Medical logistics tracking system based on block chain

Abstract

The invention relates to the field of logistics tracking, in particular to a blockchain-based medicine logistics tracking system, which comprises an Internet of Things equipment module, a resource equipment module, a cloud server module, a user module, a PKG server module, a user registration module and a blockchain medicine distribution module. According to the medical logistics tracking system based on the block chain, a distributed mechanism and an encryption algorithm are adopted, the security of data is ensured, potential data tampering and risks are reduced, and more complete medical logistics data are reserved; according to the invention, an attribute-based hierarchical edge encryption algorithm is adopted, the access operation can be flexibly controlled and the access authority of the user can be refined according to the actual demand and the access strategy, and the logistics information is shared in a dispersed manner through the synergistic effect of the block chain, the Internet of Things and the cloud server, so that the decentralized authentication method is realized; the information sharing security and the information retrieval speed are improved, and the equipment resource consumption is reduced.

Description

Technical Field

[0001] The present invention belongs to the field of logistics tracking, and specifically is a pharmaceutical logistics tracking system based on blockchain. Background Art

[0002] Pharmaceutical logistics refers to the supply chain process involving pharmaceutical products, including production, warehousing, and distribution. The tracking and monitoring of pharmaceutical logistics is of great significance to ensure the quality, safety, and timeliness of drugs. Some pharmaceutical logistics tracking systems and technologies have been applied to actual operations. These systems usually use technologies such as the Internet of Things, sensors, cloud computing, and blockchain to monitor and manage the transportation process of drugs. However, the existing technologies have a low degree of privacy and confidentiality for sensitive data such as pharmaceutical logistics, low information sharing security, or the encryption algorithm is too complex and cumbersome, which consumes a lot of equipment resources. Summary of the invention

[0003] In view of the problems that the existing technology has a low level of privacy confidentiality for sensitive data such as pharmaceutical logistics and low information sharing security, the present invention designs a pharmaceutical logistics tracking system based on blockchain, which adopts a distributed formula mechanism and encryption algorithm to ensure data security, reduce potential data tampering and risks, and retain more complete medical logistics data; in view of the problem that the encryption algorithm is too complicated and cumbersome, and consumes a lot of equipment resources, the present invention designs a property-based hierarchical edge encryption algorithm, which can flexibly control access operations according to actual needs and access policies, generate keys based on data attributes and hierarchical structures, refine user access rights, adopt edge encryption, reduce dependence on cloud encryption, and share logistics information in a decentralized manner through the synergy of blockchain, Internet of Things and cloud servers, realize decentralized authentication methods, improve the security of information sharing and information retrieval speed, and reduce equipment resource consumption.

[0004] The present invention provides a blockchain-based pharmaceutical logistics tracking system, comprising an Internet of Things device module, a resource device module, a cloud server module, a user module, a PKG server module, a user registration module and a blockchain drug distribution module;

[0005] The IoT device module is composed of limited IoT device components. The components collect pharmaceutical logistics information data and monitor the temperature, humidity and location parameters in the pharmaceutical logistics process. The components transmit information through the Internet and have a built-in hardware security model to protect component information security.

[0006] The resource device module is composed of a computing device including computing resources to authenticate user information, and a built-in memory module is used to store all pharmaceutical logistics information;

[0007] The cloud server module stores and processes pharmaceutical logistics information data in the cloud, and places the pharmaceutical logistics information data on the blockchain;

[0008] The PKG server module generates and manages the public and private key pairs required for encryption and identity authentication, and is closely integrated with the user registration module and the user module to perform secure authentication of user identities and secure encryption of communications;

[0009] The user registration module allows users to register ownership and user information, and manage user identities and permissions;

[0010] The blockchain drug distribution module uses the IoT device module, resource device module, cloud server module, user module, PKG server module and user registration module to complete the tracking of drug logistics;

[0011] The user module is composed of user equipment and is connected to the Internet of Things device module, resource device module, cloud server module, PKG server module and user registration module, so that users can operate the user registration module and receive and send medical logistics information data.

[0012] Furthermore, in the blockchain drug distribution module, the tracking of drug logistics specifically includes the following steps:

[0013] Step S1: Information recording, when the drug is sent from the sender to the receiver, the receiver's identity, delivery time, receiver's location, drug information, sender's public key and private key, and receiver's public key and private key are saved;

[0014] Step S2: User detection and data encryption, verifying the identity of the recipient, encrypting the recipient information using the attribute-based layered edge encryption algorithm and mapping calculation, obtaining the encrypted information, and creating a transaction request, sending the transaction request to the computing device and adding the transaction request to the blockchain;

[0015] Furthermore, in step S2, the attribute-based hierarchical edge encryption algorithm specifically includes the following steps:

[0016] Step S21: The first PKG creates a master public key and a private key, and defines the first PKG as a root PKG. The receiver generates a receiver private key through the root PKG.

