Financial supply chain fund flow tracking system based on block chain

Abstract

The invention belongs to the field of fund flow tracking, and particularly discloses a financial supply chain fund flow tracking system based on a block chain, and the system comprises a data collection module, an intelligent contract design module, a privacy protection module and an interface docking module. According to the method based on the Ethereum block chain, efficient capital flow traceability is realized in a financial supply chain by using an intelligent contract and dispersed under-chain storage; a block chain technology is used, an intelligent contract is used as a data aggregation controller, a homomorphic encryption technology is combined, data confidentiality and data integrity are ensured, identity check is performed on related personnel, and data tampering and leakage are prevented.

Description

Technical Field

[0001] The present invention relates to the field of fund flow tracking, and specifically refers to a financial supply chain fund flow tracking system based on blockchain. Background Art

[0002] Financial supply chain capital chain tracking is the process of tracking and monitoring the flow path, status and related information of funds in the financial supply chain. It can allow relevant parties to better understand the direction and status of funds and enhance the openness and fairness of the market. However, the existing capital chain tracking system cannot achieve real-time tracking. There is a certain time lag. The data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking. It involves a large amount of capital data, which may be affected by human operational errors or deliberate concealment, causing concerns about data privacy protection and security, and reducing the accuracy of tracking. Summary of the invention

[0003] In view of the above situation, in order to overcome the defects of the prior art, the present invention provides a financial supply chain capital flow tracking system based on blockchain. The existing capital chain tracking system cannot achieve real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking. The technical problem, the present invention uses a method based on the Ethereum blockchain, using smart contracts and decentralized off-chain storage to achieve efficient capital flow traceability in the financial supply chain; the existing capital chain tracking system involves a large amount of capital data, which may be affected by factors such as human operational errors or deliberate concealment, causing concerns about data privacy protection and security, and reducing the accuracy of tracking. The present invention uses blockchain technology, uses smart contracts as data aggregation controllers, and combines homomorphic encryption technology to ensure data confidentiality and data integrity, and at the same time performs identity checks on relevant personnel to prevent data tampering and leakage.

[0004] The technical solution adopted by the present invention is as follows: The present invention provides a financial supply chain capital flow tracking system based on blockchain, and the financial supply chain capital flow tracking system based on blockchain includes a data acquisition module, a smart contract design module, a privacy protection module and an interface docking module;

[0005] The data collection module collects data related to fund flows at various links in the supply chain, and the data related to fund flows includes transaction information, payment information and account information;

[0006] The smart contract design module defines the rules and logic for tracking fund flows through smart contracts;

[0007] The privacy protection module verifies and encrypts the collected data related to fund flows and stores them on the blockchain;

[0008] The interface docking module interfaces the financial system and the supply chain to achieve real-time interaction and integration of data.

[0009] Furthermore, the smart contract design module realizes the traceability of supply chain capital flow by defining a method based on the Ethereum blockchain. The smart contract design module includes four components: interest nodes, Ethereum smart contracts, decentralized storage systems, and on-chain resources. Interest nodes are nodes in the supply chain, including suppliers, manufacturers, distributors, consumers, and financial institutions. The personnel of interest nodes are participants in the smart contract. The Ethereum smart contract assigns specific functions according to the role of the interest node in the supply chain. The personnel of the interest node can access the smart contract, decentralized storage system, and on-chain resources through smart devices. The personnel of the interest node can interact with the Ethereum smart contract, initiate pre-authorized function calls, interact with the decentralized storage system, access data related to capital flow, obtain logs and transaction information, and the personnel of all interest nodes are authorized to store data related to capital flow.

[0010] The decentralized storage system uses off-chain storage to store data related to the flow of funds in the supply chain, generates a unique hash value for each piece of data related to the flow of funds, stores the hash values ​​of different data related to the flow of funds on the blockchain, and accesses the hash values ​​through Ethereum smart contracts;

[0011] Use Ethereum smart contracts to deploy the supply chain, define the functions of people at different interest nodes in the supply chain in the smart contract, and use modifiers to mark the access rights of people at the interest nodes to different functions. The decentralized storage system, Ethereum smart contracts and on-chain resources operate in an integrated manner.

