A comprehensive rights and interests management system

Abstract

A comprehensive rights and interests management system belongs to the technical field of rights and interests management, and solves the problem of low efficiency of rights and interests operation in the prior art. The system includes: the public service platform receives the rights and interests operation and sends it to the card management system; the rights and interests system uploads the updated rights and interests information to the unified rights and interests platform; the card management system reviews the rights and interests operation, obtains the rights and interests data from the unified rights and interests platform, and if the rights and interests operation is a rights and interests card application, generates the rights and interests card making information and sends it to the card making platform and the third-party card platform; if the rights and interests operation is a rights and interests acquisition, it returns to the public service platform; the third-party card platform generates the corresponding third-party card information according to the rights and interests card making information and sends it to the card making platform; the unified rights and interests platform uses blockchain to store rights and interests data; the card making platform makes cards according to the rights and interests card making information and the third-party card information and sends the making information to the card management system; the card management system uploads the making information to the unified rights and interests platform. Efficient and fast rights and interests management is achieved.

Description

Technical Field

[0001] The present invention relates to the technical field of rights and interests management, and in particular to a comprehensive rights and interests management system. Background Art

[0002] Traditional rights and interests cards are directly opened by each rights and interests system. Because there are different rights and interests between rights and interests systems, for example, for citizens' public transportation, the transportation card system of the transportation department directly opens the card; for civil affairs information, there is a relevant system switch of the civil affairs department. That is, each rights and interests system builds a complete rights and interests system for each user. Each rights and interests system maintains a set of rights and interests system. When users need to understand each right, they need to register and query in different systems separately, and register and activate in each product rights and interests system separately, which is inconvenient to use. If multiple rights and interests systems are centrally managed and shared, data security cannot be guaranteed, and trusted data access and privacy protection between different rights and interests systems cannot be guaranteed.

[0003] In today's society, the management of rights and interests involves many aspects, including the application, update and acquisition of various rights and interests. Traditional management methods are often decentralized, and there is a lack of effective integration between various links. For example, rights and interests data may be stored in different systems, the security and consistency of the data are difficult to guarantee, and the update efficiency of rights and interests is low; the traditional database storage method has the risk of data tampering, and data sharing and synchronization between different departments are difficult, which affects the overall efficiency of rights and interests management. With the development of society, people's attention to rights and interests continues to increase, and the number and types of rights and interests operations are also increasing. Traditional manual or semi-automated rights and interests management methods can no longer meet the requirements of efficiency and accuracy. For example, the application for a rights and interests card may require review and data processing by multiple departments, and the process is cumbersome and error-prone. Summary of the invention

[0004] In view of the above analysis, the embodiment of the present invention aims to provide a comprehensive rights and interests management system to solve the problem of low efficiency of existing rights and interests operations.

[0005] On the one hand, an embodiment of the present invention provides a comprehensive rights and interests management system, including the following modules:

[0006] The public service platform is used to receive individual or batch rights and interests operations of users and send the received individual or batch rights and interests operations to the card management system;

[0007] The equity system is used to initiate equity update operations to the unified equity platform; upload updated equity information to the unified equity platform;

[0008] The card management system is used to review the individual or batch rights and interests operation. If the review is passed, the individual or batch rights and interests data is obtained from the unified rights and interests platform. If the rights and interests operation is a rights and interests card application, the rights and interests card production information is generated and sent to the card production platform and the third-party card platform; if the rights and interests operation is a rights and interests acquisition, the rights and interests data is returned to the public service platform;

[0009] The third-party card platform is used to generate corresponding third-party card information according to the card making information of the rights and interests card; and send the corresponding third-party card information generated from the card making information of the rights and interests card to the card making platform;

[0010] Unified equity platform for storing equity data using blockchain;

[0011] The card making platform includes multiple card making machines, which are used to make cards according to the received rights card making information and the corresponding third-party card information. After the card making is completed, the making information is sent to the card management system; the card management system uploads the making information to the unified rights platform.

[0012] Based on the further improvement of the above system, the card management system reviews the personal rights and interests operation, including:

[0013] Obtain personal identification data through the data upload interface and determine whether the personal identification data is correct. If it is incorrect, the review will fail; if the personal identification data is correct, then:

[0014] If the rights and interests operation is not a rights and interests card application, the basic personal information is returned; if the rights and interests operation is a rights and interests card application, it is determined whether the individual is eligible for card issuance. If not, the review fails; otherwise, the basic personal information is returned;

[0015] If the user's confirmation information is received within the specified time, the review is passed; if the user's confirmation information is not received within the specified time, the review fails.

