the private key configuration information of the corresponding node according to the received traceability request message to determine whether the node has the decryption permission. If the node has the decryption permission, the goods logistics information bound to the traceability code is returned to the information traceability terminal.

[0057] For the information traceability terminal, a certain node may be configured as a node with traceability permission for multiple batches of goods, that is, the private key configuration information of a certain node may be configured with the private keys corresponding to multiple batches of goods. In order to quickly and accurately determine the traceability permission of the node for any batch of goods, in this embodiment, when the identification resolution system responds to receiving the traceability request message, it first determines the goods ID and the private key in the corresponding key pair according to the encrypted traceability code in the traceability request and the recorded binding relationship between the goods, the encrypted traceability code, and the key pair, and matches the determined private key with the private keys already configured in the private key configuration information of the information traceability terminal node. If the match is successful, it is determined that the node has the decryption permission, otherwise it is determined that the node does not have the decryption permission.

[0058] For the node determined to have the decryption permission, the identification resolution system can directly send the logistics information bound to the determined goods ID to the information traceability terminal on the node. This traceability request verification and information return mechanism is relatively fast and efficient.

[0059] However, to ensure information security and avoid misjudgment of node permissions caused by errors in the private key matching process or other reasons, in this embodiment, for the node determined to have the decryption permission, the identification resolution system uses the corresponding private key in the matched node private key configuration information to decrypt the encrypted traceability code in the traceability request, compares the decrypted traceability code with the traceability code corresponding to the determined goods ID, and if the two are the same, sends the logistics information bound to the goods to the information traceability terminal on the node. It can timely terminate the return of traceability request data without actual permission and ensure data security.

[0060] In the present invention, the information traceability terminal and the traceability information update end can be integrally designed as the same node terminal, which is set on the intermediate node or the end node of the goods logistics link.

[0061] The node terminal integrates two functions of information traceability and information update, and can achieve: identifying the encrypted traceability code data recorded by the NFC module, sending a traceability request to the identification and resolution system based on the encrypted traceability code data, and receiving the goods logistics information returned by the identification and resolution system after successful decryption permission judgment in response to the received traceability request; and transmitting the goods logistics information on the node where it is located to the identification and resolution system based on the encrypted traceability code data, and requesting the identification and resolution system to update the logistics information bound to the corresponding traceability code of the goods. It enables the nodes in the logistics link to not only trace the goods logistics information, but also update the logistics information.

[0062] Embodiment 2

[0063] Based on the same inventive concept as Embodiment 1, this embodiment introduces a method for tracing logistics information, which can be executed by the identification and resolution system in the system of Embodiment 1. Refer to Figure 3 , the method includes:

[0064] Receiving the initial goods information and node permission configuration information sent by the initial node in the logistics link,

[0065] Generating a traceability code and a key pair according to the initial goods information, encrypting the traceability code with the public key in the key pair, and recording the binding relationship between the goods ID and the traceability code, the encrypted traceability code, the key pair, and the goods logistics information;

[0066] Updating the private key in the key pair to the private key configuration information of each node with decryption permission according to the node permission configuration information;

[0067] Receiving a logistics information update request sent by a node in the logistics link, obtaining the encrypted traceability code data and the goods logistics information to be updated, determining the bound goods ID according to the encrypted traceability code, and updating the goods logistics information to be updated to the goods logistics information bound to the determined goods ID;

[0068] Receiving a traceability request sent by a node in the logistics link, obtaining the encrypted traceability code data and the node information, searching for the private key configuration information of the corresponding node to determine whether the node has decryption permission, and if the node has decryption permission, returning the goods logistics information bound to the traceability code to the information traceability terminal.

[0069] The above-mentioned searching for the private key configuration information of the corresponding node to determine whether the node has decryption permission includes:

[0070] According to the encrypted traceability code in the traceability request and the binding relationship between the goods, the encrypted traceability code, and the key pair, determine the goods ID and the private key in the corresponding key pair. Match the determined private key with the private key already configured in the node private key configuration information corresponding to the node. If the match is successful, it is determined that the node has decryption permission; otherwise, it is determined that the node does not have decryption permission.

