Trusted identity system of power equipment supply chain and information authorization sharing method

Abstract

The invention relates to the technical field of supply chain management, and discloses a trusted identity system and information authorization sharing method of a power equipment supply chain, and the system comprises an identity information collection module, an identity information management module, an identity authentication module and an identity verification module. The identity information collection module is used for collecting identity information of each participant in the power equipment supply chain; the identity information comprises digital certificates of personnel, equipment and an institution, and the digital certificates are issued by a third-party electronic authentication institution; and the identity information management module is used for carrying out classified storage and encryption management on the collected identity information. Commercial data and customer information of participants are ensured to be fully protected through a federated learning technology, and security and integrity of data in transmission and sharing processes are ensured in combination with a block chain technology, so that the risk of data leakage is avoided, and the user experience is improved. And the application of the multi-party signature mechanism further improves the security and credibility of the data in the sharing process.

Description

Technical Field

[0001] The present invention relates to the technical field of supply chain management, and in particular to a trusted identity system and information authorization sharing method for an electric power equipment supply chain. Background Art

[0002] Given the high complexity and stability of the power system, information sharing in the power equipment supply chain is very important. Information sharing can not only promote seamless connection between all links in the supply chain, improve response speed and efficiency, but also effectively reduce the risks brought by information asymmetry, such as inventory backlogs and imbalance between supply and demand. By sharing key data such as production plans, inventory status, and logistics information in real time, power companies can more accurately predict market demand, optimize resource allocation, and ensure timely supply and efficient operation of power equipment.

[0003] However, the power equipment supply chain involves multiple participants, including suppliers, manufacturers, distributors, etc., each of which has sensitive business data and customer information. How to achieve information sharing while ensuring data privacy is a major challenge. Secondly, the lack of uniformity in technical standards and interfaces also limits the breadth and depth of information sharing. Different companies may adopt different information systems and technical architectures, resulting in difficulties in data exchange. Summary of the invention

[0004] In view of the deficiencies in the prior art, the present invention provides a trusted identity system and information authorization sharing method for an electric power equipment supply chain, which solves the problem of achieving data sharing without ensuring privacy.

[0005] To achieve the above objectives, the present invention is implemented through the following technical solutions: a trusted identity system for a power equipment supply chain, including an identity information collection module, an identity information management module, an identity authentication module and an identity authentication module;

[0006] The identity information collection module is used to collect the identity information of each participant in the power equipment supply chain;

[0007] The identity information includes digital certificates of personnel, equipment and institutions, and the digital certificates are issued by a third-party electronic certification agency;

[0008] The identity information management module is used to classify, store and encrypt the collected identity information;

[0009] The identity authentication module authenticates the digital certificates of each participating entity through the alliance chain management platform; the authentication is based on a multi-party signature confirmation mechanism to ensure that the identity information cannot be tampered with;

[0010] The identity authentication module is used to verify the validity of the digital certificate of the participating entity, including checking the certificate validity period, hash operation and signature information verification, and writing the verification results into the blockchain.

[0011] Preferably, the identity information management module encrypts data including sensitive information through a cryptographic infrastructure.

[0012] Preferably, the identity authentication module supports at least three persons from the same enterprise to confirm the signature of the digital certificate.

[0013] Preferably, the identity verification module confirms the validity and integrity of the identity information by verifying the digital certificate signature information and the public key of the individual or enterprise.

[0014] An information authorization sharing method for a power equipment supply chain comprises the following steps:

[0015] S1. Establish an identity authentication and authorization mechanism based on blockchain: Use digital certificates to authenticate and authorize the identities of participating entities to ensure the authorization mechanism, and then use blockchain technology to set up access control mechanisms for each participant in the power equipment supply chain;

[0016] S2. Define roles and authority control: Based on different business requirements in the supply chain system, participants are divided into system administrators, application personnel and visitors. System administrators have management authority over all modules, application personnel are responsible for data query and writing, and visitors only have data query authority.

[0017] S3, Authentication and Access Authorization: When a participant initiates an access request, the system authenticates the user through a digital certificate and authorizes the user based on predefined roles and permission control policies. Unauthorized requests will be rejected.

[0018] S4. Use federated learning technology for data sharing: Using federated learning technology, participants can achieve joint analysis of data through local data model training without sharing original data, ensuring data privacy while improving the efficiency of information sharing across the entire supply chain;

[0019] S5. Implementation of horizontal and vertical federated learning: The global model is issued through the blockchain platform, and each participant updates the global model after training the local model to conduct horizontal federated learning. Then, through multi-party data matching and alignment, the data of upstream and downstream of the supply chain are jointly analyzed to conduct vertical federated learning.

