Blockchain-based Cold Chain Data Non-deniable Authentication Method, Device and Equipment

Abstract

The present invention provides a cold chain data non-repudiation authentication method, device and equipment based on blockchain, which is used to solve the problems such as difficult data verification and easy signature repudiation in the process of sharing and transmitting cold chain logistics data between different cold chain logistics institutional entities. The method includes: establishing a cold chain logistics data security sharing system including users and institutions for production, storage, transportation, detection, processing and consumption by using consortium chain technology; each system node in the cold chain logistics data security sharing system records and uploads cold chain logistics related data and operation records, and registers them into the distributed ledger of the cold chain logistics data security sharing system; the transactions in the distributed ledger include non-repudiable signatures of the system nodes related to the records; the signer cannot deny a legally signed signature that has passed verification. The method of the present invention can realize secure non-repudiation authentication in the process of distributed storage of cold chain logistics data and enhance the security of cold chain food transportation.

Description

Technical Field

[0001] The present invention relates to the technical field of blockchain, and particularly to a non-repudiation authentication method, device and equipment for cold chain data based on blockchain. Background Art

[0002] Aiming at the defects of the centralized management mode of the traditional logistics system, blockchain technology is an effective distributed solution. By using a distributed, decentralized and trustless technical solution to solve security problems such as data islands, information loss and privacy leakage, the trust of the system is no longer the designer or a third-party credit institution, but based on the trust in the blockchain technology itself. By storing the whole-process information of food from production, processing, transportation to sales through blockchain technology, food can be traced in an efficient and accurate manner, thereby ensuring the safety and reliability of food, solving the problems caused by food safety, and improving the trust of food.

[0003] The distributed management and organization of cold chain logistics data can break many restrictions on data by the traditional centralized management mode, thus promoting the mutual benefit and sharing of data, and improving the overall coordination and efficiency of the cold chain logistics system. Secondly, the openness and verifiability of blockchain transactions can ensure the authenticity and accuracy of cold chain logistics data, and prevent the manipulation and destruction by malicious third parties. In addition, the form of anonymous transaction addresses can strictly protect the privacy and security of users without affecting the statistical characteristics of cold chain logistics data. However, based on the cold chain logistics data security sharing system of blockchain, how to quickly determine the relevant responsible parties when cold chain food safety problems and disputes occur, and prevent the cold chain logistics-related institutions and users from denying the signatures of the transaction data they signed, is an important basis for ensuring the safety of frozen food. Summary of the Invention

[0004] Aiming at the problems of difficult data verification and easy signature repudiation in the process of sharing and transmitting cold chain logistics data between different cold chain logistics institutional entities, the present invention proposes a non-repudiation authentication method, device and equipment for cold chain data based on blockchain, which promotes the safe and efficient sharing and use of cold chain logistics data between relevant logistics institutional entities;

[0005] The technical solution of the present invention is implemented as follows:

[0006] A non-repudiation authentication method for cold chain data based on blockchain, the steps of which are as follows:

[0007] S100. Establish a cold chain logistics data security sharing system including users and institutions for production, storage, transportation, detection, processing and consumption by using consortium chain technology;

[0008] S200. Each system node in the cold chain logistics data security sharing system records and uploads cold chain logistics-related data and operation records, and registers them in the distributed ledger of the cold chain logistics data security sharing system;

[0009] S300. The transactions in the distributed ledger include the undeniable signatures of the system nodes related to the records;

[0010] S400. The signer cannot deny a legally verified signature.

[0011] The cold chain logistics data security sharing system refers to a distributed data security sharing system composed of different cold chain logistics-related institutions and users using the consortium chain technology; the cold chain logistics data security sharing system includes consensus nodes, system nodes and other nodes; consensus nodes refer to different cold chain logistics institutions, which participate in the management and maintenance of the system; system nodes refer to cold chain logistics-related entities and users, which upload, manage and trade their own cold chain logistics data; other nodes refer to regulatory and supervisory agencies.

[0012] The undeniable signature includes four steps: key generation, signature generation, signature verification, and signature confirmation / denial.

[0013] The key generation includes:

[0014] Randomly select a lattice and its corresponding vertical lattice Λ ⊥ (A) = {x ∈ Z m | xA = 0 (mod 2q)} of linearly independent short vector groups where and AS = A(-S) = qI n (mod 2q);

[0015] Randomly select the seed parameter sd and calculate H = h1(sd);

[0016] Randomly select the vector parameter Calculate X = Hx T mod 2q;

[0017] Output (A, H, X) as the public key and (S, x) as the private key for storage.