[0012] Furthermore, the privacy protection module includes seven organizational nodes: semantic-based privacy protection API, smart device, aggregator, group, smart contract, key generation node and interest node. The semantic-based privacy protection API is a semantic engine, based on an IoT privacy ontology, responsible for matching the terms of service and privacy preferences of interest nodes, and generating a public privacy policy for each interest node. The smart device is responsible for collecting data related to fund flow, encrypting the data related to fund flow using PkPai and PkAgg keys to obtain encrypted data, and storing the encrypted data in the smart contract. The aggregator is a smart device with high memory, which transmits data between smart devices and interest nodes through the smart contract of the interest node. After aggregating all the fund flow related data in the group, the aggregation result is recorded in the smart contract through an update request. The group is formed according to the privacy selection of the interest node, including an aggregator and N smart devices. The individual fund flow related data of each group member is updated by calculating the aggregation result of the member data. The smart contract is an Ethereum smart contract in the smart contract design module, which is responsible for allocating the interest nodes into groups according to the privacy selection of the interest nodes, and sending the aggregated data as the request result to the interest nodes. The key generation node uses the Paillier cryptographic system to generate a key pair off-chain, uploads the obtained public key to the smart contract for update, and sends the updated public key to the interest node off-chain;

[0013] The privacy protection module encrypts the financial data through a data aggregation protection method based on homomorphic encryption. The data aggregation protection method based on homomorphic encryption specifically includes the following steps:

[0014] Step S1: Data initialization, the interest node deploys an instance of the smart contract, and groups the data exporters related to fund flows according to the privacy policy of the personnel of the interest node, and generates a shared key pair for the data exporters related to fund flows and the interest node, which is recorded as a group key. The group key includes a group public key and a group private key;

[0015] Step S2: Formulate a privacy policy. Combine blockchain and off-chain semantic computing to generate and share a privacy policy between the interest node and the data outputter related to the capital flow. The interest node calls the update function defined in the smart contract to upload the terms of service. A new privacy policy is calculated using the semantic-based privacy protection API. The new privacy policy matches the terms of service and privacy preferences. The generated new privacy policy is uploaded to the smart contract.

[0016] Step S3: Data collection. According to the stored new privacy policy, the smart contract determines whether the smart device is included in the created group. If included, each group member retrieves the group public key published by the key generation node on the smart contract based on the fund flow related data in the corresponding group, and uses the public key to encrypt the fund flow related data to obtain the encrypted data. Otherwise, a device abnormality signal is issued.

[0017] Step S4: Data transmission, hash and sign the data related to fund flow, obtain the hash function and digital signature, share a public key between the aggregator and the members of the group, denoted as PkAgg, and the corresponding private key is denoted as SkAgg. Each member of the group uses the public key of the aggregator to encrypt the fund flow-related data collected off-chain to obtain encrypted data. The aggregator uses the hash function and digital signature to check the data integrity and verify the identity, and stores the hash function and digital signature with the encrypted data in the smart contract;

[0018] Step S5: Data verification. In order to verify the transmitted data, the smart contract calculates the received hash value, which is recorded as the device hash. If the device hash is equal to the hash function, the verification is passed and the smart device is added to the group. Otherwise, the verification fails and a device abnormality signal is issued.

[0019] Step S6: Data aggregation. When the aggregator retrieves the participation of all group members, it verifies the identity and data integrity of the group members. The aggregator will use SkAgg to decrypt all group members and calculate the sum of all fund flow related data. The aggregator updates the group request result by sending a transaction that calls the smart contract function with a result request.

[0020] Step S7: Data reading. If the request result is updated on the smart contract, the interest node retrieves the corresponding group request result. The interest node uses the private key of the Paillier cryptographic system to decrypt the group request result, so that the group request result is equal to the sum of all data calculated by the aggregator, and ends the group. All fund flow-related data can be read. Otherwise, data reading fails.

[0021] The beneficial effects achieved by the present invention using the above scheme are as follows:

[0022] (1) In view of the fact that the existing capital chain tracking system cannot achieve real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking, the present invention uses a method based on the Ethereum blockchain, using smart contracts and decentralized off-chain storage to achieve efficient traceability of capital flows in the financial supply chain;

[0023] (2) The existing capital chain tracking system involves a large amount of capital data, which may be affected by human operational errors or deliberate concealment, causing concerns about data privacy protection and security, and reducing the accuracy of tracking. In view of the technical problem, the present invention uses blockchain technology, uses smart contracts as data aggregation controllers, and combines homomorphic encryption technology to ensure data confidentiality and data integrity. At the same time, it performs identity checks on relevant personnel to prevent data tampering and leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 A module connection diagram of the blockchain-based financial supply chain fund flow tracking system provided by the present invention;

[0025] Figure 2 A flowchart of the steps of the data aggregation protection method based on homomorphic encryption provided by the present invention.