[0016] Based on the further improvement of the above system, the card management system audits the batch equity operation, including:

[0017] Verify whether the user is qualified for batch rights and interests operation. If not, the audit fails. If qualified, obtain the personal identification data of each individual in the batch rights and interests operation through the data upload interface to determine whether the personal identification data is correct. If not, the audit fails. If the personal identification data is correct, then:

[0018] If the rights and interests operation is not an application for a rights and interests card, the basic information of each individual is returned; if the rights and interests operation is an application for a rights and interests card, it is determined whether each individual is eligible for card issuance. If not, the review fails. Otherwise, the basic information of each individual is returned;

[0019] If the user's confirmation information is received within the specified time, the review is passed; if the user's confirmation information is not received within the specified time, the review fails.

[0020] Based on the further improvement of the above system, the card management system also includes an early warning monitoring module for monitoring the rights card application process;

[0021] The early warning monitoring module generates a state machine instance for each rights card application operation and configures a time limit for each state of the state machine instance. The state machine instance is used to monitor the state transition of the corresponding card operation; an alarm is issued when the card operation exceeds the time limit in the current state.

[0022] Based on further improvements of the above system, the unified equity platform includes multiple first nodes and multiple second nodes; the first node is used to maintain the equity ledger of the blockchain, and a smart contract is deployed on the first node; the second node is used to verify and sort the submitted transactions, package the sorted transactions into blocks, and send them to each first node.

[0023] Based on the further improvement of the above system, if the equity operation is an equity update, the updated equity information will be uploaded to the unified equity platform, including:

[0024] The equity system encrypts and signs the equity update information and sends it to the corresponding first node;

[0025] The first node verifies and decrypts the received encrypted and signed rights update information to obtain the rights update information, endorses the rights update information, encrypts and signs the endorsement result, and returns it to the rights system;

[0026] The equity system verifies and decrypts the encrypted and signed endorsement result. If the endorsement result is not a failed verification, the equity update information and the endorsement result are used as a transaction, and the transaction is encrypted and signed and sent to any second node.

[0027] The second node verifies the signature of the received data and decrypts it to obtain the transaction, verifies and sorts the transaction, packages the sorted transaction into a block, and sends it to each first node;

[0028] Each first node updates the local block information according to the received blocks.

[0029] Based on the further improvement of the above system, the first node endorses the equity update information, encrypts and signs the endorsement result and returns it to the equity system, including:

[0030] Call the smart contract to check whether the rights update is legal; if it is not legal, the endorsement result will be verification failure;

[0031] If the transaction is legal, the rights update information is used as the input of the smart contract, and the smart contract is called to simulate the execution of the transaction to obtain the simulated execution result; the simulated execution result is signed as the endorsement result.

[0032] Based on the further improvement of the above system, the following method is used to determine whether the rights update is legal:

[0033] If the equity update type is to add new equity data, the query function of the smart contract is called with the ID of the newly added equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If it exists, the transaction is illegal;

[0034] If the equity update type is to modify the equity data, the query function of the smart contract is called with the ID of the modified equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If not, the transaction is illegal.

[0035] Based on the further improvement of the above system, the second node verifies and sorts the transactions, packages the sorted transactions into blocks, and sends them to each first node, including:

[0036] The second node verifies the validity of the transaction; if the transaction is invalid, it returns a transaction failure message to the equity system;

[0037] The second node sends valid transactions to the buffer for sorting in the order of transaction request time;

[0038] If the block time is reached, or the number of transactions in the buffer reaches the specified number, the transactions in the buffer are packaged into blocks, signed, and sent to each first node.

[0039] Based on the further improvement of the above system,

[0040] The second node verifies the validity of the transaction including:

[0041] Determine whether the number of endorsement results of the transaction meets the endorsement policy requirements. If not, the transaction is invalid;

[0042] If the endorsement policy is that there is more than one endorsement node, then determine whether the simulated execution results of all endorsement results of the transaction are the same. If there are different simulated execution results, the transaction is invalid.

[0043] Compared with the prior art, the present invention realizes unified storage of different rights and interests through a unified rights and interests platform, uniformly stores and manages rights and interests data, ensures data security, consistency and non-tamperability, and timely updates the rights and interests data of the unified rights and interests platform through a rights and interests system. The rights and interests operation of the user is received through a public relations service platform, and the rights and interests operation of the user is connected to the unified rights and interests platform through a card management system, and the rights and interests operation is reviewed. For the rights and interests operation of rights and interests acquisition, the corresponding rights and interests data are obtained from the unified rights and interests platform and returned to the public service platform. For the rights and interests operation of rights and interests card application, after obtaining the rights and interests data from the unified rights and interests platform, the basic information and rights and interests data of the card making object are sent to the card making platform and the third-party card platform, and the rights and interests card is made according to the rights and interests card making information and the corresponding third-party card card information through the card making platform, so that the third-party card information is integrated in the rights and interests card, and the production information returned by the card making platform is uploaded to the unified rights and interests platform, thereby realizing the unified management of different rights and interests, improving the efficiency of operations such as rights and interests card application, rights and interests update and rights and interests acquisition, and ensuring that under different rights and interests operations (such as rights and interests card application, update, acquisition), data can be accurately transmitted between various modules. It also realizes efficient collaboration between the card management system and third-party card platforms, card-making platforms, and unified rights and interests platform. After obtaining rights and interests data, the card management system generates card-making information and sends it to the card-making platform. The card-making platform promptly feeds back the production information to the card management system so that the card management system can upload relevant information to the unified rights and interests platform, solving the current problem of disconnection between the card-making link and other rights and interests management links.

