Physical resource authentication method and device based on privacy protection

Abstract

The embodiment of the invention provides a physical resource authentication method and device based on privacy protection. Target circuit logic is deployed in first equipment involved in the method and comprises a calculation circuit part and a generation algorithm part. A first device can generate a first commitment for original resource data of a physical resource held by the first device by using a first private key of the first device, then at least the original resource data and the first commitment are input into target circuit logic, the first commitment is verified through a calculation circuit part, conclusion data corresponding to the original resource data are calculated, and the conclusion data are sent to the first device. And a zero-knowledge proof about the calculation correctness of the calculation circuit part is generated through the generation algorithm part, first proof data is obtained, and the conclusion data indicates the health state of the physical resource and is used for resource value evaluation. The first device then correspondingly stores the first commitment and the first proof data to the second device for the second device to verify the zero knowledge proof.

Description

Technical Field

[0001] The embodiments of this specification belong to the field of computer technology, and more particularly, to a method and device for authenticating physical resources based on privacy protection. Background Art

[0002] The resource value assessment of physical resources (such as power battery resources, etc.) needs to be completed based on the original resource data of the physical resources. The original resource data is the private data of the resource holder of the physical resource. If the original resource data is provided to the assessor for resource value assessment, it will lead to privacy data leakage, cross-institutional data compliance issues and business risks.

[0003] A reasonable and reliable solution is needed to achieve effective resource value assessment without leaking the original resource data of physical resources. Summary of the invention

[0004] The purpose of the present invention is to provide a physical resource authentication scheme based on privacy protection, which can achieve effective resource value assessment without leaking the original resource data of the physical resources.

[0005] The first aspect of this specification provides a privacy-protection-based physical resource authentication method, which is executed by a first device, in which a target circuit logic is deployed, including a computing circuit part and a generation algorithm part. The method includes: using the first private key of the party to generate a first commitment for the original resource data of the physical resource held by the first device; at least inputting the original resource data and the first commitment into the target circuit logic, verifying the first commitment through the computing circuit part, and calculating the conclusion data corresponding to the original resource data, and generating a zero-knowledge proof of the correctness of the calculation of the computing circuit part through the generation algorithm part to obtain first proof data, wherein the conclusion data indicates the health status of the physical resource and is used for resource value assessment; storing the first commitment and the first proof data correspondingly to the second device for the second device to verify the zero-knowledge proof.

[0006] The second aspect of this specification provides a physical resource authentication method based on privacy protection, including: a first device uses its own first private key to generate a first commitment for the original resource data of the physical resource held by the first device; the first device is deployed with a target circuit logic, which includes a computing circuit part and a generation algorithm part; the first device at least inputs the original resource data and the first commitment into the target circuit logic, verifies the first commitment through the computing circuit part, and calculates the conclusion data corresponding to the original resource data, and generates a zero-knowledge proof about the correctness of the calculation of the computing circuit part through the generation algorithm part to obtain first proof data, wherein the conclusion data indicates the health status of the physical resource, which is used for resource value assessment; the first device stores the first commitment and the first proof data correspondingly to the second device; the second device verifies the zero-knowledge proof shown by the first proof data.

[0007] The third aspect of this specification provides a physical resource authentication device based on privacy protection, which is applied to a first device, in which a target circuit logic is deployed, including a computing circuit part and a generation algorithm part, and the device includes: a generation unit, configured to use the first private key of the party to generate a first commitment for the original resource data of the physical resource held by the first device; a proof unit, configured to at least input the original resource data and the first commitment into the target circuit logic, verify the first commitment through the computing circuit part, and calculate the conclusion data corresponding to the original resource data, and generate a zero-knowledge proof about the correctness of the calculation of the computing circuit part through the generation algorithm part to obtain first proof data, wherein the conclusion data indicates the health status of the physical resource, which is used for resource value assessment; a storage unit, configured to store the first commitment and the first proof data correspondingly to the second device, so that the second device can verify the zero-knowledge proof.

[0008] A fourth aspect of the present specification provides a computer-readable storage medium having a computer program stored thereon, which, when executed in a computer, causes the computer to execute the method described in the first aspect.

[0009] A fifth aspect of the specification provides a computing device, including a memory and a processor, wherein the memory stores executable code, and when the processor executes the executable code, the method described in the first aspect is implemented.

[0010] A sixth aspect of the present specification provides a computer program product, comprising a computer program / instruction, which, when executed by a processor, implements the steps of the method described in the first aspect.

[0011] The above-mentioned embodiments of this specification provide a solution that customizes the target circuit logic, which includes a computing circuit part and a generation algorithm part, and the target circuit logic is deployed in the first device. In this solution, the first device can use its first private key to generate a first commitment for the original resource data of the physical resource held by the first device, and then at least input the original resource data and the first commitment into the target circuit logic, verify the first commitment and the conclusion data corresponding to the calculation of the original resource data through the computing circuit part, and generate a zero-knowledge proof of the correctness of the calculation of the computing circuit part through the generation algorithm part, and obtain the first proof data, wherein the conclusion data indicates the health status of the physical resource, which is used for resource value assessment. Then, the first device stores the first commitment and the first proof data correspondingly to the second device, so that the second device can verify the zero-knowledge proof shown by the first proof data.