[0071] For the nodes determined to have decryption permission, the identification resolution system can send the logistics information bound to the determined goods ID to the information traceability terminal on the node. However, to further ensure data security, in this embodiment, for the nodes determined to have decryption permission, the identification resolution system decrypts the encrypted traceability code in the traceability request using the corresponding private key in the matched node private key configuration information, and compares the decrypted traceability code with the traceability code corresponding to the determined goods ID. If the two are the same, the logistics information bound to the goods is sent to the information traceability terminal on the node. This can avoid misjudgment of node permissions caused by errors in the private key matching process or other reasons, and can timely terminate the return of traceability request data without actual permission, thus ensuring data security.

[0072] Embodiment 3

[0073] Based on the same inventive concept as Embodiment 1 and Embodiment 2, this embodiment introduces an identification resolution system, including:

[0074] An initial information acquisition module, configured to receive the initial goods information and node permission configuration information sent by the initial node in the logistics link;

[0075] A traceability code generation module, configured to generate a traceability code and a key pair according to the initial goods information, encrypt the traceability code using the public key in the key pair, and record the binding relationship between the goods ID, the traceability code, the encrypted traceability code, the key pair, and the goods logistics information;

[0076] A permission configuration module, configured to update the private key in the key pair to the private key configuration information of each node with decryption permission according to the node permission configuration information;

[0077] A logistics information update module, configured to receive a logistics information update request sent by a node in the logistics link, obtain the encrypted traceability code data and the goods logistics information to be updated, determine the bound goods ID according to the encrypted traceability code, and update the goods logistics information to be updated to the goods logistics information bound to the determined goods ID;

[0078] And, a traceability request response module, configured to receive a traceability request sent by a node in the logistics link, obtain encrypted traceability code data and node information, find the private key configuration information of the corresponding node to determine whether the node has decryption permission, and if the node has decryption permission, return the goods logistics information bound to the traceability code to the information traceability terminal.

[0079] For the specific function implementation of each of the above function modules, refer to the relevant content in Embodiment 1 and Embodiment 2.

[0080] Those skilled in the art should understand that the embodiments of the present application can be provided as a method, a system, or a computer program product. Therefore, the present application can adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware aspects. Moreover, the present application can adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0081] The present application is described with reference to the flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or block in the flowchart and / or block diagram can be implemented by computer program instructions, and the combination of the processes and / or blocks in the flowchart and / or block diagram can also be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing devices to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing devices generate a device for realizing the functions specified in one Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0082] These computer program instructions can also be stored in a computer-readable memory that can direct a computer or other programmable data processing device to work in a specific manner, so that the instructions stored in the computer-readable memory generate a manufactured article including an instruction device, and the instruction device realizes the functions specified in one Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0083] These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to generate a computer-implemented process, and thus the instructions executed on the computer or other programmable device provide steps for realizing the functions specified in one Figure 1 one process or multiple processes and / or blocks Figure 1 one block or multiple blocks.

[0084] The embodiments of the present invention have been described above in conjunction with the accompanying drawings. However, the present invention is not limited to the above specific embodiments. The above specific embodiments are merely illustrative rather than restrictive. Under the inspiration of the present invention, those of ordinary skill in the art can also make many forms without departing from the spirit of the present invention and the scope protected by the claims. All of these fall within the protection scope of the present invention.

