A method, system and electronic device for confirming data rights based on encoding and encryption

Abstract

The present application belongs to the field of data rights confirmation technology, and in particular, relates to a data rights confirmation method, system and electronic device based on coding encryption. The present application generates a unit public-private key pair and a procurement public-private key pair; obtains procurement information and performs encrypted and decrypted transmission, confirms the rights of the recipient and the decrypted procurement information, obtains procurement information that meets the approval conditions, and generates collection procurement information and a collection procurement information matrix corresponding to the collection procurement information. The present application introduces a virtual recipient to construct a collection and rights confirmation mechanism for hierarchical procurement information, realizes information isolation between the procurement information customization unit and the generator, and thus performs secondary encryption protection on the procurement information of the procurement unit. The present application tailors multi-level privacy protection measures for different procurement units to effectively resist external attacks and internal leakage risks.

Description

Technical Field

[0001] The present application belongs to the technical field of data rights confirmation, and in particular, relates to a data rights confirmation method, system and electronic device based on coding encryption. Background Art

[0002] In modern enterprise operations and supply chain management, the efficiency, security and data transparency of the procurement system are key factors in ensuring business continuity and competitiveness. With the deepening of digital transformation, procurement management is no longer limited to simple material trading, but covers the entire process of digital management from demand forecasting, supplier selection, contract management, order execution to payment settlement. In this context, the confirmation of procurement data and information security have become important issues that cannot be ignored.

[0003] In a multi-department, multi-level corporate structure, different purchasing units are often responsible for the purchase of different types of materials, and their needs and permissions for purchasing information vary. For example, the cost control department may need access to price and budget data, while the quality management department is more concerned with supplier qualifications and historical performance. Traditional procurement management systems may not be able to finely control these data permissions, leading to the risk of information leakage or abuse of permissions.

[0004] Therefore, for multi-department, multi-level corporate structures, how to confirm data ownership while ensuring data security has become an urgent problem that needs to be solved. Summary of the invention

[0005] The present application provides a data rights confirmation method, device and electronic device based on coding encryption, which can confirm the rights of data while ensuring data security for a multi-department and multi-level enterprise structure.

[0006] In a first aspect, an embodiment of the present application provides a data rights confirmation method based on encoded encryption, the method comprising: step S1, the procurement system obtains procurement units of different levels and the unit public-private key pairs of each of the procurement units, the unit public-private key pairs including the unit public key and the unit private key; step S2, the procurement system generates a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, the procurement public-private key pair including the procurement public key and the procurement private key, and sends the procurement public key to the procurement unit; step S3, the procurement unit obtains procurement information of different levels and restores the procurement matrix, the procurement information of different levels corresponds to the level of the procurement unit, and the restored procurement matrix includes the procurement information of different levels and The purchasing unit level; step S4, the purchasing unit encrypts the purchasing information of different levels based on the purchasing public key pair, determines the encrypted purchasing information of different levels, and sends the encrypted purchasing information of different levels to the purchasing system; step S5, the purchasing system decrypts the encrypted purchasing information of different levels based on the purchasing private key to obtain the purchasing information of different levels, confirms the ownership of the purchasing information of different levels and the recipient, determines the collected purchasing information, the recipient is the purchasing unit of the level corresponding to the purchasing information of different levels, determines the collected purchasing information matrix based on the collected purchasing information, and the collected purchasing information and the collected purchasing information matrix are used for material distribution.

[0007] In one possible implementation, in step S2, when the procurement system generates a procurement public-private key pair based on a parallel encryption mode, correspondingly, in step S4, the procurement units of different levels use the same procurement public key to encrypt the procurement information of different levels to obtain the encrypted procurement information of different levels.

[0008] In a possible implementation, in step S2, when the procurement system generates the procurement public-private key pair based on the serial encryption mode, the number of the procurement public-private key pairs is consistent with and corresponds to the number of the procurement units. Accordingly, in step S4, the procurement units encrypt the procurement information of different levels based on the procurement public key pair, including: step S41, and As the grade representation of the purchasing unit, let ; Step S42, The purchasing unit at the next level uses the corresponding purchasing public key right Procurement information of the purchasing unit Encrypt and obtain encrypted purchasing information , and then Send to Step S43, determine Whether the purchasing unit has received If not received, The purchasing unit at the next level uses the corresponding purchasing public key encryption Procurement information of the purchasing unit , get the encrypted purchasing information If received, use Sequential encryption , plain text separator and , get the encrypted purchasing information ; Step S44, if , then let , , , The purchasing unit will Send to Level purchasing unit, and jump to step S43; if ,but , and obtain the encrypted procurement information; wherein, the plaintext separator is uniformly set based on the procurement system to distinguish the identifiers of two plaintexts encrypted at the same time, There are two loop variables, and J represents the number of purchasing unit levels.

[0009] In a possible implementation, in step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, including: the procurement system uses the same procurement private key to decrypt the encrypted procurement information of different levels to obtain the procurement information of different levels.

[0010] In a possible implementation, in step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, including: step S51, ; Step S52, the purchasing system uses the purchasing private key of the corresponding level right Decrypt and obtain the purchase information of the corresponding level after decryption ; Step S53, determine Is there a plaintext separator? If not, then Complete the decryption of the purchase information; if it exists, The plaintext before the plaintext separator is ,renew for The plaintext after the plaintext separator in , and jump to step S52.

[0011] In a possible implementation, in step S5, confirming the rights of the recipient includes:

[0012] Step A1: Generate a The two random numbers in the random number are recorded in ascending order as ; Confirm the recipient as purchasing information , Purchasing units of corresponding levels; Step A2, if , then further confirm the rights The purchasing unit of the corresponding level; among them, Indicates the highest level number of the procurement information received; the recipient of each level can use a preset value or be generated using a random generation method.

