Blockchain-based Financial Supply Chain Fund Flow Tracking System

Abstract

The present invention belongs to the field of fund flow tracking, and specifically discloses a financial supply chain fund flow tracking system based on blockchain. The system includes: a data collection module, a smart contract design module, a privacy protection module, and an interface docking module. The present invention adopts a method based on the Ethereum blockchain, utilizes smart contracts and decentralized off-chain storage to achieve efficient fund flow traceability in the financial supply chain; uses blockchain technology, takes the smart contract as a data aggregation controller, combines homomorphic encryption technology to ensure data confidentiality and data integrity, and at the same time conducts identity checks on relevant personnel to prevent data tampering and leakage.

Description

Technical Field

[0001] The present invention relates to the field of capital flow tracking, and specifically refers to a financial supply chain capital flow tracking system based on blockchain. Background Art

[0002] The tracking of the financial supply chain capital chain is a process of tracking and monitoring the flow path, status and relevant information of funds in the financial supply chain throughout the whole process, which can enable relevant parties to better understand the direction and status of funds and enhance the openness and fairness of the market. However, the existing capital chain tracking systems cannot achieve truly real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking; involving a large amount of fund data, it may be affected by factors such as human operation errors or intentional concealment, leading to concerns about data privacy protection and security, and reducing the accuracy of tracking. Summary of the Invention

[0003] In view of the above situation, in order to overcome the defects of the prior art, the present invention provides a financial supply chain capital flow tracking system based on blockchain. Aiming at the technical problems that the existing capital chain tracking systems cannot achieve truly real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking, the present invention uses a method based on the Ethereum blockchain, utilizing smart contracts and decentralized off-chain storage to achieve efficient capital flow traceability in the financial supply chain; aiming at the technical problems that the existing capital chain tracking systems involve a large amount of fund data, it may be affected by factors such as human operation errors or intentional concealment, leading to concerns about data privacy protection and security, and reducing the accuracy of tracking, the present invention uses blockchain technology, takes the smart contract as the data aggregation controller, combines with homomorphic encryption technology to ensure data confidentiality and data integrity, and at the same time conducts identity checks on relevant personnel to prevent data tampering and leakage.

[0004] The technical solution adopted by the present invention is as follows: The present invention provides a financial supply chain capital flow tracking system based on blockchain, and the financial supply chain capital flow tracking system based on blockchain includes a data collection module, a smart contract design module, a privacy protection module and an interface docking module;

[0005] The data collection module collects the capital flow-related data of each link in the supply chain, and the capital flow-related data includes transaction information, payment information and account information;

[0006] The smart contract design module defines the rules and logic for capital flow tracking through smart contracts;

[0007] The privacy protection module stores the collected capital flow-related data on the blockchain after verification and encryption;

[0008] The interface docking module docks the financial system and the supply chain to achieve real-time data interaction and integration.

[0009] Furthermore, the smart contract design module realizes the traceability of the supply chain fund flow by defining a method based on the Ethereum blockchain. The smart contract design module includes four components: interest nodes, Ethereum smart contracts, decentralized storage systems, and on-chain resources. Interest nodes are nodes in the supply chain, including suppliers, manufacturers, distributors, consumers, and financial institutions. The personnel of the interest nodes are participants in the smart contract. The Ethereum smart contract assigns specific functions according to the roles of the interest nodes in the supply chain. The personnel of the interest nodes can access the smart contract, decentralized storage system, and on-chain resources through smart devices. The personnel of the interest nodes can interact with the Ethereum smart contract, initiate pre-authorized function calls, interact with the decentralized storage system, access fund flow-related data, obtain log and transaction information, and at the same time, all personnel of the interest nodes are authorized to store fund flow-related data;

[0010] The decentralized storage system uses off-chain storage to store fund flow-related data in the supply chain, generates a unique hash value for each fund flow-related data, stores the hash values of different fund flow-related data on the blockchain, and accesses the hash values through the Ethereum smart contract;

[0011] Use the Ethereum smart contract to deploy the supply chain, define the functions of the personnel of different interest nodes in the supply chain in the smart contract, and use modifiers to mark the access rights of the personnel of the interest nodes to different functions. The decentralized storage system, Ethereum smart contract, and on-chain resources operate in an integrated manner.