[0018] The signature generation includes:

[0019] For the message msg to be signed, calculate M = h1(msg);

[0020] Calculate e1 ← h2(X + Aymod q, M), e2 ← y + e1S, and e3 ← Mx T mod 2q; finally, output the signature e→(e1, e2, e3).

[0021] The signature verification includes:

[0022] Verify ||e2|| > W or ||e2|| ∞ > q / 4, then reject the signature, where

[0023] Verify whether e1 ← h2(X + Ae2 - qe1 mod 2q, M) is satisfied, otherwise reject the signature.

[0024] The signature confirmation / rejection includes:

[0025] The signer and the verifier calculate X = Hx T mod 2q and M = h1(msg);

[0026] The signer selects π → (1, 2,.., m) and calculates C1 = h1(π||Hu T mod 2q), C2 = h1(π(u)), C3 = h1(π(u + x)) and C4 = h1(π||Mu T mod 2q) as its own commitments;

[0027] The verifier sets a challenge c ∈ {0, 1, 2} and sends it to the signer; the signer responds to the verifier's challenge. For challenge c = 0, return π and u; for challenge c = 1, return π and u + x; for challenge c = 2, return π(u) and π(x);

[0028] The verifier verifies the signer's commitments according to the returned challenge results. For challenge c = 0, verify whether C1, C2 and C4 are correct; for challenge c = 1, verify whether C1, C3 and C4 are correct, and confirm the signature when C4 = h1(π||M(u + x) T - e3 mod 2q), otherwise reject; for challenge c = 2, verify C2, C3 and

[0029] A blockchain - based cold - chain data non - repudiation authentication device includes a computer - readable storage medium and a processor, and the computer - readable storage medium and the processor load and execute a blockchain - based cold - chain data non - repudiation authentication method.

[0030] The computer - readable storage medium stores a computer program, and the computer program includes program instructions, and the program instructions are loaded and executed by the processor to execute a blockchain - based cold - chain data non - repudiation authentication method.

[0031] A blockchain - based cold - chain data non - repudiation authentication device includes a data collection module, a data signature module, a signature verification module and a signature confirmation / rejection module;

[0032] Data collection module: Records formed by aggregating cold chain logistics data through various different data collection means;

[0033] Data signature module: Both data collectors and operators need to sign the collected data and upload it to the cold chain logistics data security sharing system based on the blockchain;

[0034] Signature verification module: The verifier verifies the validity of the signature and gives a rejection or acceptance;

[0035] Signature confirmation / rejection module: The signer and the verifier interact to confirm the signature. If the verification passes, the cold chain logistics data transaction with the signature is accepted; if the verification fails, the transaction is rejected.

[0036] Compared with the prior art, the beneficial effects produced by the present invention are as follows:

[0037] 1) The present invention uses a consortium blockchain to establish a cold chain logistics data security sharing system, breaks through the barrier of non-interoperability of data among cold chain logistics-related institutions, establishes a distributed cold chain logistics data management and sharing system, improves the secure storage and sharing capabilities of data, and realizes the distributed secure storage and sharing of logistics data;

[0038] 2) A distributed accounting method is established. Cold chain logistics data and operation records are all recorded on a public blockchain ledger, ensuring the immutability and traceability of cold chain logistics data, and effectively preventing the problems of accidental data loss and tampering;

[0039] 3) A non-denial mechanism for cold chain logistics data transaction signatures is designed, including that data transactions legally signed by cold chain logistics-related institutions and users cannot be denied, preventing cold chain logistics-related institutions and users from denying the signatures of the transaction data they have signed, and realizing non-deniable authentication of traceable identities. This not only protects the security of cold chain logistics data and user information, but also provides non-deniable identity authentication for cold chain food safety issues and disputes, etc. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required for the description of the embodiments or the prior art. Obviously, the following drawings are only some embodiments of the present invention. For those of ordinary skill in the art, without creative efforts, other drawings can be obtained based on these drawings.