[0013] In a possible implementation, in step S5, the procurement information of different levels is authenticated, including: step B1, the procurement information of different levels received by the procurement system is authenticated. Divide into , , , and sort the procurement information in each set in descending order; among them, I max Indicates the lowest level number of the received procurement information; Step B2, the procurement system conducts level-by-level and parallel approval of the procurement information according to the level of the corresponding procurement unit, and approves the procurement information that meets the preset procurement conditions, and conducts confirmation feedback processing on the procurement information that does not meet the preset procurement conditions; Step B3, generate the procurement information for collection And the collection and purchase information matrix corresponding to the collection and purchase information , ;

[0014] ;

[0015] ;

[0016] in, The first column of the agency purchase information matrix corresponding to the agency purchase information is represented; The first Column 2 to Column 3 of the row List, Indicates the information dimension supported by the procurement system; Indicates the subscript of the variable to be sought; Indicates the number of elements contained in the collection.

[0017] In a possible implementation, after step S5, the method further includes: step S6, the procurement system obtains the production public-private key pair of the producer, the production public-private key pair includes a production public key and a production private key; step S7, the procurement system encrypts the collection procurement information matrix based on the unit public key corresponding to the recipient to obtain the encrypted collection procurement information matrix, and sends it to the recipient, encrypts the collection procurement information based on the production public key to obtain the encrypted collection procurement information, and sends it to the producer; step S8, the producer decrypts the encrypted collection procurement information based on the production private key to obtain the collection procurement information, and delivers the materials to the recipient based on the collection procurement information; step S9, the recipient decrypts the encrypted collection procurement information matrix based on the unit private key to obtain the collection procurement information matrix, and delivers the materials according to different levels based on the collection procurement information matrix.

[0018] In a second aspect, an embodiment of the present application provides a data rights confirmation system based on coded encryption, the system comprising: an acquisition module, used for the procurement system to acquire procurement units of different levels and the unit public-private key pairs of each procurement unit, the unit public-private key pairs comprising a unit public key and a unit private key; a key pair generation module, used for the procurement system to generate a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, the procurement public-private key pair comprising a procurement public key and a procurement private key, and send the procurement public key to the procurement unit; the acquisition module is also used for the procurement unit to acquire procurement information of different levels and restore the procurement matrix, the procurement information of different levels corresponds to the level of the procurement unit, and the restored procurement matrix includes the procurement of the different levels. information and the level of the purchasing unit; an encryption module, which is used for the purchasing unit to encrypt the purchasing information of different levels based on the purchasing public key pair, determine the encrypted purchasing information of different levels, and send the encrypted purchasing information of different levels to the purchasing system; a rights confirmation module, which is used for the purchasing system to decrypt the encrypted purchasing information of different levels based on the purchasing private key to obtain the purchasing information of different levels, confirm the rights of the purchasing information of different levels and the recipient, determine the collected purchasing information, the recipient is the purchasing unit of the level corresponding to the purchasing information of different levels, and determine the collected purchasing information matrix based on the collected purchasing information, and the collected purchasing information and the collected purchasing information matrix are used for material distribution.

[0019] In a third aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the computer program, the method described in the first aspect or any one of the implementation methods thereof is implemented.

[0020] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method described in the first aspect or any one of the implementation methods thereof is implemented.

[0021] In a fifth aspect, an embodiment of the present application provides a computer program product. When the computer program product runs on an electronic device, the electronic device executes the method described in the first aspect or any one of the implementation methods thereof.

[0022] The present application provides a data rights confirmation method based on coding encryption, which confirms the rights of data for a multi-department and multi-level enterprise structure while ensuring data security. The specific scheme is as follows: Step S1, the procurement system obtains procurement units of different levels and the unit public-private key pairs of each procurement unit, and the unit public-private key pairs include the unit public key and the unit private key; Step S2, the procurement system generates a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, and the procurement public-private key pair includes the procurement public key and the procurement private key, and sends the procurement public key to the procurement unit; Step S3, the procurement unit obtains procurement information of different levels and restores the procurement matrix, and the procurement information of different levels corresponds to the level of the procurement unit, and the restored procurement matrix Including the procurement information of different levels and the procurement unit level; step S4, the procurement unit encrypts the procurement information of different levels based on the procurement public key pair, determines the encrypted procurement information of different levels, and sends the encrypted procurement information of different levels to the procurement system; step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, confirms the rights of the procurement information of different levels and the recipient, determines the procurement information to be collected, the recipient is the procurement unit of the level corresponding to the procurement information of different levels, determines the procurement information to be collected matrix based on the procurement information to be collected, and the procurement information to be collected and the procurement information to be collected matrix are used for material distribution. The specific beneficial effects are as follows:

[0023] (1) Enhanced data security and privacy protection: By adopting a serial-parallel encryption mechanism, this application tailors multi-level privacy protection measures for different purchasing units, ensuring the security of sensitive purchasing information during transmission and storage. This differentiated encryption strategy can effectively resist external attacks and internal leakage risks, and improve the information security level of the entire supply chain.

[0024] (2) Promote the establishment of a trust mechanism: The hierarchical procurement information collection and confirmation mechanism has built a solid information barrier, achieving clear responsibility definition and information isolation between the procurement information customization unit and the generator. This not only strengthens the trust foundation of all parties in the supply chain, but also promotes a more efficient and transparent cooperation model and reduces disputes caused by information asymmetry.