[0020] S6. Ensure the security of data transmission and model training: During the data sharing process, encryption technology is used to ensure the security and integrity of data transmission. The system adopts the principle of rejection priority in the access control policy. All unauthorized requests will be rejected. Only verified and authorized participants can access or share relevant data.

[0021] Preferably, in the step S1, the authorization mechanism is based on a single authorization subject method bound to a digital certificate, and the digital certificate of the authorization subject is issued by a third-party electronic certification agency, and the legitimacy and security of the authorization process are ensured.

[0022] Preferably, in the step S5, horizontal federated learning coordinates and distributes the global model through the blockchain platform, and the participants perform model training locally and update the global model.

[0023] Preferably, in the step S5, the results of the vertical federated learning joint training model are aggregated and calculated by a third-party collaboration organization to ensure data privacy and sharing security.

[0024] The present invention provides a trusted identity system and information authorization sharing method for the power equipment supply chain. It has the following beneficial effects:

[0025] 1. The present invention uses federated learning technology to allow all participants in the supply chain to train models through local data sets and upload them in encrypted form without directly sharing the original data, ensuring that the business data and customer information of the participants are fully protected. Federated learning is combined with blockchain technology to ensure the security and integrity of data during transmission and sharing, avoiding the risk of data leakage. At the same time, the application of a multi-party signature mechanism ensures that the operations of each party are legal and valid, further improving the security and credibility of data during sharing, and ensuring a balance between privacy protection and information sharing.

[0026] 2. The present invention adopts blockchain technology to create a decentralized and standardized infrastructure, which solves the difficulties in information sharing caused by different enterprises adopting different technical standards and interfaces. The standardized protocol and smart contract mechanism of blockchain ensure that the data of each participant can be interacted in a unified manner without changing the existing information system architecture. Smart contracts automatically execute data exchange, reduce data compatibility issues across enterprises, ensure the accuracy and consistency of data exchange, and enhance the breadth and depth of information sharing. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 This is a diagram of the power equipment supply chain architecture of the present invention;

[0028] Figure 2 is an access control flow chart of the present invention;

[0029] Figure 3 This is a flowchart of the vertical federated learning of the present invention;

[0030] Figure 4 It is a schematic diagram of the power equipment application platform of the present invention;

[0031] Figure 5 This is a data sharing flow chart based on horizontal federated learning of the present invention;

[0032] Figure 6 This is a schematic diagram of the bidding alliance chain of the present invention;

[0033] Figure 7 It is a schematic diagram of the trusted identity system module of the present invention. DETAILED DESCRIPTION

[0034] The following will be combined with the drawings in the specification of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0035] Embodiment 1:

[0036] Please refer to the attached Figure 1 , Attachment Figure 2 and attached Figure 7 , an embodiment of the present invention provides a trusted identity system for a power equipment supply chain, including an identity information collection module, an identity information management module, an identity authentication module and an identity authentication module;

[0037] The identity information collection module is used to collect the identity information of each participant in the power equipment supply chain;

[0038] Identity information includes digital certificates of people, devices and organizations, which are issued by third-party electronic certification agencies;

[0039] The identity information management module is used to classify, store and encrypt the collected identity information;

[0040] The identity authentication module authenticates the digital certificates of each participating entity through the alliance chain management platform. The authentication is based on a multi-party signature confirmation mechanism to ensure that the identity information cannot be tampered with.

[0041] The identity authentication module is used to verify the validity of the digital certificates of the participating entities, including checking the certificate validity period, hash operation and signature information verification, and writing the verification results into the blockchain;

[0042] The identity information management module encrypts data including sensitive information through a cryptographic infrastructure;

[0043] The identity authentication module supports at least three people from the same enterprise to confirm the signature of the digital certificate;

[0044] The identity authentication module confirms the validity and integrity of identity information by verifying the digital certificate signature information and public key of an individual or enterprise.

[0045] Specifically, the identity information collection module is used to obtain the identity information of each participant in the power equipment supply chain, including digital certificates of personnel, equipment and institutions issued by a third-party electronic certification agency as the only identity proof for entering the system; the identity information management module is used to classify and store the collected identity information, and encrypt and protect sensitive data through a cryptographic infrastructure to ensure the confidentiality and integrity of the data; the identity authentication module uses a multi-party signature confirmation mechanism through the alliance chain management platform, and at least three people from the same company sign and confirm the digital certificate, and write the authenticated identity information into the blockchain to ensure that the information cannot be tampered with and is traceable; the identity authentication module is responsible for the validity period, hash value and The signature information is checked and verified, and the verification results are recorded on the chain through blockchain technology to ensure the authenticity of the identity and the security of the system; based on the identity authentication and verification mechanism, the system also supports federated learning algorithms for data sharing and privacy protection in the supply chain; in particular, in the algorithm and model design, the hash algorithm for identity authentication can use the SHA-256 encryption algorithm, and the signature verification uses the RSA public key encryption mechanism; in identity management, data encryption is performed through symmetric encryption (such as AES) to ensure the security of data transmission; the entire system uses a consortium chain architecture to ensure that the identity authentication and data sharing between all participants in the supply chain are highly secure and tamper-proof, thereby improving the transparency and efficiency of supply chain management.