[0041] Figure 1 It is a flowchart of the present invention;

[0042] Figure 2System model diagram of the cold chain logistics data security sharing system based on blockchain of the present invention;

[0043] Figure 3 Distributed sharing model of cold chain logistics data of the present invention;

[0044] Figure 4 Flow chart of consistency verification for cold chain logistics data sharing transactions of the present invention;

[0045] Figure 5 Module diagram of a non-repudiation authentication device for cold chain logistics data of the present invention. Specific implementation manner

[0046] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. All other embodiments obtained by those of ordinary skill in the art based on the embodiments of the present invention without creative efforts shall fall within the protection scope of the present invention.

[0047] Embodiment 1, as Figure 1 shown, a non-repudiation authentication method for cold chain data based on blockchain, the steps are as follows:

[0048] S100. Use consortium blockchain technology to establish a cold chain logistics data security sharing system including users and institutions such as production, storage, transportation, inspection, processing, and consumption; the cold chain logistics data security sharing system refers to a distributed data security sharing system formed by different cold chain logistics-related institutions and users using consortium blockchain technology; the cold chain logistics data security sharing system includes consensus nodes, system nodes, and other nodes; consensus nodes refer to different cold chain logistics institutions, which participate in the management and maintenance of the system; system nodes refer to cold chain logistics-related entities and users, which upload, manage, and trade their own cold chain logistics data; other nodes refer to regulatory and supervision institutions.

[0049] S200. Each system node in the cold chain logistics data security sharing system records and uploads cold chain logistics-related data and operation records, and registers them in the distributed ledger of the cold chain logistics data security sharing system;

[0050] S300. The transactions in the distributed ledger include non-repudiable signatures of the system nodes related to the records;

[0051] S400. The signer cannot deny a legally signed signature that has passed verification.

[0052] Figure 2Describes a cold chain logistics entity alliance and a distributed ledger composed of users and institutions such as production, storage, transportation, detection, processing, and consumption. The cold chain logistics data is collected by each user and institutional entity and uploaded to the blockchain-based cold chain logistics data security sharing system, and after being verified by the system consensus, a unified distributed trusted ledger across the network is formed. The distributed ledger provides a convenient channel and security guarantee for the sharing and transmission of cold chain logistics data among different user and institutional entities.

[0053] Figure 3 Describes the following cold chain logistics data sharing scenarios: the generation of cold chain logistics data, and all information related to the entire process from production to consumption of frozen foods, such as production, storage, transportation, detection, processing, and sales, is recorded and registered on the chain; the cross-institutional sharing of cold chain logistics data, and the shared cold chain logistics data can be transmitted among different institutional entities and user nodes in the blockchain-based cold chain logistics data security sharing system.

[0054] The cold chain logistics data is the relevant information generated during the process of frozen foods from production, transportation to final consumption, including production merchants, addresses, dates, operators, product attributes, test results, transportation, etc. The cold chain logistics data is stored in a local server, and its storage address and related operation records all form cold chain logistics data transactions. After the transactions are signed by cold chain logistics institutions and user entities, they are uploaded to the system ledger.

[0055] The cold chain logistics institutional entity refers to the relevant parties participating in the cold chain logistics process, including institutions such as production, storage, transportation, detection, processing, and sales. The institutional entities constitute the main system nodes of the blockchain-based cold chain logistics data security sharing system and participate in the maintenance of the system and the verification of transactions;

[0056] The cold chain logistics user refers to the relevant personnel in the cold chain logistics institutional entity, including breeding personnel, transportation personnel, detection personnel, processing personnel, sales personnel, and consumers, etc. The cold chain logistics users constitute the basic nodes of the blockchain-based cold chain logistics data security sharing system and participate in the generation of system records and the establishment of transactions.

[0057] The regulatory and supervision institutions, as the main nodes of the system, participate in the supervision and inspection of system transactions and user legality in the blockchain-based cold chain logistics data security sharing system.

[0058] The signature is a non-repudiable digital signature scheme, including signers and verifiers, etc. The signers and verifiers are both cold chain logistics institutions or user entities, and perform operations such as signing and verification on cold chain logistics data transactions. The scheme specifically includes four steps: key generation, signature generation, signature verification, and signature confirmation / denial. The specific process is as follows:

[0059] S301: The key generation process includes:

[0060] (1) Randomly select a lattice and its corresponding vertical lattice Λ ⊥ (A) = {x ∈ Z m | xA = 0 (mod 2q)} of linearly independent short vector groups where and AS = A(-S) = qI n (mod 2q);

[0061] (2) Randomly select the seed parameter sd, and calculate H = h1(sd);

[0062] (3) Randomly select the vector parameter Calculate X = Hx T mod 2q;

[0063] (4) Output (A, H, X) as the public key, and (S, x) as the private key for storage.