[0012] By customizing the target circuit logic and introducing the commitment generated for the original resource data, it is possible to ensure that the original resource data is associated with the device identity, verify the authenticity of the original resource data while verifying the device identity, and multiple guarantees of the authenticity and anonymity of the original resource data. Through ZKP (Zero-Knowledge Proof) technology, in the entire process, the original resource data will not leave the device and will not be leaked. What is transmitted in the network is the proof data rather than the original resource data itself, which ensures the "invisibility" of the original resource data during the verification process. Even if the proof data is intercepted by a third party, the interceptor cannot restore the proof data to the original resource data, thus effectively protecting user privacy. In addition, when the zero-knowledge proof verification shown by the proof data passes, according to the verification result of the zero-knowledge proof, it can be known that the conclusion data shown by the proof data is authentic and reliable data, so that the resource value can be evaluated based on the conclusion data. As a result, effective resource value evaluation can be achieved without leaking the original resource data of the physical resources, avoiding cross-institutional data compliance issues and business risks. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] In order to more clearly illustrate the technical solutions of the embodiments of this specification, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this specification. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative labor.

[0014] Figure 1 It is a schematic diagram of an application scenario in which the embodiments of this specification can be applied;

[0015] Figure 2 is a diagram of a blockchain architecture in one embodiment;

[0016] Figure 3 is a timing diagram of a physical resource authentication method based on privacy protection in an embodiment of this specification;

[0017] Figure 4 is a timing diagram of the resource evaluation process in the embodiment of this specification;

[0018] Figure 5 is another timing diagram of the physical resource authentication method based on privacy protection in an embodiment of this specification;

[0019] Figure 6 is another timing diagram of the resource evaluation process in an embodiment of this specification;

[0020] Figure 7 is an exemplary schematic diagram of the power battery resource evaluation process in the embodiments of this specification;

[0021] Figure 8 It is a structural diagram of a physical resource authentication device based on privacy protection in an embodiment of this specification. DETAILED DESCRIPTION

[0022] In order to enable those skilled in the art to better understand the technical solutions in this specification, the technical solutions in the embodiments of this specification will be clearly and completely described below in conjunction with the drawings in the embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of the embodiments. Based on the embodiments in this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this specification.

[0023] As mentioned above, the original resource data of physical resources is the privacy data of the resource holder of the physical resources. If the original resource data is provided to the evaluator for resource value assessment, it will lead to privacy data leakage, cross-institutional data compliance issues and business risks.

[0024] The embodiments of this specification provide a privacy-protection-based physical resource authentication scheme, which can achieve effective resource value assessment without leaking the original resource data of the physical resources.

[0025] Figure 1 Schematic diagram of an application scenario in which the embodiments of this specification can be applied. Figure 1 As shown, the application scenario involves physical resources 100 , device 101 , and device 102 .

[0026] Physical resources 100 are resources with economic value and can be evaluated for resource value. As examples, physical resources 100 can be artwork, jewelry, agricultural products, buildings, new energy equipment, and other Figure 1The power battery resource 100 shown in the figure may include but is not limited to any one of a charging pile, a new energy battery, a solar cell, a battery in an electric vehicle, and a battery in an electric vehicle. In the following, the power battery resource 100 is mainly used as an example for introduction.

[0027] Device 101 includes a power battery resource 100, or device 101 is an edge device on the power battery resource 100 side. In actual applications, when the software and hardware resources inside the power battery resource 100 / target device (the device where the power battery resource 100 is located) meet the resource requirements of the ZKP technology, the power battery resource 100 / target device can be used as device 101. When the software and hardware resources inside the power battery resource 100 and the target device do not meet the resource requirements of the ZKP technology, one or more edge devices on the power battery resource 100 side can be used as device 101.

[0028] In addition, the device 101 is provided with target circuit logic (such as Figure 1 The ZKP circuit logic shown in ). The ZKP circuit logic includes a calculation circuit part and a generation algorithm part. The input of the ZKP circuit logic includes but is not limited to the original resource data of the physical resource and the commitment generated for the original resource data. The calculation circuit part is used to verify the input commitment and calculate the conclusion data corresponding to the input original resource data. The conclusion data indicates the health status of the physical resource and is used for resource value assessment. The generation algorithm part is used to generate a zero-knowledge proof of the correctness of the calculation of the calculation circuit part to obtain the proof data.

[0029] Furthermore, a target chip is embedded in the device 101. The target chip has functions such as ZKP and network transmission, and can collect raw resource data of the power battery resource 100 through sensors, including battery power.

[0030] Device 102 is used to store the commitment and proof data as described above, and to verify the zero-knowledge proof shown by the proof data. Further, device 102 may also have resource value assessment capabilities. Among them, device 102 may be an institutional device of an authoritative certification agency, or a blockchain network.

[0031] Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. In the blockchain, data blocks are combined into a chain data structure in a sequential manner according to time sequence, and cryptography is used to ensure that the data blocks cannot be tampered with or forged. Due to the characteristics of blockchain such as decentralization, information cannot be tampered with, and autonomy, blockchain has also received more and more attention and application.

[0032] Figure 2A blockchain architecture diagram in an embodiment is shown. Figure 2 In the blockchain architecture diagram shown, the blockchain 200 includes N nodes. Figure 1 Nodes 1 to 8 are schematically shown in FIG. The lines between the nodes schematically represent P2P (Peer to Peer) connections, which may be TCP connections, etc., for transmitting data between nodes. These nodes can store the full amount of ledgers, that is, the status of all blocks and all accounts. Each node in the blockchain can generate the same state in the blockchain by executing the same transaction, and each node in the blockchain can store the same state database.

[0033] Transactions in the blockchain field can refer to task units executed and recorded in the blockchain. Transactions usually include a send field (From), a receive field (To), and a data field (Data). Among them, in the case of a transfer transaction, the From field indicates the account address that initiates the transaction (i.e., initiates a transfer task to another account), the To field indicates the account address that receives the transaction (i.e., receives the transfer), and the Data field includes the transfer amount.