[0046] Embodiment 2:

[0047] Please refer to the attached Figure 3 -Attached Figure 6 , an information authorization sharing method for a power equipment supply chain, comprising the following steps:

[0048] S1. Establish an identity authentication and authorization mechanism based on blockchain: Use digital certificates to authenticate and authorize the identities of participating entities to ensure the authorization mechanism, and then use blockchain technology to set up access control mechanisms for each participant in the power equipment supply chain;

[0049] S2. Define roles and authority control: Based on different business requirements in the supply chain system, participants are divided into system administrators, application personnel and visitors. System administrators have management authority over all modules, application personnel are responsible for data query and writing, and visitors only have data query authority.

[0050] S3, Authentication and Access Authorization: When a participant initiates an access request, the system authenticates the user through a digital certificate and authorizes the user based on predefined roles and permission control policies. Unauthorized requests will be rejected.

[0051] S4. Use federated learning technology for data sharing: Using federated learning technology, participants can achieve joint analysis of data through local data model training without sharing original data, ensuring data privacy while improving the efficiency of information sharing across the entire supply chain;

[0052] S5. Implementation of horizontal and vertical federated learning: The global model is issued through the blockchain platform, and each participant updates the global model after training the local model to conduct horizontal federated learning. Then, through multi-party data matching and alignment, the data of upstream and downstream of the supply chain are jointly analyzed to conduct vertical federated learning.

[0053] S6. Ensure the security of data transmission and model training: In the process of data sharing, encryption technology is used to ensure the security and integrity of data transmission. The system adopts the principle of rejection priority in the access control strategy. All unauthorized requests will be rejected. Only verified and authorized participants can access or share relevant data.

[0054] In step S1, the authorization mechanism is based on a single authorization subject method bound to a digital certificate. The digital certificate of the authorization subject is issued by a third-party electronic certification agency, which ensures the legitimacy and security of the authorization process.

[0055] In step S5, horizontal federated learning coordinates and distributes the global model through the blockchain platform, and the participants perform model training locally and update the global model;

[0056] In step S5, the results of the vertical federated learning joint training model are aggregated and calculated by a third-party collaborative organization to ensure data privacy and sharing security.

[0057] Specifically, in the information authorization and sharing method of the power equipment supply chain, the system relies on the server-client architecture, with the blockchain system of the supply chain as the server, and each application system or organization as an independent client participant; the blockchain system, as the server, is responsible for issuing global model parameters and coordinating the aggregation of training results of each client, while the application system or organization of each participant, as the client, performs model training based on local data and participates in the federated learning process; the entire process can effectively ensure data privacy protection while achieving efficient information authorization and sharing. Specifically, the server (blockchain system) first issues the initial parameters βt of the global model to each client, C0, C1, ..., Cn-1; after receiving the global model parameters, each client performs local model training based on its local data set D i to form an updated local model β~it; the model training process optimizes the local model parameters through the gradient descent method; the model update formula is:

[0058]

[0059] Among them, D i is the local dataset on the client Ci, α is the local learning rate, which controls the step size of each model update. For client Ci in local dataset D i The loss function on ;

[0060] After each client completes local model training, it will send the updated model to Upload to the blockchain server; the blockchain server acts as the aggregation center of the global model, collects and aggregates the local models uploaded by all clients to obtain the updated global model β t+1 , the aggregation formula is:

[0061]

[0062] in, is the aggregation weight of client Ci in round t, which is usually determined by the sample size of each client's local data set;

[0063] Aggregation weight The calculation method is as follows:

[0064]

[0065] Among them, N i The local dataset D on the client Ci i The number of samples, the larger the sample size, the greater the contribution of the client to the update of the global model;