[0064] S302: The signature generation process includes:

[0065] (1) For the message msg to be signed, calculate M = h1(msg);

[0066] (2) Calculate e1 ← h2(X + Aymod q, M), e2 ← y + e1S, and e3 ← Mx T mod 2q; Finally, output the signature e→(e1, e2, e3).

[0067] S303: The signature verification process includes:

[0068] (1) Verify that ||e2|| > W or ||e2|| ∞ > q / 4, then reject the signature, where

[0069] (2) Verify whether e1 ← h2(X + Ae2 - qe1mod 2q, M) is satisfied, otherwise reject the signature.

[0070] S304: Signature confirmation / rejection includes:

[0071] (1) The signer and the verifier calculate X = Hx T mod 2q and M = h1(msg);

[0072] (2) The signer selects π→(1, 2,.., m) and Calculate C1 = h1(π||Hu Tmod 2q), C2 = h1(π(u)), C3 = h1(π(u + x)) and C4 = h1(π||Mu T uses (C1 = h1(π(u

[0073] (3) The verifier sets a challenge c ∈ {0, 1, 2} and sends it to the signer; the signer responds to the verifier's challenge. For challenge c = 0, returns π and u; for challenge c = 1, returns π and u + x; for challenge c = 2, returns π(u) and π(x);

[0074] (4) The verifier verifies the signer's commitment according to the returned challenge result. For challenge c = 0, verifies whether C1, C2, and C4 are correct; for challenge c = 1, verifies whether C1, C3, and C4 are correct, and confirms the signature when C4 = h1(π||M(u + x) T - e3 mod 2q), otherwise rejects; for challenge c = 2, verifies C2, C3, and

[0075] On Figure 2 the basis of the shared system described above, Figure 4 a process of network-wide consistency for registering shared transactions on the chain is given. The packaged transaction records go through processes such as verification and broadcasting, and are uploaded to the blockchain-based cold chain logistics data security sharing system described above.

[0076] The specific process is as follows:

[0077] S501: The index upload transaction and shared behavior transaction of cold chain logistics data are packaged into a temporary block and broadcast to the system verification nodes through the leader node in the verification nodes for verification;

[0078] S502: Each system node verifies the legality of the transaction, signs it, and sends the verification result to other nodes for verification;

[0079] S503: The system verification nodes mutually verify the legality of the transactions in the block;

[0080] S504: Returns the verification result to the leader node, and the leader node checks and verifies all the verification results;

[0081] S505: After the temporary block is verified by all system nodes, the leader node links it to the longest chain in the whole network and broadcasts it to all nodes of the blockchain-based cold chain logistics data security sharing system described above.

[0082] When the cold chain logistics data sharing transaction is uploaded to the chain, through the broadcasted transaction, when the temporary block where it is located passes the verification of all consensus nodes in the blockchain-based cold chain logistics data security sharing system and reaches a consensus, the transaction also completes the on-chain registration, and the transaction becomes an immutable record.

[0083] Example 2. Based on the sharing system, a blockchain-based cold chain data non-repudiation authentication device is proposed, which includes a computer-readable storage medium and a processor. The computer-readable storage medium and the processor load and execute the blockchain-based cold chain data non-repudiation authentication method. The computer-readable storage medium stores a computer program, and the computer program includes program instructions. The program instructions are loaded and executed by the processor to perform the blockchain-based cold chain data non-repudiation authentication method.

[0084] Example 3. On the basis of Figure 2 the sharing system, Figure 5 a blockchain-based cold chain data non-repudiation authentication device is given, which includes a data collection module, a data signature module, a signature verification module, and a signature confirmation / denial module.

[0085] Data collection module: Records formed by aggregating cold chain logistics data through a variety of different data collection means;

[0086] Data signature module: Both the data collector and the operator need to sign it and upload it to the blockchain-based cold chain logistics data security sharing system;

[0087] Signature verification module: The verifier verifies the validity of the signature and gives a rejection or acceptance;

[0088] Signature confirmation / denial module: The signer and the verifier interact to confirm the signature. If the verification passes, the cold chain logistics data transaction with the signature is accepted; if the verification fails, the transaction is rejected.