[0044] In the present invention, the above-mentioned technical solutions can also be combined with each other to achieve more preferred combination solutions. Other features and advantages of the present invention will be described in the subsequent description, and some advantages can become obvious from the description, or can be understood by practicing the present invention. The purpose and other advantages of the present invention can be realized and obtained through the contents particularly pointed out in the description and the drawings. BRIEF DESCRIPTION OF THE DRAWINGS

[0045] The accompanying drawings are only used for the purpose of illustrating specific embodiments and are not to be considered as limiting the present invention. In the entire drawings, the same reference symbols represent the same components;

[0046] Figure 1 The block diagram of the comprehensive rights and interests management system according to an embodiment of the present invention. DETAILED DESCRIPTION

[0047] The preferred embodiments of the present invention are described in detail below in conjunction with the accompanying drawings, wherein the accompanying drawings constitute a part of this application and are used together with the embodiments of the present invention to illustrate the principles of the present invention, but are not used to limit the scope of the present invention.

[0048] A specific embodiment of the present invention discloses a comprehensive rights management system, such as Figure 1 As shown, it includes the following modules:

[0049] The public service platform is used to receive individual or batch rights and interests operations of users and send the received individual or batch rights and interests operations to the card management system;

[0050] The equity system is used to initiate equity update operations to the unified equity platform; upload updated equity information to the unified equity platform;

[0051] The card management system is used to review the individual or batch rights and interests operation. If the review is passed, the individual or batch rights and interests data is obtained from the unified rights and interests platform. If the rights and interests operation is a rights and interests card application, the card production information is generated and sent to the card production platform and the third-party card platform; if the rights and interests operation is a rights and interests acquisition, the rights and interests data is returned to the public service platform;

[0052] The third-party card platform is used to generate corresponding third-party card information according to the card making information; the corresponding third-party card information generated by the rights card making information is sent to the card making platform;

[0053] Unified equity platform for storing equity data using blockchain;

[0054] The card-making platform includes multiple card-making machines, which are used to make cards according to the received card-making information and the corresponding third-party card information. After the card making is completed, the making information is sent to the card management system; the card management system uploads the making information to the unified rights and interests platform.

[0055] It should be noted that the unified rights and interests platform is a rights and interests chain platform built by obtaining rights and interests data from various rights and interests systems. The comprehensive rights and interests management system includes multiple rights and interests systems. Rights and interests systems are, for example, civil affairs business management systems, transportation business management systems, student rights and interests management systems and other livelihood-related rights and interests systems. Rights and interests data include individual transportation discount types, student identity types, etc. The rights and interests system initiates a rights and interests update operation to the unified rights and interests platform. Rights and interests updates include adding new rights and interests data and modifying rights and interests data.

[0056] During implementation, third-party card platforms such as transportation card platforms.

[0057] The public service platform provides a user-oriented platform. Users log in to the public service platform through unified identity authentication and apply for relevant rights and interests operations. Rights and interests operation applications include rights and interests card application, rights and interests query and other operations.

[0058] The card management system is used for rights card management, connecting the public service platform, unified rights platform and card production platform.

[0059] Compared with the prior art, the present invention realizes unified storage of different rights and interests through a unified rights and interests platform, uniformly stores and manages rights and interests data, ensures data security, consistency and non-tamperability, and timely updates the rights and interests data of the unified rights and interests platform through a rights and interests system. The rights and interests operation of the user is received through a public relations service platform, and the rights and interests operation of the user is connected to the unified rights and interests platform through a card management system, and the rights and interests operation is reviewed. For the rights and interests operation of rights and interests acquisition, the corresponding rights and interests data are obtained from the unified rights and interests platform and returned to the public service platform. For the rights and interests operation of rights and interests card application, after obtaining the rights and interests data from the unified rights and interests platform, the basic information and rights and interests data of the card making object are sent to the card making platform and the third-party card platform, and the rights and interests card is made according to the rights and interests card making information and the corresponding third-party card card information through the card making platform, so that the third-party card information is integrated in the rights and interests card, and the production information returned by the card making platform is uploaded to the unified rights and interests platform, thereby realizing the unified management of different rights and interests, improving the efficiency of operations such as rights and interests card application, rights and interests update and rights and interests acquisition, and ensuring that under different rights and interests operations (such as rights and interests card application, update, acquisition), data can be accurately transmitted between various modules. It also realizes efficient collaboration between the card management system and third-party card platforms, card-making platforms, and unified rights and interests platform. After obtaining rights and interests data, the card management system generates card-making information and sends it to the card-making platform. The card-making platform promptly feeds back the production information to the card management system so that the card management system can upload relevant information to the unified rights and interests platform, solving the current problem of disconnection between the card-making link and other rights and interests management links.