[0017] Step S22: Randomly generate a set of prime numbers , ,in , is the set of bilinear mapping digital combinations in all prime number sets P that satisfy the mapping calculation e: m×a->n, where m is a prime number set The elements in n are prime numbers. The elements in , a is an element in the set of all prime numbers P;

[0018] Step S23: Randomly generate an initial public key that satisfies PK1 , where PK1 is the initial public key, and the initial master private key is randomly generated, satisfying P, where For the initial master private key, and set the private key set ={ , , ..., };

[0019] Step S24: Initialize two hash operations to satisfy hash operation 1: : {0, 1} * ->m and hash operation 2: : {0, 1} * ->n, two hash operations generate public keys for the sender and receiver;

[0020] Step S25: Using the cloud server to calculate the master private key , the public key of the cloud server is calculated as follows: ;

[0021] In the formula, is the public key of the cloud server, For hash operation 1, is the cloud server ID, The ID of the root PKG;

[0022] Step S26: Generate a master private key for the cloud server: ;

[0023] In the formula, is the cloud server master private key, is the initial master private key, is the public key of the cloud server;

[0024] Step S27: Calculate the recipient's public key: ;

[0025] In the formula, is the recipient’s public key, is the receiver ID;

[0026] Step S28: Generate recipient private key: ;

[0027] In the formula, is the recipient's private key;

[0028] Step S29: Generate a private key set , , and calculate the common variables: ;

[0029] In the formula, is a public variable;

[0030] Step S210: The sender encrypts the receiver's information using the initial public key PK1, the cloud server's public key, and the sender's public key to obtain encrypted ciphertext;

[0031] Step S3: Authentication, the computing device authenticates the encrypted information sent by the sender and adds a timestamp to the blockchain;

[0032] Step S4: Receiver decryption: The receiver decrypts the encrypted ciphertext using the receiver's private key and mapping calculation e to complete the logistics information transmission.

[0033] The beneficial results achieved by the present invention using the above scheme are as follows:

[0034] (1) In view of the low privacy confidentiality and low information sharing security of sensitive data such as pharmaceutical logistics in the existing technology, the present invention designs a pharmaceutical logistics tracking system based on blockchain, which adopts a distributed formula mechanism and encryption algorithm to ensure data security, reduce potential data tampering and risks, and retain more complete medical logistics data;

[0035] (2) In order to address the problem that encryption algorithms are too complex and cumbersome and consume a lot of device resources, the present invention designs an attribute-based hierarchical edge encryption algorithm, which can flexibly control access operations according to actual needs and access policies, generate keys based on the attributes and hierarchical structure of the data, refine the user's access rights, adopt edge encryption, reduce the dependence on cloud encryption, and share logistics information in a decentralized manner through the synergy of blockchain, Internet of Things and cloud servers, realize decentralized authentication methods, improve the security of information sharing and information retrieval speed, and reduce device resource consumption. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] Figure 1 A schematic diagram of a module of a blockchain-based pharmaceutical logistics tracking system provided by the present invention;

[0037] Figure 2 It is a schematic diagram of the process of step S2.

[0038] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention. DETAILED DESCRIPTION

[0039] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0040] Example 1, see Figure 1 , a blockchain-based pharmaceutical logistics tracking system provided by the present invention includes an Internet of Things device module, a resource device module, a cloud server module, a user module, a PKG server module, a user registration module and a blockchain drug distribution module;

[0041] The IoT device module is composed of limited IoT device components. The components collect pharmaceutical logistics information data and monitor the temperature, humidity and location parameters in the pharmaceutical logistics process. The components transmit information through the Internet and have a built-in hardware security model to protect component information security.

[0042] The resource device module is composed of a computing device including computing resources to authenticate user information, and a built-in memory module is used to store all pharmaceutical logistics information;

[0043] The cloud server module stores and processes pharmaceutical logistics information data in the cloud, and places the pharmaceutical logistics information data on the blockchain;

[0044] The PKG server module generates and manages the public and private key pairs required for encryption and identity authentication, and is closely integrated with the user registration module and the user module to perform secure authentication of user identities and secure encryption of communications;

[0045] The user registration module allows users to register ownership and user information, and manage user identities and permissions;

[0046] The blockchain drug distribution module uses the IoT device module, resource device module, cloud server module, user module, PKG server module and user registration module to complete the tracking of drug logistics;

[0047] The user module is composed of user equipment and is connected to the Internet of Things device module, resource device module, cloud server module, PKG server module and user registration module, so that users can operate the user registration module and receive and send medical logistics information data.