[0034] The blockchain can provide the function of smart contracts. Smart contracts on the blockchain are contracts that can be triggered and executed by transactions on the blockchain system. Smart contracts can be defined in the form of code. Calling a smart contract in the blockchain is to initiate a transaction pointing to the smart contract address, so that each node in the blockchain can run the smart contract code in a distributed manner.

[0035] In the scenario of deploying a contract, for example, Bob sends a transaction containing information about creating a smart contract (i.e. deploying a contract) to Figure 1 In the blockchain shown, the data field of the transaction includes the code of the contract to be created (such as bytecode or machine code), and the to field of the transaction is empty to indicate that the transaction is used to deploy the contract. After the nodes reach an agreement through the consensus mechanism, the contract address "0x6f8ae93..." of the contract is determined, and each node adds a contract account corresponding to the contract address of the smart contract in the state database, allocates the state storage corresponding to the contract account, and stores the contract code, and saves the hash value of the contract code in the state storage of the contract, so that the contract is successfully created.

[0036] In the scenario of calling a contract, for example, Bob sends a transaction for calling a smart contract to Figure 1In the blockchain shown, the from field of the transaction is the address of the account of the transaction initiator (i.e., Bob), the to field is the above-mentioned "0x6f8ae93...", that is, the address of the smart contract being called, and the data field of the transaction includes the method and parameters for calling the smart contract. After the transaction is reached in consensus in the blockchain, each node in the blockchain can execute the transaction separately, thereby executing the contract separately, and updating the status database based on the execution of the contract.

[0037] When the device 102 is an institutional device of an authoritative certification body, the institutional device is deployed with a verification algorithm logic, and the institutional device verifies the zero-knowledge proof shown by the proof data by executing the verification algorithm logic. When the device 102 is a blockchain network, the blockchain network is deployed with a smart contract C1 for executing the verification algorithm logic, and the blockchain network can verify the zero-knowledge proof shown by the proof data by executing the verification algorithm logic corresponding to the verification interface of the smart contract C1.

[0038] When there is a need to evaluate the resource value of the power battery resource 100, such as Figure 1 As shown in , the device 101 can collect the original resource data soc of the power battery resource 100, such as collecting the original resource data soc of the power battery resource 100 within the target time period, including the battery power. The target time period can be, for example, nearly 1 month, 2 months, half a year or 1 year, etc., which can be set according to actual needs and is not specifically limited here. Afterwards, the device 101 can use its own private key key1 to generate a commitment h for the original resource data soc. Afterwards, the device 101 can at least input the original resource data soc and the commitment h into the ZKP circuit logic, verify the commitment h through the calculation circuit part, and calculate the conclusion data corresponding to the original resource data soc (i.e., the cumulative number of charge and discharge times), and generate a zero-knowledge proof of the correctness of the calculation of the calculation circuit part through the generation algorithm part to obtain the proof data P1. Then, the device 101 can store the commitment h and the proof data P1 correspondingly to the device 102. Then, the device 102 can verify the zero-knowledge proof shown in the proof data P1.

[0039] When the zero-knowledge proof verification shown in the proof data P1 passes, according to the verification result of the zero-knowledge proof, it can be known that the cumulative number of charge and discharge times shown in the proof data P1 is authentic and reliable data, so that the resource value can be evaluated based on the cumulative number of charge and discharge times. Among them, the cumulative number of charge and discharge times is negatively correlated with the resource value of the power battery resource 100. It should be understood that the fewer the cumulative number of charge and discharge times of the power battery resource, the higher the value of the power battery resource. Thus, effective resource value evaluation can be achieved without leaking the original resource data soc of the power battery resource 100, avoiding cross-institutional data compliance issues and business risks.

[0040] In one embodiment, Figure 1 The application scenario shown may also include a device 103 of a local data service provider. Device 103 may be a node in a trusted oracle network. Device 101 may store the commitment h and the original resource data soc in device 103 correspondingly for the regulator to verify the original resource data soc. By introducing an oracle and storing the data in a local data service provider, the regulatory verification and evidence collection requirements can be met. The regulator can use the flow of each resource verification to query the data storage service, and the resource details and ZKP verification process can be traced back throughout the process to ensure that the commitment generated for the original resource data and the logic contained in the zero-knowledge proof shown in the proof data are authentic and reliable.

[0041] Next, combine Figure 3 , introduces the physical resource authentication process. Among them, Figure 3 It is a timing diagram of a method for authenticating a physical resource based on privacy protection in an embodiment of this specification. The method involves the physical resource 100, device 101 and device 102 as described above, and includes steps S301-S307 as shown below.

[0042] like Figure 3 As shown, in step S301 , the device 101 generates a commitment h for the original resource data soc of the physical resource 100 held by the device 101 using its own private key key1 .

[0043] Among them, commitment h participates in the generation of zero-knowledge proof in order to confirm the authenticity of the zero-knowledge proof and the identity of the device in the verification stage. When generating commitment h, device 101 can use the preset Pedersen commitment algorithm and key1 to generate commitment h for the original resource data soc. Among them, the Pedersen commitment algorithm is a cryptographic technology that allows the prover to commit to a value without revealing it or being able to change it. The core of this commitment algorithm is that it can provide a commitment value, which is generated based on the original information and some random numbers, but the verifier can only verify the correctness of the original information through the provided commitment value, and cannot know the specific content of the original information. Since the Pedersen commitment algorithm is a well-known technology, its calculation process will not be repeated here.

[0044] Next, in step S303, the device 101 inputs at least the original resource data soc and the commitment h into the locally deployed ZKP circuit logic, verifies the commitment h through the computing circuit part, calculates the conclusion data corresponding to the original resource data soc, and generates a zero-knowledge proof of the correctness of the calculation of the computing circuit part through the generation algorithm part to obtain the proof data P1, wherein the conclusion data indicates the health status of the physical resource 100, which is used for resource value assessment.