[0012] Further, the privacy protection module includes seven organizational nodes: a semantic-based privacy protection API, smart devices, aggregators, groups, smart contracts, key generation nodes, and interest nodes. The semantic-based privacy protection API is a semantic engine that, based on an Internet of Things privacy ontology, is responsible for matching the service terms and privacy preferences of interest nodes, generating a public privacy policy for each interest node. The smart devices are responsible for collecting data related to fund flows, encrypting the data related to fund flows using the PkPai and PkAgg key pairs to obtain encrypted data, and storing the encrypted data in the smart contract. The aggregator is a smart device with high memory that is passed between the smart devices and interest nodes through the smart contracts of the interest nodes. After aggregating all the data related to fund flows in the aggregation group, the aggregation result is recorded in the smart contract through an update request. The group is formed according to the privacy choices of the interest nodes and contains one aggregator and N smart devices, and updates the individual data related to fund flows of each group member by calculating the aggregation result of the member data. The smart contract is an Ethereum smart contract in the smart contract design module, which is responsible for assigning interest nodes to groups according to the privacy choices of the interest nodes and sending the aggregated data as a request result to the interest nodes. The key generation node generates a key pair off-chain using the Paillier cryptosystem, uploads the obtained public key to the smart contract for updating, and sends the updated public key to the interest nodes off-chain;

[0013] The privacy protection module encrypts financial data through a data aggregation protection method based on homomorphic encryption. The data aggregation protection method based on homomorphic encryption specifically includes the following steps:

[0014] Step S1: Data initialization. The interest nodes deploy instances of the smart contract, group the data outputters related to fund flows according to the privacy policies of the personnel of the interest nodes, and generate a shared key pair, denoted as the group key, for the data outputters related to fund flows and the interest nodes. The group key includes a group public key and a group private key;

[0015] Step S2: Formulate privacy policies. Combine blockchain and off-chain semantic computing to generate and share privacy policies between the interest nodes and the data outputters related to fund flows. The interest nodes call the update function defined in the smart contract to upload the service terms, calculate a new privacy policy using the semantic-based privacy protection API. The new privacy policy matches the service terms and privacy preferences, and uploads the generated new privacy policy to the smart contract;

[0016] Step S3: Data collection. According to the newly stored privacy policy, the smart contract determines whether the smart device is included in the created group. If it is included, each group member, based on the data related to the fund flow in the corresponding group, retrieves the group public key published by the key generation node on the smart contract, and uses the public key to encrypt the data related to the fund flow to obtain encrypted data. Otherwise, it emits a device exception signal.

[0017] Step S4: Data transmission. Hash and sign the data related to the fund flow to obtain a hash function and a digital signature. The aggregator shares a public key, denoted as PkAgg, with the members of the group, and the corresponding private key is denoted as SkAgg. Each member of the group uses the public key of the aggregator to encrypt the data related to the fund flow collected off-chain to obtain encrypted data. The aggregator uses the hash function and the digital signature to check the data integrity and verify the identity, and stores the hash function, the digital signature, and the encrypted data in the smart contract.

[0018] Step S5: Data verification. To verify the transmitted data, the smart contract calculates the received hash value, denoted as the device hash. If the device hash is equal to the hash function, the verification passes, and the smart device is added to the group. Otherwise, the verification fails, and a device exception signal is emitted.

[0019] Step S6: Data aggregation. When the aggregator retrieves the participation of all group members, it verifies the identity and data integrity of the group members. The aggregator will use SkAgg to decrypt all group members and calculate the sum of all data related to the fund flow. The aggregator updates the group request result by sending a transaction that requests to call the smart contract function with the result.

[0020] Step S7: Data reading. If the request result is updated on the smart contract, the interested node retrieves the corresponding group request result. The interested node uses the private key of the Paillier cryptosystem to decrypt the group request result, making the group request result equal to the sum of all data calculated by the aggregator, and ends the group, then it can read all data related to the fund flow. Otherwise, the data reading fails.

[0021] The beneficial effects achieved by the present invention using the above solution are as follows:

[0022] (1) Aiming at the technical problems that the existing fund chain tracking system cannot achieve truly real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking, the present invention uses a method based on the Ethereum blockchain, utilizing smart contracts and decentralized off-chain storage to achieve efficient fund flow traceability in the financial supply chain.

[0023] (2)Regarding the technical problem that the existing fund chain tracking system involves a large amount of fund data, which may be affected by factors such as human operation errors or intentional concealment, leading to concerns about data privacy protection and security, and reducing the accuracy of tracking, the present invention uses blockchain technology, takes smart contracts as data aggregation controllers, combines with homomorphic encryption technology to ensure data confidentiality and integrity, and at the same time conducts identity checks on relevant personnel to prevent data tampering and leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] Figure 1 It is a module connection diagram of the financial supply chain fund flow tracking system based on blockchain provided by the present invention;

[0025] Figure 2 It is a step flow chart of the data aggregation protection method based on homomorphic encryption provided by the present invention.