[0026] The accompanying drawings are used to provide further understanding of the present invention and constitute a part of the specification. They are used to explain the present invention together with the embodiments of the present invention and do not constitute a limitation of the present invention. DETAILED DESCRIPTION

[0027] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments; based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention.

[0028] Example 1: See Figure 1 , this embodiment provides a financial supply chain capital flow tracking system based on blockchain, and the financial supply chain capital flow tracking system based on blockchain includes a data acquisition module, a smart contract design module, a privacy protection module and an interface docking module;

[0029] The data collection module collects data related to fund flows at various links in the supply chain, and the data related to fund flows includes transaction information, payment information and account information;

[0030] The smart contract design module defines the rules and logic for tracking fund flows through smart contracts;

[0031] The privacy protection module verifies and encrypts the collected data related to fund flows and stores them on the blockchain;

[0032] The interface docking module interfaces the financial system and the supply chain to achieve real-time interaction and integration of data.

[0033] Example 2: See Figure 1 This embodiment is based on the above embodiment. The smart contract design module realizes the traceability of supply chain capital flow by defining a method based on Ethereum blockchain. The smart contract design module includes four components: interest nodes, Ethereum smart contracts, decentralized storage systems and on-chain resources. Interest nodes are nodes in the supply chain, including suppliers, manufacturers, distributors, consumers and financial institutions. The personnel of interest nodes are participants in the smart contract. The Ethereum smart contract assigns specific functions according to the role of the interest node in the supply chain. The personnel of the interest node can access the smart contract, decentralized storage system and on-chain resources through smart devices. The personnel of the interest node can interact with the Ethereum smart contract, start pre-authorized function calls, interact with the decentralized storage system, access data related to capital flow, obtain logs and transaction information, and the personnel of all interest nodes are authorized to store data related to capital flow.

[0034] The decentralized storage system uses off-chain storage to store data related to the flow of funds in the supply chain, generates a unique hash value for each piece of data related to the flow of funds, stores the hash values ​​of different data related to the flow of funds on the blockchain, and accesses the hash values ​​through Ethereum smart contracts;

[0035] Use Ethereum smart contracts to deploy the supply chain, define the functions of people at different interest nodes in the supply chain in the smart contract, and use modifiers to mark the access rights of people at the interest nodes to different functions. The decentralized storage system, Ethereum smart contracts and on-chain resources operate in an integrated manner.

[0036] Through the above operations, the existing capital chain tracking system cannot achieve real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking. The present invention uses a method based on the Ethereum blockchain, using smart contracts and decentralized off-chain storage to achieve efficient traceability of capital flows in the financial supply chain.

[0037] Example 3: See Figure 1This embodiment is based on the above embodiment. The privacy protection module includes seven organizational nodes: a semantic-based privacy protection API, a smart device, an aggregator, a group, a smart contract, a key generation node, and an interest node. The semantic-based privacy protection API is a semantic engine, which is responsible for matching the terms of service and privacy preferences of the interest nodes based on an IoT privacy ontology, and generating a public privacy policy for each interest node. The smart device is responsible for collecting data related to fund flows, encrypting the data related to fund flows using PkPai and PkAgg keys, obtaining encrypted data, and storing the encrypted data in a smart contract. The aggregator is a smart device with high memory, which is used to store the encrypted data between the smart device and the interest node through the smart contract of the interest node. After all the fund flow related data in the group are aggregated, the aggregation result is recorded in the smart contract through an update request. The group is formed according to the privacy selection of the interest node, including an aggregator and N smart devices. The individual fund flow related data of each group member is updated by calculating the aggregation result of the member data. The smart contract is an Ethereum smart contract in the smart contract design module, which is responsible for allocating the interest nodes into groups according to the privacy selection of the interest nodes, and sending the aggregated data as the request result to the interest nodes. The key generation node uses the Paillier cryptographic system to generate a key pair off-chain, uploads the obtained public key to the smart contract for update, and sends the updated public key to the interest node off-chain;

[0038] The privacy protection module encrypts the financial data through a data aggregation protection method based on homomorphic encryption. The data aggregation protection method based on homomorphic encryption specifically includes the following steps:

[0039] Step S1: Data initialization, the interest node deploys an instance of the smart contract, and groups the data exporters related to fund flows according to the privacy policy of the personnel of the interest node, and generates a shared key pair for the data exporters related to fund flows and the interest node, which is recorded as a group key. The group key includes a group public key and a group private key;

[0040] Step S2: Formulate a privacy policy. Combine blockchain and off-chain semantic computing to generate and share a privacy policy between the interest node and the data outputter related to the capital flow. The interest node calls the update function defined in the smart contract to upload the terms of service. A new privacy policy is calculated using the semantic-based privacy protection API. The new privacy policy matches the terms of service and privacy preferences. The generated new privacy policy is uploaded to the smart contract.