[0060] The card management system reviews the rights and interests operations from the public service platform. If the rights and interests operation is an application for a rights and interests card, it obtains individual or batch rights and interests data from the unified rights and interests platform, generates card-making information, and sends the card-making information to the card-making platform and the third-party card platform for card making; if the rights and interests operation is rights and interests reading, it obtains individual or batch rights and interests data from the unified rights and interests platform and returns it to the public service platform.

[0061] Specifically, the card management system reviews the personal rights and interests operation, including:

[0062] Obtain personal identification data through the data upload interface and determine whether the personal identification data is correct. If it is incorrect, the review will fail; if the personal identification data is correct, then:

[0063] If the rights and interests operation is not a rights and interests card application, the basic personal information is returned; if the rights and interests operation is a rights and interests card application, it is determined whether the individual is eligible for card issuance. If not, the review fails; otherwise, the basic personal information is returned;

[0064] If the user's confirmation information is received within the specified time, the review is passed; if the user's confirmation information is not received within the specified time, the review fails.

[0065] During implementation, the card management system provides a data upload interface, and users upload personal identity data through the public service platform. If the user is an individual, the personal identity data includes: individual certificate type, certificate number, name, and certificate image.

[0066] During implementation, first check whether the individual's ID type, ID number, name and ID image are consistent. If not, the review will fail.

[0067] If they are consistent, then if the rights and interests operation is a rights and interests card application, then check whether the individual is eligible to make a card. During implementation, the card management system queries the individual's rights and interests card holding status through the unified rights and interests platform. If the personal information does not exist in the unified rights and interests platform, or the individual card application status is normal card holding, then there is no qualification and the review fails. If the rights and interests operation is a rights and interests card application and the user is eligible to make a card, or the rights and interests operation is not a rights and interests card application, then send the user a personal information confirmation. After receiving the user's confirmation information within the specified time, the review is passed, otherwise the review fails.

[0068] Specifically, the card management system reviews the batch equity operation, including:

[0069] Verify whether the user is qualified for batch rights and interests operation. If not, the audit fails. If qualified, obtain the personal identification data of each individual in the batch rights and interests operation through the data upload interface to determine whether the personal identification data is correct. If not, the audit fails. If the personal identification data is correct, then:

[0070] If the rights and interests operation is not an application for a rights and interests card, the basic information of each individual is returned; if the rights and interests operation is an application for a rights and interests card, it is determined whether each individual is eligible for card issuance. If not, the review fails. Otherwise, the basic information of each individual is returned;

[0071] If the user's confirmation information is received within the specified time, the review is passed; if the user's confirmation information is not received within the specified time, the review fails.

[0072] During implementation, if the user is an organization, the personal identification data includes the organization name, the organization's unified social credit code, and the organization's business license image. First, determine whether the organization name, organization's unified social credit code, and the organization's business license image are consistent. If they are inconsistent, a review failure is returned to the public service platform. If they are consistent, verify whether the organization is qualified for batch rights and interests operations. During implementation, determine whether the organization is qualified for batch rights and interests operations by querying the organization name and organization's unified social credit code uploaded by the user. If not, a review failure is returned to the public service platform.

[0073] If the user is qualified for batch rights and interests operations, the personal identification data of the individuals for batch rights and interests operations of the user is obtained through the data upload interface to determine whether the personal identification data is correct. If not, the review will fail. During implementation, as in the aforementioned personal rights and interests operation review, determine whether the ID type, ID number, name and ID image of each individual are consistent. If not, the review will fail. If the personal identification data of each individual in the batch is correct, determine whether the batch rights and interests operation is an application for a rights and interests card. If not, return the basic information of each individual and wait for user confirmation. If so, it is necessary to first determine whether each individual is qualified to make a card. If not, the review will fail. Otherwise, return the basic information of each individual and wait for user confirmation. Whether an individual is qualified to make a card is determined according to the aforementioned method.

[0074] If the content receives user confirmation information within the specified time, the review will be passed, otherwise the review will fail.

[0075] Specifically, the unified rights and interests platform includes multiple first nodes and multiple second nodes; the first nodes are used to maintain the rights and interests ledger of the blockchain, and smart contracts are deployed on the first nodes; the second nodes are used to verify and sort the submitted transactions, package the sorted transactions into blocks, and send them to each first node.