[0045] It should be noted that the computation circuit includes the public key key2 corresponding to key1, or the input of the ZKP circuit logic also includes key2. When the input of the ZKP circuit logic also includes key2, key2 and commitment h are the public inputs of the ZKP circuit logic, and the original resource data soc is the private input of the ZKP circuit logic.

[0046] When verifying the commitment h, the key2 and the original resource data soc can be used by the calculation circuit part to restore the commitment h generated by the device 101 for the original resource data soc, thereby obtaining the calculated value h1, and judging whether the calculated value h1 and the commitment h are equal. If the calculated value h1 and the commitment h are equal, the verification of the commitment h passes; otherwise, the verification of the commitment h fails.

[0047] In addition, the calculation circuit part includes calculation logic for calculating conclusion data corresponding to the original resource data, and the conclusion data corresponding to the original resource data soc can be calculated through the calculation logic.

[0048] Taking the physical resource 100 as a power battery resource 100 as an example, the original resource data soc includes the battery power of the power battery resource 100 within the target time period, and the conclusion data corresponding to the original resource data soc is the cumulative charge and discharge times cnt of the power battery resource 100 within the target time period. When the original resource data soc is the battery power of the power battery resource 100 within the target time period, the calculation process of the cumulative charge and discharge times cnt may include: for any two battery powers of the power battery resource 100 with adjacent acquisition time within the target time period, if the difference v1 between the latter battery power and the former battery power is greater than 0, the cumulative charge amount total of the power battery resource 100 within the target time period is increased by v1; according to the calculated total and the preset power threshold (for example, 100), the cumulative charge and discharge times cnt are determined. Wherein, the initial value of total is 0. Taking the power threshold as 100 as an example, it can be calculated that cycles = total / 100, if cycles is an integer, then cnt = cycles; if cycles is a decimal, then cnt is equal to the integer part of cycles.

[0049] In practice, the changing trends of battery voltage and battery power are generally consistent. In order to improve the calculation accuracy of the cumulative number of charge and discharge times by the calculation circuit part, the battery voltage can also be used as the input of the ZKP circuit logic. Based on this, in one embodiment, the original resource data soc includes the battery voltage and battery power of the power battery resource 100 in the target time period, and the calculation process of the cumulative number of charge and discharge times cnt of the power battery resource 100 in the target time period can include: for any two battery powers of the power battery resource 100 with adjacent acquisition time in the target time period, if the difference v1 between the latter battery power and the former battery power is greater than 0, and the difference v2 between the battery voltages corresponding to the latter battery power and the former battery power is greater than 0, then the cumulative charge amount total of the power battery resource in the target time period is increased by v1; according to the calculated cumulative charge amount total and the preset power threshold, the cumulative number of charge and discharge times cnt is determined.

[0050] In one embodiment, the compilation result of the computing circuit part includes an executable bytecode file (such as a wasm file) obtained by compiling the computing logic of the computing circuit part, and a description file (such as an R1CS file) used to describe the constraint information of the computing circuit part. In practice, the wasm file is used to process complex computing tasks and generate witness data, while the R1CS (Rank-1 Constraint System) file defines the mathematical constraints that ensure the validity of the proof. The combination of the two enables ZKP technology to verify the authenticity of information without leaking specific information, thereby providing a powerful means of privacy protection.

[0051] The above description file can be used to generate a proof key pk and a verification key vk. The proof key pk is stored by device 101 for generating a zero-knowledge proof. The verification key vk is stored by device 102 for verifying the zero-knowledge proof. The compilation of the computing circuit part and the generation of the proof key pk and the verification key vk can be performed by device 101 or other devices, and before device 101 generates a zero-knowledge proof for the first time.

[0052] In the process of verifying the commitment h through the calculation circuit part and calculating the conclusion data corresponding to the original resource data soc, the bytecode file can be run according to the input of the ZKP circuit logic (including the original resource data soc and the commitment h) to generate several intermediate variables. After that, the witness data can be generated according to the values ​​of the several intermediate variables through the generation algorithm part, and the zero-knowledge proof can be generated according to the witness data and the proof key pk to obtain the proof data P1. Among them, the witness data can include the original resource data soc and the values ​​of the several intermediate variables.

[0053] Next, in step S305 , device 101 stores the commitment h and the proof data P1 in correspondence with each other in device 102 .

[0054] Next, in step S307 , the device 102 verifies the zero-knowledge proof shown by the proof data P1 .

[0055] Specifically, device 101 may send a data storage request including commitment h and proof data P1 to device 102, so that device 102 stores commitment h and proof data P1 accordingly. Afterwards, device 102 may verify the zero-knowledge proof shown by proof data P1.

[0056] As an example, a verification algorithm logic is deployed in the device 102, and the device 102 can verify the zero-knowledge proof shown in the proof data P1 by executing the verification algorithm logic. Further, the device 102 pre-stores the public key key2 and the verification key vk as described above, and the device 102 can verify the zero-knowledge proof shown in the proof data P1 by executing the verification algorithm logic according to the commitment h, the public key key2 and the verification key vk.

[0057] Figure 3 The solution provided by the corresponding embodiment, by customizing the ZKP circuit logic and introducing the commitment generated for the original resource data, can ensure that the original resource data is associated with the device identity, verify the authenticity of the original resource data while verifying the device identity, and multiple guarantees the authenticity and anonymity of the original resource data. Through ZKP technology, in the entire process, the original resource data will not leave the device and will not be leaked. What is transmitted in the network is the proof data rather than the original resource data itself, which ensures the "invisibility" of the original resource data in the verification process. Even if the proof data is intercepted by a third party, the interceptor cannot restore the proof data to the original resource data, thus effectively protecting user privacy. In addition, when the zero-knowledge proof verification shown by the proof data passes, according to the verification result of the zero-knowledge proof, it can be known that the conclusion data shown by the proof data is authentic and reliable data, so that the resource value can be evaluated according to the conclusion data. As a result, effective resource value evaluation can be achieved without leaking the original resource data of the physical resources, avoiding cross-institutional data compliance issues and business risks.