[0025] (3) Optimizing resource allocation and management efficiency: The two-level confidentiality system (inside and outside the procurement information system) and the two-level confirmation of rights for procurement and collection make data management more refined, helping procurement units to accurately control information access rights and optimize resource allocation. This mechanism can effectively reduce unnecessary information circulation, increase processing speed, and reduce management costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0027] Figure 1 A flowchart of a data rights confirmation method based on coding encryption provided in one embodiment of the present application;

[0028] Figure 2 A flowchart of another data rights confirmation method based on coding encryption provided in an embodiment of the present application;

[0029] Figure 3 A structural block diagram of a data rights confirmation system based on coding encryption provided in one embodiment of the present application;

[0030] Figure 4 A schematic diagram of the structure of an electronic device provided in one embodiment of the present application. DETAILED DESCRIPTION

[0031] In the following description, specific details such as specific system structures, technologies, etc. are provided for the purpose of illustration rather than limitation, so as to provide a thorough understanding of the embodiments of the present application. However, it should be clear to those skilled in the art that the present application may also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted to prevent unnecessary details from obstructing the description of the present application.

[0032] It should be understood that when used in the present specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integers, steps, operations, elements, components and / or combinations thereof.

[0033] It should also be understood that the term “and / or” used in the specification and appended claims refers to any and all possible combinations of one or more of the associated listed items, and includes these combinations.

[0034] As used in the specification and appended claims of this application, the term "if" can be interpreted as "when" or "uponce" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrase "if it is determined" or "if [described condition or event] is detected" can be interpreted as meaning "uponce it is determined" or "in response to determining" or "uponce [described condition or event] is detected" or "in response to detecting [described condition or event]", depending on the context.

[0035] In addition, in the description of the present application specification and the appended claims, the terms "first", "second", "third", etc. are only used to distinguish the descriptions and cannot be understood as indicating or implying relative importance.

[0036] References to "one embodiment" or "some embodiments" etc. described in the specification of this application mean that one or more embodiments of the present application include specific features, structures or characteristics described in conjunction with the embodiment. Therefore, the statements "in one embodiment", "in some embodiments", "in some other embodiments", "in some other embodiments", etc. that appear in different places in this specification do not necessarily refer to the same embodiment, but mean "one or more but not all embodiments", unless otherwise specifically emphasized in other ways. The terms "including", "comprising", "having" and their variations all mean "including but not limited to", unless otherwise specifically emphasized in other ways.

[0037] In modern enterprise operations and supply chain management, the efficiency, security and data transparency of the procurement system are key factors in ensuring business continuity and competitiveness. With the deepening of digital transformation, procurement management is no longer limited to simple material trading, but covers the entire process of digital management from demand forecasting, supplier selection, contract management, order execution to payment settlement. In this context, the confirmation of procurement data and information security have become important issues that cannot be ignored.

[0038] In a multi-department, multi-level enterprise structure, different purchasing units are often responsible for the procurement of different categories of materials, and their needs and permissions for procurement information vary. For example, the cost control department may need access to price and budget data, while the quality management department is more concerned with supplier qualifications and historical performance. Traditional procurement management systems may not be able to finely control these data permissions, leading to the risk of information leakage or abuse of permissions. Therefore, it is particularly important to implement role-based data access control and the principle of least privilege to ensure that each procurement unit can only access procurement information that matches its responsibilities.

[0039] From the external perspective of the supply chain, the security of procurement information not only involves the internal affairs of the enterprise, but also concerns the trust relationship between suppliers and customers. When the actual demander (such as a manufacturer) sends a procurement demand to the material producer (such as a raw material supplier), it often includes sensitive information such as production plans and product specifications. Without proper data protection measures, this information may be improperly used. For example, the producer may infer the market strategy or production capacity of the demander by analyzing the purchase frequency and quantity, thereby affecting the market competition pattern. Therefore, how to prevent excessive transparency of information while ensuring the efficiency of supply chain collaboration has become an urgent problem to be solved.

[0040] Although existing procurement application systems, such as the use of GS1 global standards for unique identification of goods and the implementation of independent procurement approval processes, provide effective tools for the standardization of procurement data and process control, this only solves the problems of data standardization and basic access control. The GS1 standard achieves global unique identification of goods through one code per item, which helps track and trace, but its role in preventing information snooping, especially in controlling data access to external partners, is limited. Although the independent procurement approval process increases internal control, it does not directly prevent the risk of external information leakage.

[0041] Therefore, in order to solve the above problems, the present application proposes a data rights confirmation method, device and electronic device based on coding encryption, which can confirm the data rights while ensuring data security in a multi-department and multi-level enterprise structure.

[0042] Figure 1 A flowchart of a data rights confirmation method based on coding encryption is provided for an embodiment of the present application, and the method includes:

[0043] S1, the procurement system obtains procurement units of different levels and the public-private key pairs of each procurement unit, and the public-private key pairs of the units include the unit public key and the unit private key.

[0044] Specifically, the procurement system includes multiple procurement units, and all procurement units in the procurement system are identified as procurement units of different levels according to their data access levels.

[0045] S2, the procurement system generates a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode. The procurement public-private key pair includes a procurement public key and a procurement private key, and sends the procurement public key to the procurement unit.

[0046] In a possible implementation, when the procurement system generates a procurement public-private key pair based on the parallel encryption mode, a pair of procurement public-private key pairs is generated based on the parallel encryption mode.

[0047] Specifically, the parallel encryption mode is suitable for low confidentiality requirements. Procurement information can only be cracked by breaking the encryption method of a single procurement system or tampering with the procurement public key. The procurement system generates a procurement public-private key pair and sends the procurement public key to each procurement unit in the system.