[0076] The unified rights and interests platform uses blockchain to store rights and interests data. During implementation, the unified rights and interests platform constructed includes multiple first nodes (peer nodes) and multiple second nodes. The first node is used to maintain the rights and interests ledger of the blockchain, that is, to endorse transactions and update the blockchain. A second node network is constructed, and the second node network includes at least four second nodes (orderer nodes). The second nodes are used to verify and sort transactions, package the sorted transactions into blocks, and send them to each first node, so that the first node updates the blocks and status database. Message synchronization is performed between multiple second nodes. A smart contract is deployed on the first node, and the smart contract is used to read and write the rights and interests chain and status data of the first node. The endorsement strategy of the smart contract can be selected to endorse any node, that is, the endorsement result can be recognized after any first node endorses. During implementation, in order to prevent the smart contract from being tampered with, a strategy of more than two first nodes for endorsement can also be selected. In order to ensure data security, the blockchain of the unified rights and interests platform constructed is a consortium chain. All first nodes and second nodes join the same channel, share and manage the rights and interests ledger in the channel, and realize the safe sharing and management of rights and interests data.

[0077] During implementation, each first node stores equity data, that is, each update information of the equity data is saved on the blockchain of the first node (obtaining the equity ledger), and the state database of the first node stores the latest state data obtained based on the latest update.

[0078] During implementation, the card management system and each rights and interests system establish a connection with the corresponding first node (peer node) through the https protocol.

[0079] The equity system uploads the updated equity information to the unified equity platform. Specifically, it includes:

[0080] S11. The equity system encrypts and signs the equity modification information and sends it to the corresponding first node;

[0081] S12. The first node verifies and decrypts the received encrypted and signed rights update information to obtain the rights update information, endorses the rights update information, encrypts and signs the endorsement result, and returns it to the rights system;

[0082] S13. The equity system verifies and decrypts the encrypted and signed endorsement result. If the endorsement result is not a verification failure, the equity update information and the endorsement result are used as a transaction, and the transaction is encrypted and signed and sent to any second node.

[0083] S14. The second node verifies the signature of the received data and decrypts it to obtain the transaction, sorts the transactions, packages the sorted transactions into blocks, and sends them to each first node;

[0084] S15. Each first node updates the local block information according to the received blocks.

[0085] During implementation, the rights and interests update information includes: update type (new / modified), updated data, and the rights and interests system encrypts and signs the rights and interests update information and sends it to the corresponding first node.

[0086] It should be noted that each first node stores the blockchain (ledger copy) and status data in the channel, and the status data is the latest status data obtained based on the latest transaction.

[0087] After the first node receives the encrypted and signed equity update information, it first verifies and decodes the signature, and then endorses the equity update information.

[0088] The first node endorses the equity update information, encrypts and signs the endorsement result and returns it to the equity system, including:

[0089] S121. Call the smart contract to check whether the rights update is legal; if not, the endorsement result is verification failure;

[0090] S122. If the transaction is legal, the rights update information is used as the input of the smart contract, and the execution of the smart contract simulation transaction is called to obtain the simulation execution result; the simulation execution result is signed as the endorsement result.

[0091] During implementation, the following methods are used to determine whether the rights and interests update is legal:

[0092] If the equity update type is to add new equity data, the query function of the smart contract is called with the ID of the newly added equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If it exists, the transaction is illegal;

[0093] If the equity update type is to modify the equity data, the query function of the smart contract is called with the ID of the modified equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If not, the transaction is illegal. During implementation, the ID of the equity data is a personal unique identifier consisting of the individual's certificate type, certificate number and name. If the equity update type is to add new equity data, but the data of the individual / individual already exists in the state database of the first node, the transaction is illegal; if the equity update type is to modify the equity data, but the data of the individual / individual does not exist in the state database of the first node, the transaction is illegal.

[0094] If the transaction is legal, the smart contract is called to simulate the execution of rights and interests update based on the state database of the first node, and the simulated execution result is obtained. The simulated execution result is signed as the endorsement result.

[0095] It should be noted that the simulation execution result includes a read set and a write set, which correspond to the state data before the simulation transaction is executed and the state data after the simulation transaction is executed.

[0096] For example, if the equity update type is to modify the equity data, the state data is obtained, and the corresponding equity data modification is performed thereon to obtain the simulation execution result.

[0097] The equity system verifies and decrypts the encrypted and signed endorsement result received. If the endorsement result fails the verification, the next step will not be performed.

[0098] If the endorsement result is not verification failure, after the equity system receives the required endorsement result according to the endorsement policy, it encrypts the equity update information and the endorsement result as a transaction and sends it to any second node after signing.

[0099] The second node verifies the signature of the received data and decrypts it to obtain the transaction, and then sorts and packages it into blocks.

[0100] It should be noted that there is a consensus mechanism between multiple second nodes. When implemented, the Byzantine algorithm is used for consensus to determine which second node will sort transactions and pack blocks.

[0101] Specifically, the second node verifies and sorts the transactions, packages the sorted transactions into blocks, and sends them to each first node, including:

[0102] The second node verifies the validity of the transaction; if the transaction is invalid, it returns a transaction failure message to the equity system;

[0103] The second node sends valid transactions to the buffer for sorting in the order of transaction request time;

[0104] If the block time is reached, or the number of transactions in the buffer reaches the specified number, the transactions in the buffer are packaged into blocks, signed, and sent to each first node.