[0048] By performing the above operations, in view of the low privacy confidentiality of sensitive data such as pharmaceutical logistics and the low security of information sharing in the prior art, the present invention designs a blockchain-based pharmaceutical logistics tracking system, which adopts a distributed formula mechanism and encryption algorithm to ensure data security, reduce potential data tampering and risks, and retain more complete medical logistics data;

[0049] Example 2, see Figure 2 Based on the above embodiment, this embodiment tracks drug logistics in the blockchain drug distribution module, and specifically includes the following steps:

[0050] Step S1: Information recording. When the drug is sent from the sender to the receiver, the receiver's information is recorded in detail. The information includes the receiver's identity, delivery time, receiver's location, drug information, the sender's public key and private key, and the receiver's public key and private key.

[0051] Step S2: User detection and data encryption, verifying the identity of the recipient, encrypting the recipient information using the attribute-based layered edge encryption algorithm and mapping calculation, obtaining the encrypted information, and creating a transaction request, sending the transaction request to the computing device and adding the transaction request to the blockchain;

[0052] Step S3: Authentication, the computing device authenticates the encrypted information sent by the sender and adds a timestamp to the blockchain;

[0053] Step S4: Receiver decryption: The receiver decrypts the encrypted ciphertext using the receiver's private key and mapping calculation to complete the logistics information transmission.

[0054] Embodiment 3: This embodiment is based on the above embodiment. In step S2, the attribute-based layered edge encryption algorithm specifically includes the following steps:

[0055] Step S21: The first PKG creates a master public key and a private key, and defines the first PKG as a root PKG. The receiver generates a receiver private key through the root PKG.

[0056] Step S22: Randomly generate a set of prime numbers , ,in , is the set of bilinear mapping digital combinations in all prime number sets P that satisfy the mapping calculation e: m×a->n, where m is a prime number set The elements in n are prime numbers. The elements in , a is an element in the set of all prime numbers P;

[0057] Step S23: Randomly generate an initial public key that satisfies PK1 , where PK1 is the initial public key, and the initial master private key is randomly generated, satisfying P, where For the initial master private key, and set the private key set ={ , , ..., };

[0058] Step S24: Initialize two hash operations to satisfy hash operation 1: : {0, 1} * ->m and hash operation 2: : {0, 1} * ->n, two hash operations generate public keys for the sender and receiver;

[0059] Step S25: Using the cloud server to calculate the master private key , the public key of the cloud server is calculated as follows:

[0060] ;

[0061] In the formula, is the public key of the cloud server, For hash operation 1, is the cloud server ID, The ID of the root PKG;

[0062] Step S26: Generate a master private key for the cloud server: ;

[0063] In the formula, is the cloud server master private key, is the initial master private key, is the public key of the cloud server;

[0064] Step S27: Calculate the recipient's public key: ;

[0065] In the formula, is the recipient’s public key, is the receiver ID;

[0066] Step S28: Generate recipient private key: ;

[0067] In the formula, is the recipient's private key;

[0068] Step S29: Generate a private key set , , and calculate the common variables: ;

[0069] In the formula, is a public variable;

[0070] Step S210: Sender encryption, using the initial public key PK1, the public key of the cloud server and the sender's public key to hierarchically encrypt the receiver's information to obtain an encrypted ciphertext.

[0071] By executing the above operations, in order to address the problem that the encryption algorithm is too complicated and cumbersome and consumes a lot of device resources, the present invention designs a property-based hierarchical edge encryption algorithm, which can flexibly control access operations according to actual needs and access policies, generate keys based on the attributes and hierarchical structure of the data, refine the user's access rights, adopt edge encryption, reduce the dependence on cloud encryption, and share logistics information in a decentralized manner through the synergy of blockchain, Internet of Things and cloud servers, realize decentralized authentication methods, improve the security of information sharing and information retrieval speed, and reduce device resource consumption.

[0072] Embodiment 4: This embodiment is based on the above embodiment. In step S24, the hash operation specifically includes the following steps:

[0073] Step P1: Input data: "x,y";

[0074] Initialize the internal state of the SHA-256 hash function;

[0075] Step P2: Block processing:

[0076] Split data into chunks: "x," and "y"

[0077] Block 1: "x,"

[0078] Block 2: "y"

[0079] Step P3: Compression function processing:

[0080] Compression function of block 1: SHA-256("x," + initial hash value) = hash value 1;

[0081] Compression function of block 2: SHA-256("y"+hash value 1)=hash value 2;

[0082] Step P4: Update hash value: hash value 1: hash value 2;

[0083] Step P5: Complete hash: final hash value: hash value 2.

[0084] Embodiment 5: This embodiment is based on the above embodiment, and the cloud server parameter settings are as follows:

[0085] Server selection: Tencent Cloud Server;

[0086] Instance types: computing and storage;

[0087] Memory: 16GB

[0088] Storage: cloud hard disk;

[0089] Network bandwidth: 1Mbps;

[0090] Operating system: Windows.