[0048] In another possible implementation, when the procurement system generates procurement public and private key pairs based on the serial encryption mode, the number of procurement public and private key pairs is consistent with and corresponds to the number of procurement units.

[0049] Specifically, the serial encryption mode is suitable for high confidentiality requirements. The highest level of confidentiality level procurement information can only be cracked by breaking all levels of encryption methods of the procurement system or tampering with all levels of public keys. Procurement units at different levels can obtain different degrees of encryption protection. The procurement system generates each procurement public-private key pair for each level of procurement unit and sends the procurement public key of that level to the procurement unit at the corresponding level. Furthermore, different encryption methods can be used according to the generation of procurement public-private key pairs at each level.

[0050] S3, the purchasing unit obtains purchasing information of different levels and restores the purchasing matrix. The purchasing information of different levels corresponds to the level of the purchasing unit. The restored purchasing matrix includes the purchasing information of different levels and the level of the purchasing unit.

[0051] Specifically, the purchasing information of the corresponding levels of purchasing units of different levels is obtained, and a restored purchasing information matrix is ​​constructed. The method is as follows:

[0052] Purchasing units at different levels generate their own purchasing information , ; Generate procurement information of corresponding level according to the level of procurement unit and generate a purchasing information matrix , ;

[0053] middle, express Level purchasing unit The purchasing information matrix, Respectively represent the procurement system The set of purchasing units of different levels, the number of purchasing units of different levels; for the convenience of representation, this article sets The smaller the number, the higher the level (the higher the access rights to data, the higher the data confidentiality, and the higher the purchasing power; at this time It also indicates the lowest level number of the purchasing unit, and 1 is the highest level number of the purchasing unit); express Restore the procurement information matrix Row data.

[0054] S4, the purchasing unit encrypts different levels of purchasing information based on the purchasing public key pair, determines different levels of encrypted purchasing information, and sends different levels of encrypted purchasing information to the purchasing system.

[0055] In a possible implementation, when the procurement system generates a procurement public-private key pair based on a parallel encryption mode, in step S4, procurement units of different levels use the same procurement public key to encrypt procurement information of different levels to obtain encrypted procurement information of different levels.

[0056] In another possible implementation, when the procurement system generates a procurement public-private key pair based on the serial encryption mode, in step S4, the procurement unit encrypts procurement information of different levels based on the procurement public key pair, including:

[0057] Step S41: and As the grade of purchasing unit, let ;

[0058] Step S42, The purchasing unit at the next level uses the corresponding purchasing public key right Procurement information of the purchasing unit Encrypt and obtain encrypted purchasing information , and then Send to Level purchasing unit;

[0059] Step S43, determine Whether the purchasing unit has received ;

[0060] If not received, The purchasing unit at the next level uses the corresponding purchasing public key encryption Procurement information of the purchasing unit , get the encrypted purchasing information ;

[0061] If received, use Sequential encryption , plain text separator and , get the encrypted purchasing information ;

[0062] Step S44: If , then let , , , The purchasing unit will Send to Level purchasing unit, and jump to step S43;

[0063] like ,but , get the encrypted purchasing information;

[0064] The plaintext separator is uniformly set based on the procurement system to distinguish the identifiers of two plaintexts encrypted at the same time. There are two loop variables, and J represents the number of purchasing unit levels.

[0065] S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain procurement information of different levels, confirms the rights of procurement information of different levels and recipients, and determines the collection procurement information. The recipients are procurement units of the levels corresponding to the procurement information of different levels. The collection procurement information matrix is ​​determined based on the collection procurement information. The collection procurement information and the collection procurement information matrix are used for material distribution.

[0066] Exemplarily, the method for generating the procurement information matrix corresponding to the procurement information is the same as the method for constructing the restored procurement information matrix corresponding to the procurement information in step S3, and will not be repeated here.

[0067] In one possible implementation, when the procurement system generates a procurement public-private key pair based on a parallel encryption mode, the procurement system decrypts different levels of encrypted procurement information based on the procurement private key to obtain different levels of procurement information, including: the procurement system uses the same procurement private key to decrypt different levels of encrypted procurement information to obtain different levels of procurement information.

[0068] In another possible implementation, when the procurement system generates a procurement public-private key pair based on the serial encryption mode, the procurement system decrypts different levels of encrypted procurement information based on the procurement private key to obtain procurement information of different levels, including:

[0069] Step S51, set ;

[0070] Step S52: The purchasing system uses the purchasing private key of the corresponding level right Decrypt and obtain the purchase information of the corresponding level after decryption ;

[0071] Step S53, determine Is there a plaintext separator? If not, then Complete the decryption of the purchase information; if it exists, The plaintext before the plaintext separator is ,renew for The plaintext after the plaintext separator is , and jump to step S52.

[0072] The above content is the process of encrypting and decrypting procurement information. The following is the confirmation of procurement information rights with different levels of privacy protection for the decrypted procurement information. By introducing a virtual recipient, a collection and confirmation mechanism for hierarchical procurement information is constructed to achieve information isolation between the procurement information customization unit and the generator, thereby providing secondary encryption protection for the procurement information of the procurement unit.

[0073] In a possible implementation, confirming the rights of the recipient includes:

[0074] Step A1: Generate a The two random numbers in the random number are recorded in ascending order as ; Confirm the recipient as purchasing information , Purchasing units of corresponding levels;

[0075] Step A2: If , then further confirm the rights Purchasing units of corresponding levels;

[0076] in, Indicates the highest level number of the procurement information received; the recipient of each level can use a preset value or be generated using a random generation method.