[0026] The drawings are used to provide a further understanding of the present invention, and constitute a part of the specification, and are used to explain the present invention together with the embodiments of the present invention, and do not constitute a limitation to the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0027] Next, the technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all of the embodiments; based on the embodiments in the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0028] Embodiment 1: Refer to Figure 1 , this embodiment provides a financial supply chain fund flow tracking system based on blockchain. The financial supply chain fund flow tracking system based on blockchain includes a data collection module, a smart contract design module, a privacy protection module, and an interface docking module;

[0029] The data collection module collects fund flow-related data in each link of the supply chain. The fund flow-related data includes transaction information, payment information, and account information;

[0030] The smart contract design module defines the rules and logics for fund flow tracking through smart contracts;

[0031] The privacy protection module stores the collected fund flow-related data on the blockchain after verification and encryption;

[0032] The interface docking module docks the financial system and the supply chain to achieve real-time interaction and integration of data.

[0033] Embodiment 2: Refer toFigure 1 , this embodiment is based on the above embodiment. The intelligent contract design module realizes the traceability of the capital flow in the supply chain by defining a method based on the Ethereum blockchain. The intelligent contract design module includes four components: interest nodes, Ethereum smart contracts, decentralized storage systems, and on-chain resources. The interest nodes are the nodes in the supply chain, including suppliers, manufacturers, distributors, consumers, and financial institutions. The personnel of the interest nodes are the participants in the smart contract. The Ethereum smart contract assigns specific functions according to the roles of the interest nodes in the supply chain. The personnel of the interest nodes can access the smart contract, decentralized storage system, and on-chain resources through smart devices. The personnel of the interest nodes can interact with the Ethereum smart contract, initiate pre-authorized function calls, interact with the decentralized storage system, access capital flow-related data, obtain log and transaction information. At the same time, all personnel of the interest nodes are authorized to store capital flow-related data;

[0034] The decentralized storage system uses off-chain storage to store capital flow-related data in the supply chain, generates a unique hash value for each piece of capital flow-related data, stores the hash values of different capital flow-related data on the blockchain, and accesses the hash values through the Ethereum smart contract;

[0035] Use the Ethereum smart contract to deploy the supply chain, define the functions of the personnel of different interest nodes in the supply chain in the smart contract, and use modifiers to mark the access rights of the personnel of the interest nodes to different functions. The decentralized storage system, Ethereum smart contract, and on-chain resources operate in an integrated manner.

[0036] Through the above operations, for the technical problems that the existing capital chain tracking system cannot achieve real-time tracking, there is a certain time lag, and the data of different links and institutions may be scattered and difficult to integrate, resulting in incomplete tracking. The present invention uses a method based on the Ethereum blockchain, utilizes smart contracts and decentralized off-chain storage to achieve efficient capital flow traceability in the financial supply chain.

[0037] Embodiment Three: Refer to Figure 1, this embodiment is based on the above embodiment. The privacy protection module includes seven organizational nodes: a semantics-based privacy protection API, smart devices, aggregators, groups, smart contracts, key generation nodes, and interest nodes. The semantics-based privacy protection API is a semantic engine, based on an Internet of Things privacy ontology, responsible for matching the service terms and privacy preferences of interest nodes, and generating a common privacy policy for each interest node. The smart devices are responsible for collecting data related to fund flows, encrypting the data related to fund flows using the PkPai and PkAgg key pairs to obtain encrypted data, and storing the encrypted data in the smart contract. The aggregator is a smart device with high memory, which is transmitted between the smart devices and interest nodes through the smart contracts of the interest nodes. After aggregating all the data related to fund flows in the aggregation group, the aggregation result is recorded in the smart contract through an update request. The group is formed according to the privacy choices of the interest nodes, including one aggregator and N smart devices, and updates the individual data related to fund flows of each group member by calculating the aggregation result of the member data. The smart contract is an Ethereum smart contract in the smart contract design module, responsible for allocating interest nodes into groups according to the privacy choices of the interest nodes, and sending the aggregated data as a request result to the interest nodes. The key generation node generates a key pair off-chain using the Paillier cryptosystem, uploads the obtained public key to the smart contract for update, and sends the updated public key to the interest nodes off-chain;

[0038] The privacy protection module encrypts financial data through a data aggregation protection method based on homomorphic encryption. The data aggregation protection method based on homomorphic encryption specifically includes the following steps:

[0039] Step S1: Data initialization. The interest nodes deploy instances of smart contracts, group the data outputters related to fund flows according to the privacy policies of the personnel of the interest nodes, and generate a shared key pair for the data outputters related to fund flows and the interest nodes, denoted as the group key. The group key includes the group public key and the group private key;

[0040] Step S2: Formulate a privacy policy. Combine blockchain and off-chain semantic computing to generate and share a privacy policy between the interest nodes and the data outputters related to fund flows. The interest nodes call the update function defined in the smart contract to upload the service terms, calculate a new privacy policy using the semantics-based privacy protection API. The new privacy policy matches the service terms and privacy preferences, and uploads the generated new privacy policy to the smart contract;

[0041] Step S3: Data collection. According to the newly stored privacy policy, the smart contract determines whether the smart device is included in the created group. If it is included, each group member, based on the fund flow-related data in the corresponding group, retrieves the group public key published by the key generation node on the smart contract, and uses the public key to encrypt the fund flow-related data to obtain encrypted data. Otherwise, a device exception signal is issued.

[0042] Step S4: Data transmission. Hash and sign the fund flow-related data to obtain a hash function and a digital signature. The aggregator shares a public key, denoted as PkAgg, with the members of the group, and the corresponding private key is denoted as SkAgg. Each group member uses the aggregator's public key to encrypt the fund flow-related data collected off-chain to obtain encrypted data. The aggregator uses the hash function and the digital signature to check the data integrity and verify the identity, and stores the hash function, the digital signature, and the encrypted data in the smart contract.

[0043] Step S5: Data verification. To verify the transmitted data, the smart contract calculates the received hash value, denoted as the device hash. If the device hash is equal to the hash function, the verification passes, and the smart device is added to the group. Otherwise, the verification fails, and a device exception signal is issued.

[0044] Step S6: Data aggregation. When the aggregator retrieves the participation of all group members, verifies the identity and data integrity of the group members, the aggregator will decrypt all group members using SkAgg and calculate the sum of all fund flow-related data. The aggregator updates the group request result by sending a transaction that requests to call the smart contract function with the result.

[0045] Step S7: Data reading. If the request result is updated on the smart contract, the interested node retrieves the corresponding group request result. The interested node uses the private key of the Paillier cryptosystem to decrypt the group request result, making the group request result equal to the sum of all data calculated by the aggregator, and ends the group, then all fund flow-related data can be read. Otherwise, the data reading fails.

[0046] Through the above operations, for the technical problem that the existing fund chain tracking system involves a large amount of fund data, which may be affected by factors such as human operation errors or intentional concealment, leading to concerns about data privacy protection and security, and reducing the accuracy of tracking, the present invention uses blockchain technology, takes the smart contract as the data aggregation controller, combines with the homomorphic encryption technology, ensures data confidentiality and data integrity, and at the same time conducts identity checks on relevant personnel to prevent data tampering and leakage.

[0047] It should be noted that, in this document, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the term "comprising", "including" or any other variant thereof is intended to cover non-exclusive inclusion, such that a process, method, article or apparatus comprising a series of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such process, method, article or apparatus.

[0048] Although the embodiments of the present invention have been shown and described, it will be understood by those of ordinary skill in the art that various changes, modifications, substitutions and variations can be made to these embodiments without departing from the principles and spirit of the present invention, and the scope of the present invention is defined by the appended claims and their equivalents.

[0049] The above description of the present invention and its embodiments is not restrictive. What is shown in the drawings is only one of the embodiments of the present invention, and the actual structure is not limited thereto. Generally speaking, if those of ordinary skill in the art are inspired by it and, without departing from the gist of the present invention, design similar structural modes and embodiments to this technical solution without creative efforts, they shall fall within the protection scope of the present invention.