[0041] Step S3: Data collection. According to the stored new privacy policy, the smart contract determines whether the smart device is included in the created group. If included, each group member retrieves the group public key published by the key generation node on the smart contract based on the fund flow related data in the corresponding group, and uses the public key to encrypt the fund flow related data to obtain the encrypted data. Otherwise, a device abnormality signal is issued.

[0042] Step S4: Data transmission, hash and sign the data related to fund flow, obtain the hash function and digital signature, share a public key between the aggregator and the members of the group, denoted as PkAgg, and the corresponding private key is denoted as SkAgg. Each member of the group uses the public key of the aggregator to encrypt the fund flow-related data collected off-chain to obtain encrypted data. The aggregator uses the hash function and digital signature to check the data integrity and verify the identity, and stores the hash function and digital signature with the encrypted data in the smart contract;

[0043] Step S5: Data verification. In order to verify the transmitted data, the smart contract calculates the received hash value, which is recorded as the device hash. If the device hash is equal to the hash function, the verification is passed and the smart device is added to the group. Otherwise, the verification fails and a device abnormality signal is issued.

[0044] Step S6: Data aggregation. When the aggregator retrieves the participation of all group members, it verifies the identity and data integrity of the group members. The aggregator will use SkAgg to decrypt all group members and calculate the sum of all fund flow related data. The aggregator updates the group request result by sending a transaction that calls the smart contract function with a result request.

[0045] Step S7: Data reading. If the request result is updated on the smart contract, the interest node retrieves the corresponding group request result. The interest node uses the private key of the Paillier cryptographic system to decrypt the group request result, so that the group request result is equal to the sum of all data calculated by the aggregator, and ends the group. All fund flow-related data can be read. Otherwise, data reading fails.

[0046] Through the above operations, the existing capital chain tracking system involves a large amount of capital data, which may be affected by human operational errors or deliberate concealment, causing concerns about data privacy protection and security, and reducing the accuracy of tracking. The present invention uses blockchain technology, uses smart contracts as data aggregation controllers, and combines homomorphic encryption technology to ensure data confidentiality and data integrity, while performing identity checks on relevant personnel to prevent data tampering and leakage.

[0047] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0048] Although embodiments of the present invention have been shown and described, it will be appreciated by those skilled in the art that various changes, modifications, substitutions and variations may be made to the embodiments without departing from the principles and spirit of the present invention, and that the scope of the present invention is defined by the appended claims and their equivalents.

[0049] The present invention and its embodiments are described above, and such description is not restrictive. The drawings show only one embodiment of the present invention, and the actual structure is not limited thereto. In short, if ordinary technicians in the field are inspired by it, without departing from the purpose of the invention, they can design a structure and embodiment similar to the technical solution without creativity, which should belong to the protection scope of the present invention.

Claims

1. The blockchain-based financial supply chain fund flow tracking system is characterized by: Including data collection module, smart contract design module, privacy protection module and interface docking module; The smart contract design module defines the rules and logic for tracking fund flows through smart contracts; The privacy protection module verifies and encrypts the collected data related to fund flows and stores them on the blockchain; The interface docking module interfaces the financial system and the supply chain to achieve real-time interaction and integration of data.

2. The blockchain-based financial supply chain fund flow tracking system according to claim 1 is characterized in that: The smart contract design module achieves the traceability of supply chain capital flow by defining a method based on the Ethereum blockchain. The smart contract design module includes four components: interest nodes, Ethereum smart contracts, decentralized storage systems, and on-chain resources. Interest nodes are nodes in the supply chain, including suppliers, manufacturers, distributors, consumers, and financial institutions. The personnel of interest nodes are participants in the smart contract. The Ethereum smart contract assigns specific functions according to the role of the interest node in the supply chain. The personnel of the interest node can access the smart contract, decentralized storage system, and on-chain resources through smart devices. The personnel of the interest node can interact with the Ethereum smart contract, initiate pre-authorized function calls, interact with the decentralized storage system, access data related to capital flow, and obtain logs and transaction information. At the same time, the personnel of all interest nodes are authorized to store data related to capital flow; The decentralized storage system uses off-chain storage to store data related to the flow of funds in the supply chain, generates a unique hash value for each piece of data related to the flow of funds, stores the hash values ​​of different data related to the flow of funds on the blockchain, and accesses the hash values ​​through Ethereum smart contracts; Use Ethereum smart contracts to deploy the supply chain, define the functions of people at different interest nodes in the supply chain in the smart contract, and use modifiers to mark the access rights of people at the interest nodes to different functions. The decentralized storage system, Ethereum smart contracts and on-chain resources operate in an integrated manner.