[0066] After the aggregation is completed, the blockchain server will update the global model β t+1The new global model is sent to all clients, and the clients continue to conduct the next round of local training based on the new global model, and so on, until the global model reaches the predetermined convergence condition; in the process of data sharing, the blockchain system controls the access rights of data through smart contracts to ensure that each participant can only access the data related to its role and authority to prevent unauthorized operations; in addition, the system also introduces a rejection priority strategy. If a client's access request does not pass the predefined permission control, the system will automatically reject the request and record the operation; this ensures the security of the entire supply chain system and the integrity of the data; this method effectively combines the decentralized characteristics of the blockchain and the privacy protection advantages of federated learning, ensuring that all parties in the supply chain share the results of the global model without leaking local data; and every data upload, identity authentication, model update or authorization request in the supply chain will be accompanied by a unique timestamp. The timestamp is generated by the timestamp server in the blockchain to record the specific time point when the operation occurs. The timestamp server is responsible for providing accurate time information for all events in the supply chain system, and encrypts the time information through cryptographic algorithms to ensure that it cannot be tampered with. In addition, when it comes to multiple links in the supply chain, such as production, inventory, and logistics, the federated learning model can provide effective data analysis and decision-making support for all participants; through this mechanism, data sharing and information authorization in the power equipment supply chain achieve a high degree of security and privacy protection. All parties in the supply chain can not only share data results efficiently, but also improve information transparency and operational efficiency in the entire chain of supply chain business.

[0067] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

Claims

1. A trusted identity system for the power equipment supply chain, characterized in that: It includes an identity information collection module, an identity information management module, an identity authentication module and an identity verification module; The identity information collection module is used to collect the identity information of each participant in the power equipment supply chain; The identity information includes digital certificates of personnel, equipment and institutions, and the digital certificates are issued by a third-party electronic certification agency; The identity information management module is used to classify, store and encrypt the collected identity information; The identity authentication module authenticates the digital certificates of each participating entity through the alliance chain management platform; the authentication is based on a multi-party signature confirmation mechanism to ensure that the identity information cannot be tampered with; The identity authentication module is used to verify the validity of the digital certificate of the participating entity, including checking the certificate validity period, hash operation and signature information verification, and writing the verification results into the blockchain.

2. A trusted identity system for a power equipment supply chain according to claim 1, characterized in that: The identity information management module encrypts data including sensitive information through a cryptographic infrastructure.

3. A trusted identity system for a power equipment supply chain according to claim 1, characterized in that: The identity authentication module supports at least three persons from the same enterprise to confirm the signature of the digital certificate.

4. A trusted identity system for a power equipment supply chain according to claim 1, characterized in that: The identity verification module verifies the validity and integrity of the identity information by verifying the digital certificate signature information and the public key of the individual or enterprise.

5. A method for information authorization sharing in a power equipment supply chain, according to a trusted identity system for a power equipment supply chain as described in any one of claims 1 to 4, characterized in that: The following steps are involved: S1. Establish an identity authentication and authorization mechanism based on blockchain: Use digital certificates to authenticate and authorize the identities of participating entities to ensure the authorization mechanism, and then use blockchain technology to set up access control mechanisms for each participant in the power equipment supply chain; S2. Define roles and authority control: Based on different business requirements in the supply chain system, participants are divided into system administrators, application personnel and visitors. System administrators have management authority over all modules, application personnel are responsible for data query and writing, and visitors only have data query authority. S3, Authentication and Access Authorization: When a participant initiates an access request, the system authenticates the user through a digital certificate and authorizes the user based on predefined roles and permission control policies. Unauthorized requests will be rejected. S4. Use federated learning technology for data sharing: Using federated learning technology, participants can achieve joint analysis of data through local data model training without sharing original data, ensuring data privacy while improving the efficiency of information sharing across the entire supply chain; S5. Implementation of horizontal and vertical federated learning: The global model is issued through the blockchain platform, and each participant updates the global model after training the local model to conduct horizontal federated learning. Then, through multi-party data matching and alignment, the data of upstream and downstream of the supply chain are jointly analyzed to conduct vertical federated learning. S6. Ensure the security of data transmission and model training: During the data sharing process, encryption technology is used to ensure the security and integrity of data transmission. The system adopts the principle of rejection priority in the access control policy. All unauthorized requests will be rejected. Only verified and authorized participants can access or share relevant data.

6. The information authorization sharing method of the power equipment supply chain according to claim 5 is characterized in that: In the step S1, the authorization mechanism is based on a single authorization subject method bound to a digital certificate. The digital certificate of the authorization subject is issued by a third-party electronic certification agency, and the legitimacy and security of the authorization process are ensured.

7. The information authorization sharing method of the power equipment supply chain according to claim 5 is characterized in that: In the S5 step, horizontal federated learning coordinates and distributes the global model through the blockchain platform, and the participants perform model training locally and update the global model.

8. The information authorization sharing method of the power equipment supply chain according to claim 5 is characterized in that: In the S5 step, the results of the vertical federated learning joint training model are aggregated and calculated by a third-party collaborative organization to ensure data privacy and sharing security.

Images