[0105] During implementation, the second node verifies the validity of the transaction including:

[0106] Determine whether the number of endorsement results of the transaction meets the endorsement policy requirements. If not, the transaction is invalid;

[0107] If the endorsement policy is that there is more than one endorsement node, then determine whether the simulated execution results of all endorsement results of the transaction are the same. If there are different simulated execution results, the transaction is invalid.

[0108] For valid transactions, the second blockchain node sends the transactions to the buffer for sorting in the chronological order of the transaction requests.

[0109] When implemented, the time of the transaction request is the timestamp when the equity system sends the equity update information to the unified equity platform.

[0110] When the block generation conditions are met, the transactions in the buffer are packaged into blocks and signed, and sent to each first node to update the blockchain and status database.

[0111] After receiving the block, the first node verifies whether the signature is valid. If it is valid, it updates the local block information based on the received block. Specifically, it includes:

[0112] Add the received block to the Ontology blockchain;

[0113] Update the local state database based on the received blocks.

[0114] During implementation, the first node adds the block to the local blockchain and updates the local status data according to the transaction information in the received block.

[0115] During implementation, the card management system and each rights and interests system subscribe to events on the blockchain of the unified rights and interests platform through the message mechanism. When the blockchain is updated, messages corresponding to the events are sent to the card management system and each rights and interests system, so that the card management system and each rights and interests system can monitor changes in the rights and interests status in a timely manner.

[0116] Obtain individual or batch equity data from the unified equity platform, including:

[0117] S21. The card management system encrypts and signs the rights query information and sends it to the corresponding first node;

[0118] S22. The first node verifies the signature of the received encrypted and signed rights query information and decrypts it to obtain the rights query information, endorses the rights query information, encrypts and signs the endorsement result, and returns it to the card management system;

[0119] S23. The card management system verifies and decrypts the encrypted and signed endorsement result. If the endorsement result fails the verification, the transaction verification failure is returned to the public service platform. Otherwise, the equity data is obtained from the endorsement result.

[0120] When implemented, the process of steps S21 to S22 is the same as the process of steps S11 to S12, except for the difference in whether step S121 determines whether it is legal. When obtaining individual or batch rights and interests data from the unified rights and interests platform, the following method is used to determine whether the rights and interests query information is legal:

[0121] The query function of the smart contract is called with the ID of the queried equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If not, the transaction is illegal.

[0122] In step S23, the card management system verifies and decrypts the encrypted and signed endorsement result to obtain the endorsement result. If the endorsement result is not failed verification, the queried rights and interests data is obtained according to the simulation execution result in the endorsement result.

[0123] For the rights and interests operations of rights and interests card applications, the card management system obtains individual or batch rights and interests data from the unified rights and interests platform, generates card production information, and pushes it to the card production platform and third-party card platform.

[0124] Among them, the card production information includes the card production batch, the number of cards produced, the basic information and rights of the card production object, etc.

[0125] The third-party card platform generates corresponding third-party card information from the rights and interests card production information; and sends the corresponding third-party card information generated from the rights and interests card production information to the card production platform.

[0126] For example, if the third-party card platform is a transportation card platform, it generates transportation card information corresponding to the corresponding rights card according to the card making information, such as the card number information, and pushes the transportation card information to the card making platform.

[0127] The card-making platform includes multiple card-making machines, which are used to make cards according to the received card-making information and third-party card information. After the card making is completed, the making information is sent to the card management system; the card management system uploads the making information to the unified rights and interests platform.

[0128] During implementation, the card management system is connected to the card production platform and the third-party card platform through the network and communicates in encrypted form. That is, the card management system encrypts and signs the card production information and sends it to the card production platform and the third-party card platform. After receiving the data, the card production platform verifies the signature and decrypts it to obtain the card production information. After the card production platform completes the card production, it encrypts and signs the production information and sends it to the card management system. After receiving the data, the card management system verifies the signature and decrypts it to obtain the production information.

[0129] After receiving the production information returned by the card production platform, the card management system uploads the production information to the unified rights and interests platform. The production information includes: card production status, card number, financial account information, third-party card number, etc.

[0130] The process of uploading the production information to the unified rights and interests platform is the same as that of uploading the updated rights and interests information to the unified rights and interests platform, that is, updating the card production information of an individual / subject in the unified rights and interests platform.

[0131] The implementation process is the same as the process in which each equity system uploads equity data to the blockchain through the corresponding first node.

[0132] In order to improve the security of data transmission and eliminate the security risks of interactive data being leaked or tampered with, data interaction between the card management system and the public service platform, the unified rights and interests platform, the third-party card platform and the card production platform, and data interaction between the rights and interests system and the unified rights and interests platform all use encrypted transmission.