[0058] In practice, the verification of the zero-knowledge proof shown in the proof data P1 can be automatically performed by the device 102 after receiving the proof data P1 and the commitment h, or in response to the resource evaluation request sent by the device 104. The resource evaluation request includes data identifiers of several proof data corresponding to several physical resources, and the several proof data include the proof data P1. In one example, the several physical resources belong to the same resource holder, and the device 104 is a device of the resource holder's partner. Take the lending scenario in RWA (Real Word Assets, physical tokenization) as an example. In this lending scenario, the resource holder is the borrower and the partner is the lender. Among them, RWA can convert valuable resources in the real world (real estate, artwork, power battery resources, etc.) into digital tokens, and trade and circulate on the blockchain.

[0059] Next, combine Figure 4 , introduces the resource evaluation process involving device 102 and device 104. Among them, Figure 4 It is a timing diagram of the resource evaluation process in the embodiment of this specification. The resource evaluation process includes steps S401-S405 as shown below.

[0060] like Figure 4 As shown, in step S401, device 104 sends a resource evaluation request to device 102, which includes data identifiers of several certification data corresponding to several physical resources.

[0061] The physical resources are one or more physical resources; correspondingly, the proof data are one or more proof data. In addition, the proof data may include the proof data P1 as mentioned above, and the proof data is stored in the device 102 .

[0062] Next, in step S403, the device 102 verifies the zero-knowledge proofs respectively shown by the above-mentioned several proof data.

[0063] Specifically, for each of the several proof data, the device 102 can verify the zero-knowledge proof shown by the proof data by executing the locally deployed verification algorithm logic. Furthermore, the device 102 also stores a commitment associated with the proof data, a public key for verifying the commitment, and a verification key vk. The device 102 can verify the zero-knowledge proof shown by the proof data by executing the verification algorithm logic according to the commitment, the public key, and the verification key vk.

[0064] When the zero-knowledge proof verification shown by one or more of the plurality of proof data fails, the device 102 may return feedback information indicating the one or more proof data verification failure to the device 104. When the zero-knowledge proofs shown by the plurality of proof data are all verified, step S505 may be performed next.

[0065] In step S405, in response to the zero-knowledge proofs respectively indicated by the plurality of proof data being verified to be passed, the device 102 determines the resource values ​​of the plurality of physical resources according to the conclusion data respectively indicated by the plurality of proof data.

[0066] In one example, for each of the above-mentioned several physical resources, the resource value of the physical resource can be determined according to the conclusion data shown by the proof data corresponding to the physical resource. In another example, when the above-mentioned several physical resources belong to the same resource holder and the resource categories are the same, in order to improve the efficiency of resource evaluation, the sum of the conclusion data shown by the above-mentioned several proof data can be used as evaluation reference data, and the total resource value of the above-mentioned several physical resources can be determined according to the evaluation reference data.

[0067] Furthermore, when the above-mentioned several physical resources are several power battery resources, as mentioned above, the original resource data includes the battery power of the power battery resources within the target time period, and the conclusion data is the cumulative number of charge and discharge times of the power battery resources within the target time period, the sum of the cumulative number of charge and discharge times respectively shown in the above-mentioned several proof data can be used as evaluation reference data, and the overall health of the battery can be determined based on the evaluation reference data, and then the total resource value of the several power battery resources can be determined based on the overall health of the battery.

[0068] It should be noted that a resource evaluation strategy is preset in the device 102, and the device 102 can use the resource evaluation strategy to evaluate the resource value of the above-mentioned physical resources. Taking power battery resources as an example, in one example, the resource evaluation strategy may include a mapping relationship from evaluation reference data to the overall health of the battery, and a mapping relationship from the overall health of the battery to the total resource value. It should be understood that the content of the resource value evaluation strategy can be configured according to actual needs and is not specifically limited here.

[0069] exist Figure 4 In the solution provided by the corresponding embodiment, by supporting the inclusion of data identifiers of several proof data corresponding to several physical resources in a resource evaluation request, batch verification of proof data can be achieved, and then resource value evaluation can be performed after the batch verification is passed. This can greatly improve the throughput of resource evaluation requests while reducing user costs.

[0070] According to the description in the foregoing, device 102 may be a blockchain network, or an institutional device of an authoritative certification agency.

[0071] When the device 102 is a blockchain network, a smart contract C1 for executing the verification algorithm logic is deployed in the blockchain network 102. As mentioned above, the data storage request is a transaction Tx1 that calls the storage interface of the smart contract C1. The blockchain network 102 can store the commitment h and the proof data P1 in the contract state of the smart contract C1 according to the transaction Tx1. It should be noted that the private key key1 of the device 101 not only participates in the generation of the commitment, but also participates in the interaction between the device 101 and the blockchain network 102; for example, the transaction Tx1 can be added with a signature generated based on key1, and the blockchain network 102 can store the public key key2 corresponding to key1. After the blockchain network 102 verifies the signature using key2, the commitment h and the proof data P1 are stored in the contract state of the smart contract C1. After that, the blockchain network 102 can execute the verification algorithm logic corresponding to the verification interface of the smart contract C1 to verify the zero-knowledge proof shown by the proof data P1. Specifically, the contract state may pre-store the public key key2 and verification key vk as described above, and the blockchain network 102 may execute the verification algorithm logic to verify the zero-knowledge proof shown in the proof data P1 based on the commitment h, public key key2 and verification key vk.