Claims

1. A logistics information traceability system, characterized in that, It includes a traceability information generation end, a traceability information update end, an information traceability terminal, and an identification and resolution system. The traceability information generation end is set at the initial node in the goods logistics link, and an NFC module for recording the encrypted traceability code of the goods is provided on the goods; The traceability information generation end is used to access the identification and resolution system and send the initial information of the goods and the node permission configuration information to the identification and resolution system; The identification and resolution system generates a traceability code and a key pair according to the initial information of the goods, encrypts the traceability code with the public key in the key pair, records the binding relationship between the goods and the traceability code, the encrypted traceability code, the key pair, and the goods logistics information, and configures the private key in the key pair into the private key configuration information of each node with decryption permission according to the node permission configuration information; the traceability information generation end obtains the encrypted traceability code of the goods from the identification and resolution system and writes the encrypted traceability code into the NFC module; The traceability information update end is used to identify the encrypted traceability code data recorded by the NFC module, access the identification and resolution system based on the identified data, transmit the goods logistics information at the current node to the identification and resolution system, and request the identification and resolution system to update the logistics information bound to the goods corresponding to the traceability code; The information traceability terminal is used to identify the encrypted traceability code data recorded by the NFC module, send a traceability request information to the identification and resolution system based on the encrypted traceability code data. The identification and resolution system responds to the traceability request sent by the information traceability terminal at the logistics link node, determines the goods ID and the corresponding private key in the key pair according to the encrypted traceability code in the traceability request and the binding relationship between the goods and the encrypted traceability code and the key pair, matches the determined private key with the private key already configured in the private key configuration information of the information traceability terminal node. If the match is successful, it is determined that the node has decryption permission, otherwise it is determined that the node does not have decryption permission; for the node determined to have decryption permission, the identification and resolution system sends the logistics information bound to the determined goods ID to the information traceability terminal on the node. Or, for the node determined to have decryption permission, the identification and resolution system decrypts the encrypted traceability code in the traceability request with the corresponding private key in the matched node private key configuration information, compares the decrypted traceability code with the traceability code corresponding to the determined goods ID, and if the two are the same, sends the logistics information bound to the goods to the information traceability terminal on the node; The traceability information generation end is also used to send a permission configuration change request to the identification and resolution system, and the permission configuration change request includes the goods ID information, the node information where the permission change occurs, and the permission flag information before and after the node permission change; The identification and resolution system responds to receiving the permission configuration change request, reconfigures the private key corresponding to the goods for the node where the permission change occurs, deletes the private key corresponding to the goods ID in the node permission configuration information of the node that originally had traceability permission but no longer has traceability permission after the change according to the permission flag before and after the node permission change, and writes the private key corresponding to the goods ID into the node permission configuration information of the node that originally did not have traceability permission but has traceability permission after the change.

2. The logistics information traceability system according to claim 1, wherein, The information traceability terminal and the traceability information update terminal are integrated and designed as a node terminal, which is set at the intermediate node or the end node of the goods logistics link; The node terminal is configured to: identify the encrypted traceability code data recorded by the NFC module, send a traceability request to the identification and resolution system based on the encrypted traceability code data, and receive the goods logistics information returned by the identification and resolution system after successfully judging the decryption permission in response to receiving the traceability request; And transmit the goods logistics information at the current node to the identification and resolution system based on the encrypted traceability code data, and request the identification and resolution system to update the logistics information bound to the corresponding traceability code of the goods.

3. The logistics information traceability system according to claim 1, wherein, The initial goods information sent by the traceability information generation end to the identification and resolution system includes at least one or more of the warehouse location, operator, operation time, and goods status information of the goods in and out of the warehouse; The node permission configuration information sent by the traceability information generation end to the identification and resolution system includes the node composition architecture information covered by the goods logistics link and the traceability permission configuration information corresponding to the nodes; The identification and resolution system uses the SM9 identification password algorithm to generate a key pair for encrypting and decrypting the goods traceability code.