[0091] Embodiment 6: This embodiment is based on the above embodiment, and user registration specifically includes the following steps:

[0092] Step Q1: Select a trusted registration center: Select Alibaba's Nacos as the registration center to be used;

[0093] Step Q2: Install the Nacos server and configure the server environment:

[0094] Step Q3: Configure database connection and authentication method;

[0095] Step Q4: Add dependencies: <dependency> <groupid> com.alibaba.cloud< / groupid> <artifactid> spring-cloud-starter-alibaba-nacos-discovery< / artifactid> < / dependency>

[0096] Step Q5: Configure Nacos address: spring.cloud.nacos.discovery.server-addr=127.0.0.1:8848;

[0097] Step Q6: Access the Nacos console and register with your user information.

[0098] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0099] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

[0100] The present invention and its embodiments are described above, and such description is not restrictive. The drawings show only one embodiment of the present invention, and the actual structure is not limited thereto. In short, if ordinary technicians in the field are inspired by it, without departing from the purpose of the invention, they can design a structure and embodiment similar to the technical solution without creativity, which should belong to the protection scope of the present invention.

Claims

1. A blockchain-based pharmaceutical logistics tracking system, characterized by: It includes IoT device module, resource device module, cloud server module, user module, PKG server module, user registration module and blockchain drug distribution module; The IoT device module is composed of limited IoT device components. The components collect pharmaceutical logistics information data and monitor the temperature, humidity and location parameters in the pharmaceutical logistics process. The components transmit information through the Internet and have a built-in hardware security model to protect component information security. The resource device module is composed of a computing device including computing resources to authenticate user information, and a built-in memory module is used to store all pharmaceutical logistics information; The cloud server module stores and processes pharmaceutical logistics information data in the cloud, and places the pharmaceutical logistics information data on the blockchain; The PKG server module generates and manages the public and private key pairs required for encryption and identity authentication, and is closely integrated with the user registration module and the user module to perform secure authentication of user identities and secure encryption of communications; The user registration module allows users to register ownership and user information, and manage user identities and permissions; The blockchain drug distribution module uses the IoT device module, resource device module, cloud server module, user module, PKG server module and user registration module to complete the tracking of drug logistics; The tracking of the drug logistics specifically includes the following steps: Step S1: Information recording, when the drug is sent from the sender to the receiver, the receiver's identity, delivery time, receiver's location, drug information, sender's public key and private key, and receiver's public key and private key are recorded in detail; Step S2: User detection and data encryption, verifying the identity of the recipient, encrypting the recipient information using the attribute-based layered edge encryption algorithm and mapping calculation, obtaining the encrypted information, and creating a transaction request, sending the transaction request to the computing device and adding the transaction request to the blockchain; Step S3: Authentication, the computing device authenticates the encrypted information sent by the sender and adds a timestamp to the blockchain; Step S4: Receiver decryption: The receiver decrypts the encrypted ciphertext using the receiver's private key and mapping calculation to complete the logistics information transmission; In step S2, the attribute-based hierarchical edge encryption algorithm specifically includes the following steps: Step S21: The first PKG creates a master public key and a private key, and defines the first PKG as a root PKG. The receiver generates a receiver private key through the root PKG. Step S22: Randomly generate a set of prime numbers , ,in , is the set of bilinear mapping digital combinations in all prime number sets P that satisfy the mapping calculation e: m×a->n, where m is a prime number set The elements in n are prime numbers. The elements in , a is an element in the set of all prime numbers P; Step S23: Randomly generate an initial public key that satisfies PK1 , where PK1 is the initial public key, and the initial master private key is randomly generated, satisfying P, where For the initial master private key, and set the private key set ={ , , ..., }; Step S24: Initialize two hash operations to satisfy hash operation 1: : {0, 1} * ->m and hash operation 2: : {0, 1} * ->n, two hash operations generate public keys for the sender and receiver; Step S25: Using the cloud server to calculate the master private key , the public key of the cloud server is calculated as follows: ； In the formula, is the public key of the cloud server, For hash operation 1, is the cloud server ID, The ID of the root PKG; Step S26: Generate a master private key for the cloud server: ； In the formula, is the cloud server master private key, is the initial master private key, is the public key of the cloud server; Step S27: Calculate the recipient's public key: ； In the formula, is the recipient’s public key, is the receiver ID; Step S28: Generate recipient private key: ； In the formula, is the recipient's private key; Step S29: Generate a private key set , , and calculate the common variables: ； In the formula, is a public variable; Step S210: The sender encrypts the receiver's information using the initial public key PK1, the public key of the cloud server and the sender's public key to obtain encrypted information; The user module is composed of user equipment and is connected to the Internet of Things device module, resource device module, cloud server module, PKG server module and user registration module, so that users can operate the user registration module and receive and send medical logistics information data.

Images