[0077] Specifically, the preset value is the internal agreement of the purchasing units at each level, and the random generation method is used, that is, random numbers are generated to generate the recipients corresponding to the purchasing information at each level, and then the unit numbers of the recipients at each level are embedded in the purchasing information of the corresponding level or generated in the purchasing system and embedded in the collection purchasing information, that is, in A1, for each level of purchasing information, the purchasing units of each level are obtained according to the first column of the corresponding restored purchasing information matrix, and the recipients of each level of purchasing information are specified using random numbers.

[0078] In one possible implementation, different levels of procurement information are authenticated, including:

[0079] Step B1: The procurement system receives procurement information of different levels. Divide into , , , and sort the purchase information in each set in descending order of level;

[0080] Among them, I max Indicates the lowest level number of the procurement information received;

[0081] Step B2: The procurement system conducts level-by-level and parallel approval of the procurement information according to the level of the corresponding procurement unit, approves the procurement information that meets the preset procurement conditions, and conducts confirmation feedback processing on the procurement information that does not meet the preset procurement conditions;

[0082] Step B3: Generate purchase information And the collection and purchase information matrix corresponding to the collection and purchase information , ;

[0083] ;

[0084] ;

[0085] in, The first column of the agency purchase information matrix corresponding to the agency purchase information is represented; The first Column 2 to Column 3 of the row List, Indicates the information dimension supported by the procurement system (which can be simply understood as the number of all procurement items that cannot be further subdivided into categories); Indicates the subscript of the variable to be sought; Indicates the number of elements contained in the collection.

[0086] Furthermore, "meeting the preset procurement conditions" means meeting the level restrictions (the matching of the purchased items and the purchasing unit), quantity restrictions (single purchase volume, historical purchase volume and inventory, and the ratio of personnel to items); "step-by-step and parallel approval" means that when the level restrictions are met, step-by-step approval is adopted from low to high. If the lower level passes, the corresponding items of the higher level will be exempted from review, and then only the remaining items need to be approved. When the quantity restrictions are met, parallel independent approval is adopted at all levels; "right confirmation feedback processing" can directly set the quantity of procurement items that do not meet the conditions to zero, and update the procurement information to right confirmation procurement information; in order to reject procurement information, the procurement information and rejection information can be encrypted with the unit public key of the procurement unit corresponding to the procurement information, and sent to the procurement unit. The procurement unit decrypts it with its unit private key, adjusts the procurement information and submits it again.

[0087] Furthermore, after step S5, the present application also proposes a material distribution method based on the data right confirmation method based on the coding encryption, which further includes the following steps based on steps S1-S5:

[0088] Step S6, the procurement system obtains the production public-private key pair of the producer, the production public-private key pair including a production public key and a production private key;

[0089] Specifically, each producer generates its own production public-private key pair, and the procurement system obtains the producer's production public-private key pair.

[0090] Step S7, the procurement system encrypts the agency procurement information matrix based on the unit public key corresponding to the recipient to obtain the encrypted agency procurement information matrix, and sends it to the recipient; encrypts the agency procurement information based on the production public key to obtain the encrypted agency procurement information, and sends it to the production party;

[0091] Step S8, the producer decrypts the encrypted agency purchase information based on the production private key to obtain the agency purchase information, and delivers the materials to the recipient based on the agency purchase information;

[0092] Step S9, the recipient decrypts the encrypted agency purchase information matrix based on the unit private key to obtain the agency purchase information matrix, and distributes the materials according to different levels based on the agency purchase information matrix.

[0093] Specifically, the level of the purchasing unit to which each purchasing information belongs is obtained based on the first column of the decrypted agency procurement information matrix, and the data from the second column to the last column of the corresponding row is extracted and used as the procurement information for confirmation of ownership of each level; based on the procurement information for confirmation of ownership of each level, the purchased materials of each level are delivered to the purchasing units of each level; within the purchasing units of each level, the procurement information of each purchasing unit within the corresponding level is obtained by using the agency procurement information matrix of each level, and the materials are delivered to each unit according to the procurement information of each purchasing unit.

[0094] Figure 2 A flowchart of another data rights confirmation method based on coding encryption provided in an embodiment of the present application is shown as follows: Figure 2 As shown, it includes n-level purchasing units and n-level purchasing information, and the purchasing units and the purchasing information correspond one to one.

[0095] In the process of encrypting procurement information, the public key 1 corresponding to the level 1 procurement unit encrypts the level 1 procurement information, the public key 2 corresponding to the level 2 procurement unit encrypts the level 1 and 2 procurement information, and so on. The public key n corresponding to the level n procurement unit encrypts the level 1-n procurement information.

[0096] Furthermore, the procurement system uses the private key corresponding to each level of procurement unit to decrypt the procurement information, and then confirms the ownership, sends the confirmation result (collection procurement information matrix) to the recipient, and then encrypts the confirmed purchase data through the producer's public key and sends it to the producer.

[0097] Furthermore, the producer uses the private key to decrypt, obtain the purchasing information, and send the materials to the recipient.