3. The blockchain-based financial supply chain fund flow tracking system according to claim 2 is characterized in that: The privacy protection module includes seven organizational nodes: semantic-based privacy protection API, smart device, aggregator, group, smart contract, key generation node and interest node. The semantic-based privacy protection API is responsible for matching the terms of service and privacy preferences of the interest node, and generating a public privacy policy for each interest node. The smart device is responsible for collecting data related to fund flow, encrypting the data related to fund flow with PkPai and PkAgg keys, obtaining encrypted data, and storing the encrypted data in the smart contract. The aggregator transmits the data between smart devices and interest nodes through the smart contract of the interest node. After all the fund flow related data in the aggregation group are , the aggregation result is recorded in the smart contract through the update request. The group is formed according to the privacy selection of the interest node, including an aggregator and N smart devices. The individual fund flow related data of each group member is updated by calculating the aggregation result of the member data. The smart contract is the Ethereum smart contract in the smart contract design module, which is responsible for assigning the interest nodes into groups according to the privacy selection of the interest nodes, and sending the aggregated data to the interest nodes as the request result. The key generation node uses the Paillier cryptographic system to generate a key pair off-chain, uploads the obtained public key to the smart contract for update, and sends the updated public key to the interest node off-chain.

4. The blockchain-based financial supply chain fund flow tracking system according to claim 3 is characterized in that: The privacy protection module encrypts the financial data by a data aggregation protection method based on homomorphic encryption. The data aggregation protection method based on homomorphic encryption specifically includes the following steps: Step S1: Data initialization, the interest node deploys an instance of the smart contract, and groups the data exporters related to fund flows according to the privacy policy of the personnel of the interest node, and generates a shared key pair for the data exporters related to fund flows and the interest node, which is recorded as a group key. The group key includes a group public key and a group private key; Step S2: Formulate a privacy policy. Combine blockchain and off-chain semantic computing to generate and share a privacy policy between the interest node and the data outputter related to the capital flow. The interest node calls the update function defined in the smart contract to upload the terms of service. A new privacy policy is calculated using the semantic-based privacy protection API. The new privacy policy matches the terms of service and privacy preferences. The generated new privacy policy is uploaded to the smart contract. Step S3: Data collection. According to the stored new privacy policy, the smart contract determines whether the smart device is included in the created group. If included, each group member retrieves the group public key published by the key generation node on the smart contract based on the fund flow related data in the corresponding group, and uses the public key to encrypt the fund flow related data to obtain the encrypted data. Otherwise, a device abnormality signal is issued. Step S4: Data transmission, hash and sign the data related to fund flow, obtain the hash function and digital signature, share a public key between the aggregator and the members of the group, denoted as PkAgg, and the corresponding private key is denoted as SkAgg. Each member of the group uses the public key of the aggregator to encrypt the fund flow-related data collected off-chain to obtain encrypted data. The aggregator uses the hash function and digital signature to check the data integrity and verify the identity, and stores the hash function and digital signature with the encrypted data in the smart contract; Step S5: Data verification. In order to verify the transmitted data, the smart contract calculates the received hash value, which is recorded as the device hash. If the device hash is equal to the hash function, the verification is passed and the smart device is added to the group. Otherwise, the verification fails and a device abnormality signal is issued. Step S6: Data aggregation. When the aggregator retrieves the participation of all group members, it verifies the identity and data integrity of the group members. The aggregator will use SkAgg to decrypt all group members and calculate the sum of all fund flow related data. The aggregator updates the group request result by sending a transaction that calls the smart contract function with a result request. Step S7: Data reading. If the request result is updated on the smart contract, the interest node retrieves the corresponding group request result. The interest node uses the private key of the Paillier cryptographic system to decrypt the group request result, so that the group request result is equal to the sum of all data calculated by the aggregator, and ends the group. All fund flow-related data can be read. Otherwise, data reading fails.

Images