[0133] During implementation, the card management system and the public service platform, unified rights and interests platform, third-party card platform, and card production platform will issue asymmetric key pairs, and the two parties will exchange asymmetric encrypted public keys. Data transmission between the two parties will be encrypted and signed to improve security. Similarly, the rights and interests system and the unified rights and interests platform will unify asymmetric key pairs, and the two parties will exchange asymmetric encrypted public keys.

[0134] Specifically, the encryption and signing includes the following process:

[0135] The sender randomly generates a symmetric key, and symmetrically encrypts the sent data based on the symmetric key to generate symmetric ciphertext data;

[0136] The sender asymmetrically encrypts the symmetric key according to the asymmetrically encrypted public key of the receiver to generate an asymmetric key ciphertext;

[0137] The sender packages the symmetric ciphertext data and the asymmetric key ciphertext to generate a temporary ciphertext, and uses its own asymmetric encryption private key to digitally sign the temporary ciphertext to generate a signature value;

[0138] The sender packages the signature value and the temporary seal to obtain the final sent data.

[0139] Specifically, the signature verification and decryption process includes:

[0140] The receiver splits the received data to obtain the signature value, asymmetric key ciphertext and ciphertext data;

[0141] The receiver verifies the signature value according to the sender's asymmetrically encrypted public key. If the verification fails, the receiver returns a verification failure message. Otherwise, the receiver decrypts the asymmetrical key ciphertext according to its own asymmetrically encrypted private key to obtain the symmetric key.

[0142] Use the symmetric key to decrypt the symmetric ciphertext to obtain the original data sent by the sender.

[0143] Encryption and signing are achieved by combining symmetric encryption, asymmetric encryption and digital signatures, which greatly improves the security of data transmission.

[0144] During implementation, in order to improve the efficiency of card production and facilitate the mastery of the progress of card production, the card management system also includes an early warning monitoring module for monitoring the application process of the rights card;

[0145] The early warning monitoring module generates a state machine instance for each rights card application operation and configures a time limit for each state of the state machine instance. The state machine instance is used to monitor the state transition of the corresponding card operation; an alarm is issued when the card operation exceeds the time limit in the current state.

[0146] During implementation, the process progress of the rights card application is monitored through the state machine to facilitate unified process management. The states of the state machine include: issuing a rights card application, unified rights platform verification failed, unified rights platform verification passed, card production information pushed to the card production platform, card production information pushed to the third-party card platform, and production information returned by the card production platform. Define the things that trigger state transitions under each state. For example, the initial state is issuing a rights card application. When the card management system receives the endorsement result of verification failure, it triggers the transfer to the unified rights platform verification failure state. When the card management system receives the endorsement result of verification passing, it triggers the transfer to the unified rights platform verification passing state.

[0147] For each equity card application, a corresponding state machine instance is generated, and the state machine instance is used to monitor the status of the equity card application.

[0148] During implementation, in order to improve monitoring efficiency, a time limit is configured for each state of the state machine, for example, the time limit for each state is 1 day. For a state machine instance, it is determined whether the time from the start time of entering the current state to the current time exceeds the time limit. If the time limit is exceeded, an alarm message is issued and relevant notifications are pushed to the corresponding role for timely processing.

[0149] Those skilled in the art will appreciate that all or part of the processes of the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the program can be stored in a computer-readable storage medium, wherein the computer-readable storage medium is a disk, an optical disk, a read-only storage memory, or a random access memory, etc.

[0150] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any changes or substitutions that can be easily conceived by any technician familiar with the technical field within the technical scope disclosed by the present invention should be covered within the protection scope of the present invention.