[0098] The solution provided in the present application, by introducing a virtual recipient, constructs a collection and confirmation mechanism for hierarchical procurement information, realizes information isolation between the procurement information customization unit and the generator, and thus performs secondary encryption protection on the procurement information of the procurement unit. Specifically comprising: Step S1, the procurement system obtains procurement units of different levels and the unit public-private key pairs of each of the procurement units, the unit public-private key pairs including the unit public key and the unit private key; Step S2, the procurement system generates a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, the procurement public-private key pair including the procurement public key and the procurement private key, and sends the procurement public key to the procurement unit; Step S3, the procurement unit obtains procurement information of different levels and restores the procurement matrix, the procurement information of different levels corresponds to the level of the procurement unit, and the restored procurement matrix includes the procurement information of different levels and the level of the procurement unit; Step S4, the procurement Based on the procurement public key pair, the unit encrypts the procurement information of different levels, determines the encrypted procurement information of different levels, and sends the encrypted procurement information of different levels to the procurement system; in step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, confirms the rights of the procurement information of different levels and the recipient, determines the procurement information for collection, the recipient is the procurement unit of the level corresponding to the procurement information of different levels, determines the procurement information for collection matrix based on the procurement information for collection, and the procurement information for collection and the procurement information for collection matrix are used for material distribution. The specific beneficial effects are: (1) Enhanced data security and privacy protection: By adopting a serial-parallel encryption mechanism, the present application tailors multi-level privacy protection measures for different procurement units to ensure the security of sensitive procurement information during transmission and storage. This differentiated encryption strategy can effectively resist external attacks and internal leakage risks, and improve the information security level of the entire supply chain. (2) Promote the establishment of a trust mechanism: The hierarchical procurement information collection and confirmation mechanism has built a solid information barrier, achieving clear responsibility definition and information isolation between the procurement information customization unit and the generator. This not only strengthens the trust foundation of all parties in the supply chain, but also promotes a more efficient and transparent cooperation model and reduces disputes caused by information asymmetry. (3) Optimize resource allocation and management efficiency: The two-level confidentiality system (inside and outside the procurement information system) and the two-level confirmation design of procurement and collection make data management more refined, which helps procurement units to accurately control information access rights and optimize resource allocation. This mechanism can effectively reduce unnecessary information circulation, improve processing speed, and reduce management costs.

[0099] Figure 3This is a structural block diagram of a data rights confirmation system based on coding and encryption provided in an embodiment of the present application. For the sake of convenience, only the part related to the embodiment of the present application is shown. Figure 3 The data rights confirmation system 300 based on coding encryption includes an acquisition module 301, a key pair generation module 302, an encryption module 303, and a rights confirmation module 304.

[0100] In one implementation, the system 300 can be used to implement the above Figure 1 For example, the acquisition module 301 is used to implement S1 and S3, the key pair generation module 302 is used to implement S2, the encryption module 303 is used to implement S4, and the right confirmation module 304 is used to implement S5.

[0101] In another possible implementation, the system 300 further includes a distribution module, the acquisition module 301 is used to implement S6, the encryption module 303 is used to implement S7, and the distribution module is used to implement S8 and S9.

[0102] It should be noted that the data rights confirmation system based on coding encryption provided by the above embodiment is only illustrated by the division of the above functional modules. In practical applications, the above functions can be assigned to different functional modules as needed, that is, the modules or steps in the embodiments of the present application can be decomposed or combined. For example, the modules in the above embodiments can be combined into one module, or further divided into multiple sub-modules to complete all or part of the functions described above. The names of the modules and steps involved in the embodiments of the present application are only for distinguishing the modules or steps and are not regarded as improper limitations on the present application.

[0103] The system provided in the present application introduces a virtual recipient to construct a collection and confirmation mechanism for hierarchical procurement information, thereby realizing information isolation between the procurement information customization unit and the generator, thereby performing secondary encryption protection on the procurement information of the procurement unit. Specifically comprising: Step S1, the procurement system obtains procurement units of different levels and the unit public-private key pairs of each of the procurement units, the unit public-private key pairs including the unit public key and the unit private key; Step S2, the procurement system generates a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, the procurement public-private key pair including the procurement public key and the procurement private key, and sends the procurement public key to the procurement unit; Step S3, the procurement unit obtains procurement information of different levels and restores the procurement matrix, the procurement information of different levels corresponds to the level of the procurement unit, and the restored procurement matrix includes the procurement information of different levels and the level of the procurement unit; Step S4, the procurement Based on the procurement public key pair, the unit encrypts the procurement information of different levels, determines the encrypted procurement information of different levels, and sends the encrypted procurement information of different levels to the procurement system; in step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, confirms the rights of the procurement information of different levels and the recipient, determines the procurement information for collection, the recipient is the procurement unit of the level corresponding to the procurement information of different levels, determines the procurement information for collection matrix based on the procurement information for collection, and the procurement information for collection and the procurement information for collection matrix are used for material distribution. The specific beneficial effects are: (1) Enhanced data security and privacy protection: By adopting a serial-parallel encryption mechanism, the present application tailors multi-level privacy protection measures for different procurement units to ensure the security of sensitive procurement information during transmission and storage. This differentiated encryption strategy can effectively resist external attacks and internal leakage risks, and improve the information security level of the entire supply chain. (2) Promote the establishment of a trust mechanism: The hierarchical procurement information collection and confirmation mechanism has built a solid information barrier, achieving clear responsibility definition and information isolation between the procurement information customization unit and the generator. This not only strengthens the trust foundation of all parties in the supply chain, but also promotes a more efficient and transparent cooperation model and reduces disputes caused by information asymmetry. (3) Optimize resource allocation and management efficiency: The two-level confidentiality system (inside and outside the procurement information system) and the two-level confirmation design of procurement and collection make data management more refined, which helps procurement units to accurately control information access rights and optimize resource allocation. This mechanism can effectively reduce unnecessary information circulation, improve processing speed, and reduce management costs.