[0072] Furthermore, as mentioned above, the resource evaluation request is a transaction Tx2 that calls the verification interface of the smart contract C1. The blockchain network 102 can respond to the transaction Tx2 sent by the device 104, and execute the verification algorithm logic corresponding to the verification interface of the smart contract C1 according to the transaction Tx2, and verify the zero-knowledge proof shown by the proof data P1. Specifically, the transaction Tx2 includes data identifiers corresponding to several proof data of several physical resources, and the several proof data include the proof data P1. The blockchain network 102 can execute the verification algorithm logic to verify the zero-knowledge proofs shown by the several proof data according to the transaction Tx2. Afterwards, the blockchain network 102 can respond to the zero-knowledge proofs shown by the several proof data being verified, and determine the resource value of the above-mentioned several physical resources according to the conclusion data shown by the several proof data.

[0073] As is known to all, the execution of transactions in a blockchain network consumes gas. Gas is a unit used to measure and pay for the computing resources required to perform operations on a blockchain network. In order to reduce gas consumption, thereby reducing the investment cost of the resource holder of the physical resource 100 (such as a physical enterprise), a blockchain expansion solution (such as zkSync Era, etc.) can be introduced, so that the blockchain network 102 includes a second-layer network (Layer 2), and the smart contract C1 as described above is deployed in the second-layer network. Thus, the commitment h and the proof data P1 can be stored in the contract state of the smart contract C1, and the second-layer network verifies the zero-knowledge proof shown by the proof data P1 by executing the verification algorithm logic corresponding to the verification interface of the smart contract C1.

[0074] Next, combine Figure 5 , introduces the physical resource authentication process involving the Layer 2 network. Figure 5 This is another timing diagram of the physical resource authentication method based on privacy protection in the embodiment of this specification. The method includes steps S501-S509 as shown below.

[0075] like Figure 5 As shown, in step S501 , the device 101 generates a commitment h for the original resource data soc of the physical resource 100 held by the device 101 using its own private key key1 .

[0076] In step S503, the device 101 inputs at least the original resource data soc and the commitment h into the locally deployed ZKP circuit logic, verifies the commitment h through the computing circuit part, calculates the conclusion data corresponding to the original resource data soc, and generates a zero-knowledge proof of the correctness of the calculation of the computing circuit part through the generation algorithm part to obtain the proof data P1, wherein the conclusion data indicates the health status of the physical resource 100, which is used for resource value assessment.

[0077] In step S505, device 101 sends transaction Tx1 to the second layer network in blockchain network 102, which calls the storage interface of smart contract C1 and includes commitment h and proof data P1.

[0078] In step S507, the second-layer network stores the commitment h and the proof data P1 in the contract state of the smart contract C1 according to the transaction Tx1.

[0079] In step S509, the second-layer network executes the verification algorithm logic corresponding to the verification interface of the smart contract C1 to verify the zero-knowledge proof shown in the proof data P1.

[0080] For explanations of the implementation details of steps S501 - S509 , please refer to the relevant descriptions in the previous text, which will not be repeated here.

[0081] Figure 5 The solution provided by the corresponding embodiment can not only realize Figure 3 The technical effect of the corresponding embodiment can also reduce the investment cost of resource holders by introducing a second-layer network to verify zero-knowledge proof.

[0082] In one embodiment, the blockchain network 102 includes a main chain and a second-layer network. As described above, the smart contract C1 is deployed in the second-layer network, and the smart contract C2 for resource value assessment is deployed in the main chain. As a result, high-frequency zero-knowledge proof verification can be completed on the second-layer network with lower costs, and only a small number of key updates to resources are performed on the main chain.

[0083] In the following, the blockchain network 102 includes a main chain and a second-layer network, and a smart contract C2 is deployed in the main chain and a smart contract C1 is deployed in the second-layer network. Figure 6 , introduces the resource assessment process. Among them, Figure 6 It is another timing diagram of the resource evaluation process in the embodiment of this specification. The resource evaluation process includes steps S601-S609 as shown below.

[0084] like Figure 6 As shown, in step S601, the device 104 sends a transaction Tx2 to the second-layer network in the blockchain network 102, which calls the verification interface of the smart contract C1 and includes data identifiers of several proof data corresponding to several physical resources.

[0085] Among them, the several proof data are stored in the contract status of the smart contract C1.

[0086] Next, in step S603, the second-layer network executes the verification algorithm logic corresponding to the verification interface of the smart contract C1 according to the transaction Tx2, and verifies the zero-knowledge proofs respectively shown in the above-mentioned several proof data.

[0087] Next, in step S605, in response to the zero-knowledge proofs respectively indicated by the above-mentioned proof data being verified as passed, the second-layer network uses the sum of the conclusion data respectively indicated by the above-mentioned proof data as the evaluation reference data R.

[0088] Next, in step S607, the second-layer network sends the transaction voucher Tv of transaction Tx2 to the main chain in the blockchain network 102, which includes the evaluation reference data R.

[0089] Specifically, the second-layer network can send the transaction voucher Tv to the main chain through the rollup mechanism. The transaction voucher Tv can also include information such as the device identification of the device 104. In practice, the rollup mechanism is a capacity expansion solution that processes transactions off-chain and then "packages" the transaction data into the main chain. It solves the scalability problem of blockchain networks such as Ethereum, allowing more transactions to be processed while maintaining the security and decentralization of the main chain.