4. A logistics information traceability method, which is executed by an identification resolution system, characterized in that the method Including: Receiving the initial goods information and node permission configuration information sent by the initial node of the logistics link; Generating a traceability code and a key pair according to the initial goods information, encrypting the traceability code with the public key in the key pair, and recording the binding relationship between the goods ID and the traceability code, the encrypted traceability code, the key pair, and the goods logistics information; Updating the private key in the key pair to the private key configuration information of each node with decryption permission according to the node permission configuration information; Receiving a logistics information update request sent by a node in the logistics link, obtaining the encrypted traceability code data and the goods logistics information to be updated, determining the bound goods ID according to the encrypted traceability code, and updating the goods logistics information to be updated to the goods logistics information bound to the determined goods ID; Receiving a traceability request sent by a node in the logistics link, obtaining the encrypted traceability code data and node information, determining the goods ID and the corresponding private key in the key pair according to the encrypted traceability code in the traceability request and the binding relationship between the goods, the encrypted traceability code, and the key pair, matching the determined private key with the private key already configured in the node private key configuration information corresponding to the node. If the match is successful, it is judged that the node has decryption permission, otherwise it is judged that the node does not have decryption permission; for the node judged to have decryption permission, the identification and resolution system sends the logistics information bound to the determined goods ID to the information traceability terminal on the node; or, for the node judged to have decryption permission, the identification and resolution system uses the corresponding private key in the matched node private key configuration information to decrypt the encrypted traceability code in the traceability request, compares the decrypted traceability code with the traceability code corresponding to the determined goods ID, and if the two are the same, sends the logistics information bound to the goods to the information traceability terminal on the node; Receiving a permission configuration change request sent by the traceability information generation end, where the permission configuration change request includes the goods ID information, the node information where the permission change occurs, and the permission flag information before and after the node permission change; Upon receiving a permission configuration change request, the identification resolution system reconfigures the private key corresponding to the goods for the nodes with permission changes. According to the permission flag bits before and after the node permission changes, it deletes the private key corresponding to the goods ID in the node permission configuration information of the nodes that originally had traceability permissions but no longer have them after the change, and writes the private key corresponding to the goods ID into the node permission configuration information of the nodes that originally did not have traceability permissions but have them after the change.

5. An identification resolution system, characterized in that, Including: An initial information acquisition module, configured to receive the initial goods information and node permission configuration information sent by the initial node in the logistics link; A traceability code generation module, configured to generate a traceability code and a key pair based on the initial goods information, encrypt the traceability code using the public key in the key pair, and record the binding relationship between the goods ID, the traceability code, the encrypted traceability code, the key pair, and the goods logistics information; A permission configuration module, configured to update the private key in the key pair to the private key configuration information of each node with decryption permissions according to the node permission configuration information; And, receive a permission configuration change request sent by the traceability information generation end, where the permission configuration change request includes goods ID information, node information with permission changes, and permission flag bit information before and after the node permission changes; Upon receiving a permission configuration change request, the identification resolution system reconfigures the private key corresponding to the goods for the nodes with permission changes. According to the permission flag bits before and after the node permission changes, it deletes the private key corresponding to the goods ID in the node permission configuration information of the nodes that originally had traceability permissions but no longer have them after the change, and writes the private key corresponding to the goods ID into the node permission configuration information of the nodes that originally did not have traceability permissions but have them after the change; A logistics information update module, configured to receive a logistics information update request sent by a node in the logistics link, obtain the encrypted traceability code data and the goods logistics information to be updated, determine the bound goods ID based on the encrypted traceability code, and update the goods logistics information to be updated to the goods logistics information bound to the determined goods ID; And, a traceability request response module, which is configured to receive a traceability request sent by a node in the logistics link, obtain encrypted traceability code data and node information. The identification and resolution system responds to the traceability request sent by the information traceability terminal on the logistics link node, determines the private key in the key pair corresponding to the goods ID and the goods according to the encrypted traceability code in the traceability request and the binding relationship between the goods, the encrypted traceability code and the key pair, and matches the determined private key with the private key already configured in the private key configuration information of the information traceability terminal node. If the match is successful, it is determined that the node has decryption permission; otherwise, it is determined that the node does not have decryption permission. For a node determined to have decryption permission, the identification and resolution system sends the logistics information bound to the determined goods ID to the information traceability terminal on the node; or, for a node determined to have decryption permission, the identification and resolution system decrypts the encrypted traceability code in the traceability request using the corresponding private key in the matched node private key configuration information, compares the decrypted traceability code with the traceability code corresponding to the determined goods ID, and if the two are the same, sends the logistics information bound to the goods to the information traceability terminal on the node.

Images