[0104] Figure 4 This is a schematic diagram of the structure of an electronic device provided by an embodiment of the present application. Figure 4 As shown, the electronic device 4 of this embodiment includes: at least one processor 40 ( Figure 4Only one is shown in the figure) a processor, a memory 41, and a computer program 42 stored in the memory 41 and executable on the at least one processor 40, wherein the processor 40 implements the steps in any of the above method embodiments when executing the computer program 42.

[0105] The electronic device 4 may be a computing device such as a desktop computer, a notebook, a PDA, or a cloud server. The electronic device may include, but is not limited to, a processor 40 and a memory 41. Those skilled in the art will appreciate that Figure 4 It is only an example of the electronic device 4 and does not constitute a limitation on the electronic device 4. It may include more or fewer components than shown in the figure, or a combination of certain components, or different components. For example, it may also include input and output devices, network access devices, etc.

[0106] The processor 40 may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc.

[0107] In some embodiments, the memory 41 may be an internal storage unit of the electronic device 4, such as a hard disk or memory of the electronic device 4. In other embodiments, the memory 41 may also be an external storage device of the electronic device 4, such as a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), etc. equipped on the electronic device 4. Further, the memory 41 may also include both an internal storage unit of the electronic device 4 and an external storage device. The memory 41 is used to store an operating system, an application program, a boot loader (BootLoader), data, and other programs, such as the program code of the computer program, etc. The memory 41 may also be used to temporarily store data that has been output or is to be output.

[0108] The technicians in the relevant field can clearly understand that for the convenience and simplicity of description, only the division of the above-mentioned functional units and modules is used as an example for illustration. In practical applications, the above-mentioned function allocation can be completed by different functional units and modules as needed, that is, the internal structure of the device can be divided into different functional units or modules to complete all or part of the functions described above. The functional units and modules in the embodiment can be integrated in a processing unit, or each unit can exist physically separately, or two or more units can be integrated in one unit. The above-mentioned integrated unit can be implemented in the form of hardware or in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the scope of protection of this application. The specific working process of the units and modules in the above-mentioned system can refer to the corresponding process in the aforementioned method embodiment, which will not be repeated here.

[0109] An embodiment of the present application also provides an electronic device, which includes: at least one processor, a memory, and a computer program stored in the memory and executable on the at least one processor, wherein the processor implements the steps of any of the above-mentioned method embodiments when executing the computer program.

[0110] An embodiment of the present application further provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps in the above-mentioned method embodiments can be implemented.

[0111] An embodiment of the present application provides a computer program product. When the computer program product runs on a mobile terminal, the mobile terminal can implement the steps in the above-mentioned method embodiments when executing the computer program product.

[0112] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present application implements all or part of the processes in the above-mentioned embodiment method, which can be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Among them, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form. The computer-readable medium can at least include: any entity or device that can carry the computer program code to the camera / electronic device, recording medium, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, RandomAccess Memory), electrical carrier signal, telecommunication signal and software distribution medium. For example, a USB flash drive, a mobile hard disk, a disk or an optical disk.

[0113] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described or recorded in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0114] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0115] In the embodiments provided in the present application, it should be understood that the disclosed devices / electronic devices and methods can be implemented in other ways. For example, the device / electronic device embodiments described above are merely schematic. For example, the division of the modules or units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0116] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0117] The embodiments described above are only used to illustrate the technical solutions of the present application, rather than to limit them. Although the present application has been described in detail with reference to the aforementioned embodiments, a person skilled in the art should understand that the technical solutions described in the aforementioned embodiments may still be modified, or some of the technical features may be replaced by equivalents. Such modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application, and should all be included in the protection scope of the present application.

Claims

1. A data rights confirmation method based on coding encryption, characterized in that: The method comprises: Step S1, the procurement system obtains procurement units of different levels and the unit public-private key pairs of each procurement unit, wherein the unit public-private key pairs include a unit public key and a unit private key; Step S2, the procurement system generates a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, the procurement public-private key pair including a procurement public key and a procurement private key, and sends the procurement public key to the procurement unit; Step S3, the purchasing unit obtains purchasing information of different levels and restores the purchasing matrix, wherein the purchasing information of different levels corresponds to the level of the purchasing unit, and the restored purchasing matrix includes the purchasing information of different levels and the level of the purchasing unit; Step S4, the purchasing unit encrypts the purchasing information of different levels based on the purchasing public key pair, determines the encrypted purchasing information of different levels, and sends the encrypted purchasing information of different levels to the purchasing system; When the procurement system generates the procurement public-private key pair based on the parallel encryption mode, the procurement units of different levels use the same procurement public key to encrypt the procurement information of different levels to obtain the encrypted procurement information of different levels; When the procurement system generates the procurement public and private key pairs based on the serial encryption mode, the number of the procurement public and private key pairs is consistent with and corresponds to the number of the procurement units, and the procurement units encrypt the procurement information of different levels based on the procurement public key pairs, including: Step S41, cur and next are used as the level representation of the purchasing unit, and cur=1, next=cur+1; Step S42, the cur-level purchasing unit uses the corresponding purchasing public key code cur,pb Purchase information order for cur-level purchasing units cur Encrypt and obtain the encrypted purchase information order cur,c , and then order cur,c Send to the next level purchasing unit; Step S43: Determine whether the next-level purchasing unit has received the order cur,c ; If not received, the next-level purchasing unit uses the corresponding purchasing public key code next,pb Encrypt the purchase information order of the next-level purchase unit next , get the encrypted purchase information order next,c ; If received, use code next,pb Encryption order next , plaintext separator and order cur,c , get the encrypted purchase information order next,c ; Step S44, if next+1≤J, let cur=next, order cur,c =order next,c , next=next+1, the cur-level purchasing unit will order cur,c Send to the next level purchasing unit and jump to step S43; If next+1>J, then order next,c =order J,c , get the encrypted purchasing information; Among them, the plaintext separator is uniformly set based on the procurement system to distinguish the identifiers of two plaintexts encrypted at the same time, cur and next are two loop variables, and J represents the number of procurement unit levels; Step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, confirms the rights of the procurement information of different levels and the recipients, and determines the collection procurement information. The recipients are procurement units of the levels corresponding to the procurement information of different levels. A collection procurement information matrix is ​​determined based on the collection procurement information. The collection procurement information and the collection procurement information matrix are used for material distribution.