[0090] After receiving the transaction voucher Tv, the main chain can verify the authenticity of the transaction Tx2 according to the transaction voucher Tv. Specifically, the main chain has a mechanism for verifying the authenticity of the transaction executed by the second-layer network, and the main chain uses this mechanism to verify the authenticity of the transaction Tx2 according to the transaction voucher Tv.

[0091] Next, in step S609, after the main chain verifies the authenticity of transaction Tx2 based on the transaction voucher Tv, it calls the smart contract C2 to determine the total resource value of the above-mentioned physical resources based on the evaluation reference data R.

[0092] In practice, the main chain's determination operation of the total resource value of the above-mentioned several physical resources can be automatically executed after the authenticity verification of transaction Tx2 is passed, or triggered by device 104. When the determination operation is triggered by device 104, the main chain can store the transaction voucher Tv after the authenticity verification of transaction Tx2 is passed, and return the verification result of the authenticity of transaction Tx2 to the second-layer network. In one example, the transaction voucher Tv can be stored in the contract state of the smart contract C2. Afterwards, the second-layer network can return the transaction voucher Tv to the device 104 in response to receiving the verification result. Then, the device 104 can send transaction Tx3 to the main chain, which calls the smart contract C2 and includes the transaction voucher Tv. Then, after the main chain verifies the transaction voucher Tv in transaction Tx3, it calls the smart contract C2 to determine the total resource value of the above-mentioned several physical resources according to the evaluation reference data R.

[0093] When the main chain verifies the transaction voucher Tv in the transaction Tx3, it can search for the transaction voucher Tv in the locally stored transaction vouchers. If it is found, it is determined that the transaction voucher Tv has been verified. If it is not found, it is determined that the transaction voucher Tv has failed to be verified.

[0094] Next, we take the lending scenario in RWA as an example and combine Figure 7 ,right Figure 6 The resource assessment process described in this paper is illustrated with an example. Figure 7This is an example of a power battery resource evaluation process. In this lending scenario, entity enterprise A, which owns multiple power battery resources, is the borrower and hopes to obtain a loan from lending institution B (such as a bank) through digital resources on the chain. In this case, entity enterprise A can Figure 7 As shown in , an agency authorization agreement is completed with lending institution B as the lender. After authorization, lending institution B can verify the zero-knowledge proofs respectively shown in the multiple proof data corresponding to the multiple power battery resources, and evaluate the resource value of the multiple power battery resources.

[0095] Specifically, Figure 7 As shown in , lending institution B can select the proof data of enterprise A and then submit resource evaluation to the second-layer network. For example, lending institution B can select multiple proof data corresponding to multiple power battery resources of enterprise A through device 104, and generate transaction Tx2 based on the data identifier of the multiple proof data, and then send transaction Tx2 to the second-layer network. Transaction Tx2 calls the verification interface of the smart contract C1 deployed in the second-layer network and includes the data identifier. After that, the second-layer network can obtain the verification parameters according to transaction Tx2, and execute the verification algorithm logic corresponding to the verification interface, and perform zkp proof verification according to the verification parameters. Among them, the verification parameters include the verification key vk, the commitment associated with each proof data in the multiple proof data, and the public key used to verify the commitment. After the zero-knowledge proofs shown in the multiple proof data are verified, the second-layer network can perform resource calculation and resource accumulation on the multiple power battery resources, for example, the sum of the cumulative charge and discharge times shown in the multiple proof data can be calculated, and the sum can be used as the total cumulative charge and discharge times of the multiple power battery resources. Next, the second-layer network can use the total cumulative charge and discharge times as evaluation reference data, and send the transaction voucher containing the evaluation reference data of transaction Tx2 to the main chain through the rollup mechanism. Then, after the authenticity of transaction Tx2 is verified according to the transaction voucher, the main chain can call smart contract C2 to determine the overall health of the battery according to the evaluation reference data, and determine the total resource value of the multiple power battery resources according to the overall health of the battery.

[0096] It should be noted that the total resource value can be converted into digital tokens on the blockchain. Entity Enterprise A can convert the above-mentioned multiple power battery resources into digital tokens based on the total resource value and publish them on the blockchain. Then, Entity Enterprise A can obtain a loan from lending institution B based on the digital resources on the chain (such as the digital tokens).

[0097] Figure 6The solution provided by the corresponding embodiment can greatly improve the transaction throughput while reducing the user's cost by completing high-frequency zero-knowledge proof verification based on the second-layer network and supporting batch verification of proofs on the second-layer network, such as reducing the transaction cost between users and the main chain and improving the transaction processing speed with the main chain.

[0098] Figure 8 is a schematic diagram of the structure of a physical resource authentication device based on privacy protection in an embodiment of this specification. The device can be applied to a first device, in which a target circuit logic is deployed, including a computing circuit part and a generating algorithm part. The device can execute as follows Figure 3 , Figure 5 The steps performed by device 101 in the method include: a generation unit 801, configured to use the first private key of the party to generate a first commitment for the original resource data of the physical resource held by the first device; a proof unit 802, configured to at least input the original resource data and the first commitment into the target circuit logic, verify the first commitment through the calculation circuit part, and calculate the conclusion data corresponding to the original resource data, and generate a zero-knowledge proof about the correctness of the calculation of the calculation circuit part through the generation algorithm part to obtain the first proof data, wherein the conclusion data indicates the health status of the physical resource and is used for resource value assessment; a storage unit 803, configured to store the first commitment and the first proof data correspondingly to the second device for the second device to verify the zero-knowledge proof.

[0099] The present specification also provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed in a computer, the computer is caused to execute the following Figures 3 to 6 Describe the method.

[0100] The embodiment of the present specification also provides a computing device, including a memory and a processor, wherein the memory stores an executable code, and when the processor executes the executable code, the following is implemented: Figures 3 to 6 Describe the method.