Claims

1. A comprehensive rights and interests management system, characterized in that: Includes the following modules: The public service platform is used to receive individual or batch rights and interests operations of users and send the received individual or batch rights and interests operations to the card management system; The equity system is used to initiate equity update operations to the unified equity platform; upload updated equity information to the unified equity platform; The card management system is used to review the individual or batch rights and interests operation. If the review is passed, the individual or batch rights and interests data is obtained from the unified rights and interests platform. If the rights and interests operation is a rights and interests card application, the rights and interests card production information is generated and sent to the card production platform and the third-party card platform; if the rights and interests operation is a rights and interests acquisition, the rights and interests data is returned to the public service platform; The third-party card platform is used to generate corresponding third-party card information according to the card making information of the rights and interests card; and send the corresponding third-party card information generated from the card making information of the rights and interests card to the card making platform; Unified equity platform for storing equity data using blockchain; The card making platform includes multiple card making machines, which are used to make cards according to the received rights card making information and the corresponding third-party card information. After the card making is completed, the making information is sent to the card management system; the card management system uploads the making information to the unified rights platform; The unified equity platform includes a plurality of first nodes and a plurality of second nodes; the first nodes are used to maintain the equity ledger of the blockchain, and a smart contract is deployed on the first nodes; the second nodes are used to verify and sort the submitted transactions, package the sorted transactions into blocks, and send them to each first node; If the equity operation is an equity update, the updated equity information will be uploaded to the unified equity platform, including: The equity system encrypts and signs the equity update information and sends it to the corresponding first node; The first node verifies and decrypts the received encrypted and signed rights update information to obtain the rights update information, endorses the rights update information, encrypts and signs the endorsement result, and returns it to the rights system; The equity system verifies and decrypts the encrypted and signed endorsement result. If the endorsement result is not a failed verification, the equity update information and the endorsement result are used as a transaction, and the transaction is encrypted and signed and sent to any second node. The second node verifies the signature of the received data and decrypts it to obtain the transaction, verifies and sorts the transaction, packages the sorted transaction into a block, and sends it to each first node; Each first node updates the block information of the local area according to the received blocks; The encryption and signing process includes the following steps: The sender randomly generates a symmetric key, and symmetrically encrypts the sent data based on the symmetric key to generate symmetric ciphertext data; The sender asymmetrically encrypts the symmetric key according to the asymmetrically encrypted public key of the receiver to generate an asymmetric key ciphertext; The sender packages the symmetric ciphertext data and the asymmetric key ciphertext to generate a temporary ciphertext, and uses its own asymmetric encryption private key to digitally sign the temporary ciphertext to generate a signature value; The sender packages the signature value and the temporary seal to obtain the final sent data.

2. The comprehensive rights and interests management system according to claim 1, characterized in that: The card management system reviews the personal rights and interests operations, including: Obtain personal identification data through the data upload interface and determine whether the personal identification data is correct. If it is incorrect, the review will fail; if the personal identification data is correct, then: If the rights and interests operation is not a rights and interests card application, the basic personal information is returned; if the rights and interests operation is a rights and interests card application, it is determined whether the individual is eligible for card issuance. If not, the review fails; otherwise, the basic personal information is returned; If the user's confirmation information is received within the specified time, the review is passed; if the user's confirmation information is not received within the specified time, the review fails.

3. The comprehensive rights and interests management system according to claim 1 is characterized in that: Specifically, the card management system reviews the batch equity operation, including: Verify whether the user is qualified for batch rights and interests operation. If not, the audit fails. If qualified, obtain the personal identification data of each individual in the batch rights and interests operation through the data upload interface to determine whether the personal identification data is correct. If not, the audit fails. If the personal identification data is correct, then: If the rights and interests operation is not an application for a rights and interests card, the basic information of each individual is returned; if the rights and interests operation is an application for a rights and interests card, it is determined whether each individual is eligible for card issuance. If not, the review fails. Otherwise, the basic information of each individual is returned; If the user's confirmation information is received within the specified time, the review is passed; if the user's confirmation information is not received within the specified time, the review fails.

4. The comprehensive rights and interests management system according to claim 1, characterized in that: The card management system also includes an early warning monitoring module for monitoring the rights card application process; The early warning monitoring module generates a state machine instance for each rights card application operation and configures a time limit for each state of the state machine instance. The state machine instance is used to monitor the state transition of the corresponding card operation; an alarm is issued when the card operation exceeds the time limit in the current state.

5. The comprehensive rights and interests management system according to claim 1, characterized in that: The first node endorses the equity update information, encrypts and signs the endorsement result and returns it to the equity system, including: Call the smart contract to check whether the rights update is legal; if it is not legal, the endorsement result will be verification failure; If the transaction is legal, the rights update information is used as the input of the smart contract, and the smart contract is called to simulate the execution of the transaction to obtain the simulated execution result; the simulated execution result is signed as the endorsement result.

6. The comprehensive rights and interests management system according to claim 5, characterized in that: The following methods are used to determine whether the rights and interests update is legal: If the equity update type is to add new equity data, the query function of the smart contract is called with the ID of the newly added equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If it exists, the transaction is illegal; If the equity update type is to modify the equity data, the query function of the smart contract is called with the ID of the modified equity data as the index to query whether the ID of the equity data exists in the state database of the first node. If not, the transaction is illegal.

7. The comprehensive rights and interests management system according to claim 1, characterized in that: The second node verifies and sorts the transactions, packages the sorted transactions into blocks, and sends them to each first node, including: The second node verifies the validity of the transaction; if the transaction is invalid, it returns a transaction failure message to the equity system; The second node sends valid transactions to the buffer for sorting in the order of transaction request time; If the block time is reached, or the number of transactions in the buffer reaches the specified number, the transactions in the buffer are packaged into blocks, signed, and sent to each first node.

8. The comprehensive rights and interests management system according to claim 7 is characterized in that: The second node verifies the validity of the transaction including: Determine whether the number of endorsement results of the transaction meets the endorsement policy requirements. If not, the transaction is invalid; If the endorsement policy is that there is more than one endorsement node, then determine whether the simulated execution results of all endorsement results of the transaction are the same. If there are different simulated execution results, the transaction is invalid.

Images