2. The method according to claim 1, characterized in that In step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, including: the procurement system uses the same procurement private key to decrypt the encrypted procurement information of different levels to obtain the procurement information of different levels.

3. The method according to claim 1, characterized in that In step S5, the procurement system decrypts the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, including: Step S51, let cur=J; Step S52: The purchasing system uses the corresponding level of purchasing private key code cur,ps order cur,c Decrypt and obtain the purchase information order of the corresponding level after decryption cur,d ; Step S53, determine order cur,d Is there a plaintext separator? If not, let order cur =order cur,d Complete the purchase information decryption; if it exists, the order cur,d The plain text before the plain text separator is used as the order cur , update order cur,c for order cur,d For the plaintext after the plaintext separator, let cur=cur-1 and jump to step S52.

4. The method according to any one of claims 2 or 3, characterized in that: In step S5, the receiver is authenticated, including: Step A1, generate two random numbers in the preset range [1, J], the random numbers are recorded as k1 and k2 in ascending order; confirm the recipient as the purchase information Purchasing units of corresponding levels; Step A2, if k1≠I min , then further confirm the rights Purchasing units of corresponding levels; Among them, I min Indicates the highest level number of the procurement information received; the recipient of each level can use a preset value or be generated using a random generation method.

5. The method according to claim 4, characterized in that In step S5, the procurement information of different levels is confirmed, including: Step B1: Order the procurement information of different levels received by the procurement system i Divided into Ω1={order i |I min ≤i<k1},Ω2={order i |k1≤i<k2},Ω3={order i |k2≤i≤I max }, and sort the purchase information in each set in descending order of level; Among them, I max Indicates the lowest level number of the procurement information received; Step B2: The procurement system conducts level-by-level and parallel approval of the procurement information according to the level of the corresponding procurement unit, approves the procurement information that meets the preset procurement conditions, and conducts confirmation feedback processing on the procurement information that does not meet the preset procurement conditions; Step B3: Generate purchase information And the purchase order information matrix AOrder corresponding to the purchase order information k , 1≤k≤3; AOrder k (:,1)=[arc(Ω k (1)),arc(Ω k (2)),...,arc(Ω k (sizeof(Ω k )))] T ; AOrder k (kk,2:Size+1)=Ω k (kk); Among them, AOrder k (:,1) represents the first column of the agency purchase information matrix corresponding to the agency purchase information; AOrder k (kk,2:Size+1) represents the 2nd to Size+1th columns of the kkth row of the procurement information matrix corresponding to the procurement information. Size represents the information dimension supported by the procurement system. arc(variable) represents the subscript of the variable. sizeof(set) represents the number of elements contained in the set.

6. The method according to claim 1, characterized in that After step S5, the method further comprises: Step S6, the procurement system obtains the production public-private key pair of the producer, wherein the production public-private key pair includes a production public key and a production private key; Step S7, the procurement system encrypts the agency procurement information matrix based on the unit public key corresponding to the recipient to obtain the encrypted agency procurement information matrix, and sends it to the recipient; encrypts the agency procurement information based on the production public key to obtain the encrypted agency procurement information, and sends it to the production party; Step S8, the production party decrypts the encrypted agency purchase information based on the production private key to obtain the agency purchase information, and delivers the materials to the recipient based on the agency purchase information; Step S9, the recipient decrypts the encrypted agency purchase information matrix based on the unit private key to obtain the agency purchase information matrix, and distributes materials according to different levels based on the agency purchase information matrix.

7. A data rights confirmation system based on coding encryption, the system is applied to the method according to any one of claims 1 to 6, characterized in that: The system comprises: An acquisition module is used for the procurement system to acquire procurement units of different levels and the unit public-private key pairs of each procurement unit, wherein the unit public-private key pairs include a unit public key and a unit private key; A key pair generation module is used for the procurement system to generate a procurement public-private key pair based on a parallel encryption mode or a serial encryption mode, wherein the procurement public-private key pair includes a procurement public key and a procurement private key, and send the procurement public key to the procurement unit; The acquisition module is further used for the purchasing unit to acquire purchasing information of different levels and restore the purchasing matrix, wherein the purchasing information of different levels corresponds to the level of the purchasing unit, and the restored purchasing matrix includes the purchasing information of different levels and the level of the purchasing unit; An encryption module is used for the purchasing unit to encrypt the purchasing information of different levels based on the purchasing public key pair, determine the encrypted purchasing information of different levels, and send the encrypted purchasing information of different levels to the purchasing system; The rights confirmation module is used for the procurement system to decrypt the encrypted procurement information of different levels based on the procurement private key to obtain the procurement information of different levels, to confirm the rights of the procurement information of different levels and the recipients, to determine the collection procurement information, the recipients are procurement units of the levels corresponding to the procurement information of different levels, to determine the collection procurement information matrix based on the collection procurement information, and the collection procurement information and the collection procurement information matrix are used for material distribution.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 6 is implemented.

Images