Claims

1. A financial supply chain fund flow tracking system based on blockchain, characterized in that, It includes a data collection module, a smart contract design module, a privacy protection module, and an interface docking module; The smart contract design module defines the rules and logic for capital flow tracking through smart contracts; The privacy protection module stores the collected data related to capital flows on the blockchain after verification and encryption; The interface docking module docks the financial system and the supply chain to achieve real-time data interaction and integration; The smart contract design module realizes the traceability of the supply chain capital flow by defining a method based on the Ethereum blockchain. The smart contract design module includes four components: interest nodes, Ethereum smart contracts, decentralized storage systems, and on-chain resources. Interest nodes are nodes in the supply chain, including suppliers, manufacturers, distributors, consumers, and financial institutions. The personnel of the interest nodes are participants in the smart contract. The Ethereum smart contract assigns specific functions according to the roles of the interest nodes in the supply chain. The personnel of the interest nodes can access the smart contract, the decentralized storage system, and on-chain resources through smart devices. The personnel of the interest nodes can interact with the Ethereum smart contract, initiate pre-authorized function calls, interact with the decentralized storage system, access data related to capital flows, obtain log and transaction information, and at the same time, all personnel of the interest nodes are authorized to store data related to capital flows; The decentralized storage system stores the data related to capital flows in the supply chain using off-chain storage methods, generates a unique hash value for each piece of data related to capital flows, stores the hash values of different data related to capital flows on the blockchain, and accesses the hash values through the Ethereum smart contract; Use the Ethereum smart contract to deploy the supply chain, define the functions of the personnel of different interest nodes in the supply chain in the smart contract, and use modifiers to mark the access rights of the personnel of the interest nodes to different functions. The decentralized storage system, the Ethereum smart contract, and on-chain resources operate in an integrated manner; The privacy protection module includes seven organizational nodes: the semantics-based privacy protection API, smart devices, aggregators, groups, smart contracts, key generation nodes, and interest nodes. The semantics-based privacy protection API is responsible for matching the service terms and privacy preferences of interest nodes, and generating a common privacy policy for each interest node. The smart devices are responsible for collecting data related to fund flows, encrypting the data related to fund flows using the PkPai and PkAgg key pairs to obtain encrypted data, and storing the encrypted data in the smart contract. The aggregator is passed between the smart devices and interest nodes through the smart contracts of the interest nodes. After aggregating all the data related to fund flows in the aggregation group, the aggregation result is recorded in the smart contract through an update request. The group is formed according to the privacy selections of the interest nodes, and includes one aggregator and N smart devices. The individual data related to fund flows of each group member is updated by calculating the aggregation result of the member data. The smart contract is an Ethereum smart contract in the smart contract design module, which is responsible for allocating interest nodes into groups according to the privacy selections of the interest nodes, and sending the aggregated data as a request result to the interest nodes. The key generation node generates a key pair off-chain using the Paillier cryptosystem, uploads the obtained public key to the smart contract for update, and sends the updated public key to the interest nodes off-chain; The privacy protection module encrypts financial data through a data aggregation protection method based on homomorphic encryption. The data aggregation protection method based on homomorphic encryption specifically includes the following steps: Step S1: Data initialization. The interest node deploys an instance of the smart contract, groups the data outputters related to fund flows according to the privacy policies of the personnel of the interest node, and generates a shared key pair for the data outputters related to fund flows and the interest node, denoted as the group key. The group key includes the group public key and the group private key; Step S2: Formulate privacy policies. Combining blockchain and off-chain semantic computing, generate and share privacy policies between the interest node and the data outputters related to fund flows. The interest node calls the update function defined in the smart contract to upload the service terms, calculates a new privacy policy using the semantics-based privacy protection API. The new privacy policy matches the service terms and privacy preferences, and uploads the generated new privacy policy to the smart contract; Step S3: Data collection. According to the stored new privacy policy, the smart contract determines whether the smart device is included in the created group. If so, each group member encrypts the data related to fund flows in the corresponding group according to the data related to fund flows in the group, retrieves the group public key published by the key generation node on the smart contract, and encrypts the data related to fund flows using the public key to obtain encrypted data. Otherwise, an equipment exception signal is sent; Step S4: Data Transmission. Hash and sign the data related to fund flows to obtain a hash function and a digital signature. Share a public key, denoted as PkAgg, between the aggregator and the members of the group, and the corresponding private key is denoted as SkAgg. Each member of the group encrypts the data related to fund flows collected off-chain using the public key of the aggregator to obtain encrypted data. The aggregator uses the hash function and digital signature to check data integrity and verify identities, and stores the hash function, digital signature, and encrypted data in the smart contract; Step S5: Data Verification. To verify the transmitted data, the smart contract calculates the received hash value, denoted as device hash. If the device hash is equal to the hash function, the verification passes, and the smart device is added to the group. Otherwise, the verification fails, and a device exception signal is issued; Step S6: Data Aggregation. When the aggregator retrieves the participation of all group members, verify the identities and data integrity of the group members. The aggregator decrypts all group members using SkAgg and calculates the sum of all data related to fund flows. The aggregator updates the group request result by sending a transaction that requests to call the smart contract function with the result; Step S7: Data Reading. If the request result is updated on the smart contract, the interested node retrieves the corresponding group request result. The interested node decrypts the group request result using the private key of the Paillier cryptosystem, making the group request result equal to the sum of all data calculated by the aggregator, and ends the group, then all data related to fund flows can be read. Otherwise, the data reading fails.

Images