[0089] The above are only the preferred embodiments of the present invention and are not intended to limit the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A cold chain data non-repudiation authentication method based on blockchain, characterized in that, The steps are as follows: S100. Establish a cold chain logistics data security sharing system for users and institutions including production, storage, transportation, inspection, processing, and consumption using consortium blockchain technology; S200. Each system node in the cold chain logistics data security sharing system records and uploads cold chain logistics related data and operation records, and registers them in the distributed ledger of the cold chain logistics data security sharing system; S300. Transactions in the distributed ledger include undeniable signatures of the system nodes related to the records; S400. The signer cannot deny a legally verified signature; The undeniable signature includes four steps: key generation, signature generation, signature verification, and signature confirmation / denial; The key generation includes: Randomly select a lattice and its corresponding vertical lattice Λ ⊥ (A) = {x ∈ Z m | xA = 0 (mod 2q)} of linearly independent short vector groups where and AS = A(-S) = qI n (mod 2q); Randomly select a seed parameter sd, and calculate H = h1(sd); Randomly select vector parameters Calculate X = Hx T mod 2q; Output (A, H, X) as the public key, and (S, x) as the private key for storage; The signature generation includes: For the message msg to be signed, calculate M = h1(msg); Compute e1 ← h2(X + Aymodq, M), e2 ← y + e1S, and e3 ← Mx T mod2q; the final output is the signature e → (e1, e2, e3); The signature verification includes: Verify ||e2|| > W or ||e2|| ∞ > q / 4, then reject the signature, where η ∈ [1.1, 1.4]; Verify whether e1←h2(X + Ae2 - qe1 mod 2q, M) is satisfied, otherwise reject the signature; The signature confirmation / denial includes: The signer and verifier calculate X = Hx T mod 2q and M = h1(msg); The signer selects π→(1,2,..,m) and computes C1 = h1(π||Hu T mod 2q), C2 = h1(π(u)), C3 = h1(π(u + x)) and C4 = h1(π||Mu T mod 2q) as their commitments; The verifier sets a challenge c ∈ {0, 1, 2} and sends it to the signer; the signer responds to the verifier's challenge. For challenge c = 0, return π and u; for challenge c = 1, return π and u + x; for challenge c = 2, return π(u) and π(x); The verifier verifies the commitment of the signer according to the returned challenge result. For challenge c = 0, it verifies whether C1, C2, and C4 are correct; for challenge c = 1, it verifies whether C1, C3, and C4 are correct, and when C4 = h1(π||M(u + x) T -e3 mod 2q), it confirms the signature, otherwise it rejects; for challenge c = 2, it verifies C2, C3, and 2. The method for undeniable authentication of cold chain data based on blockchain according to claim 1, characterized in that The cold chain logistics data security sharing system refers to a distributed data security sharing system formed by different cold chain logistics related institutions and users using consortium blockchain technology; the cold chain logistics data security sharing system includes consensus nodes, system nodes, and other nodes; consensus nodes refer to different cold chain logistics institutions that participate in the management and maintenance of the system; system nodes refer to cold chain logistics related entities and users who upload, manage, and trade their own cold chain logistics data; other nodes refer to regulatory and supervision agencies.

3. A cold chain data non-repudiation authentication device based on blockchain, characterized in that It includes a computer-readable storage medium and a processor, and the computer-readable storage medium and the processor load and execute the blockchain-based cold chain data undeniable authentication method according to claim 1 or 2.

4. The cold chain data non-repudiation authentication device based on blockchain according to claim 3, characterized in that The computer-readable storage medium stores a computer program, and the computer program includes program instructions, and the program instructions are loaded and executed by the processor to perform the blockchain-based cold chain data undeniable authentication method according to claim 1 or 2.

5. A cold chain data non-repudiation authentication device based on blockchain, characterized in that, It executes the blockchain-based cold chain data undeniable authentication method according to claim 1 or 2, and includes a data collection module, a data signature module, a signature verification module, and a signature confirmation / denial module; Data collection module: Records of cold chain logistics data collected through various different data collection means; Data signature module: Both the data collector and the operator need to sign the collected data and upload it to the cold chain logistics data security sharing system based on blockchain; Signature verification module: The verifier verifies the validity of the signature and gives a rejection or acceptance; Signature confirmation / rejection module: The signer and the verifier interact to confirm the signature. If the verification passes, the cold chain logistics data transaction with the signature is accepted; if the verification fails, the transaction is rejected.

Images