[0101] The embodiments of the present specification also provide a computer program product, including a computer program / instruction, which is executed by a processor to implement the following Figures 3 to 6 Describe the steps of the method.

[0102] In the 1990s, improvements to a technology could be clearly distinguished as hardware improvements (for example, improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the method flow). However, with the development of technology, many improvements to the method flow today can be regarded as direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that an improvement in a method flow cannot be implemented using a hardware entity module. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming it themselves, without having to ask a chip manufacturer to design and produce a dedicated integrated circuit chip. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages ​​and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.

[0103] The controller can be implemented in any appropriate manner, for example, the controller can take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) that can be executed by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art also know that in addition to implementing the controller in a purely computer-readable program code manner, the controller can be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, this controller can be considered as a hardware component, and the devices included therein for implementing various functions can also be regarded as structures within the hardware component. Or even, the devices for implementing various functions can be regarded as both software modules for implementing the method and structures within the hardware component.

[0104] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a server system. Of course, the present application does not exclude that with the development of computer technology in the future, the computer that implements the functions of the above embodiments may be, for example, a personal computer, a laptop computer, a vehicle-mounted human-computer interaction device, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0105] Although one or more embodiments of the present specification provide method operation steps as described in the embodiments or flow charts, more or less operation steps may be included based on conventional or non-creative means. The order of steps listed in the embodiments is only one way of executing the order of many steps, and does not represent the only execution order. When the device or terminal product in practice is executed, it can be executed in sequence or in parallel according to the method shown in the embodiments or the drawings (for example, a parallel processor or a multi-threaded processing environment, or even a distributed data processing environment). The term "include", "include" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, product or equipment including a series of elements includes not only those elements, but also includes other elements that are not explicitly listed, or also includes elements inherent to such a process, method, product or equipment. In the absence of more restrictions, it is not excluded that there are other identical or equivalent elements in the process, method, product or equipment including the elements. For example, if the words first, second, etc. are used to represent the name, they do not represent any specific order.

[0106] For the convenience of description, the above devices are described in various modules according to their functions. Of course, when implementing one or more of the present specification, the functions of each module can be implemented in the same or more software and / or hardware, or the module implementing the same function can be implemented by a combination of multiple sub-modules or sub-units, etc. The device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0107] The present invention is described with reference to flowcharts and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0108] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0109] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0110] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0111] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0112] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic disk storage, graphene storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0113] It should be understood by those skilled in the art that one or more embodiments of the present specification may be provided as a method, system or computer program product. Therefore, one or more embodiments of the present specification may take the form of a complete hardware embodiment, a complete software embodiment or an embodiment combining software and hardware. Moreover, one or more embodiments of the present specification may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0114] One or more embodiments of the present specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of the present specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0115] Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment. In the description of this specification, the description of the reference terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of this specification. In this specification, the schematic representation of the above terms does not necessarily target the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner. In addition, those skilled in the art can combine and combine the different embodiments or examples described in this specification and the features of different embodiments or examples without contradiction.

[0116] The above description is only an example of one or more embodiments of the present specification and is not intended to limit one or more embodiments of the present specification. For those skilled in the art, one or more embodiments of the present specification may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present specification shall be included in the scope of the claims.

Claims

1. A method for authenticating a physical resource based on privacy protection, performed by a first device, wherein a target circuit logic is deployed in the first device, including a computing circuit part and a generating algorithm part, the method comprising: Using the first private key of the party, generating a first commitment for the original resource data of the physical resource held by the first device; At least the original resource data and the first commitment are input into the target circuit logic, the first commitment is verified by the computing circuit part, and conclusion data corresponding to the original resource data is calculated, and a zero-knowledge proof of the correctness of the calculation of the computing circuit part is generated by the generating algorithm part to obtain first proof data, wherein the conclusion data indicates the health status of the physical resource, which is used for resource value assessment; The first commitment and the first proof data are correspondingly stored in a second device so that the second device can verify the zero-knowledge proof.

2. The method according to claim 1, wherein: The input of the target circuit logic also includes a first public key corresponding to the first private key; The verifying the first commitment comprises: Obtaining a first calculated value using the first public key and the original resource data; Determine whether the first calculated value is equal to the first commitment.

3. The method according to claim 1, wherein: The compilation result of the computing circuit part includes an executable bytecode file obtained by compiling the computing logic of the computing circuit part, and a description file for describing the constraint information of the computing circuit part; The verifying the first commitment by the computing circuit part and calculating the conclusion data corresponding to the original resource data includes: Based on the original resource data and the first commitment, running the bytecode file to generate a number of intermediate variables; Generating a zero-knowledge proof of the correctness of the calculation of the computing circuit portion includes: Generate witness data according to the values ​​of the several intermediate variables; The zero-knowledge proof is generated according to the witness data and the proof key; wherein the proof key is generated according to the description file.

4. The method according to claim 1, wherein: The first device includes the physical resource, or the first device is an edge device on the physical resource side; Before generating the first commitment, also include: The original resource data of the physical resource within a target time period is collected.

5. The method according to claim 1, wherein: The step of using the first private key of the party to generate a first commitment for the original resource data of the physical resource held by the first device includes: A first commitment is generated for the original resource data using the first private key through a preset Pedersen commitment algorithm.

6. The method according to claim 1, wherein: The second device is a blockchain network, and a first smart contract for executing verification algorithm logic is deployed in the blockchain network; The storing the first commitment and the first certification data correspondingly in the second device includes: Sending a first transaction to the blockchain network, which calls the storage interface of the first smart contract and includes the first commitment and the first proof data; so that the blockchain network stores the first commitment and the first proof data in the contract state of the first smart contract accordingly according to the first transaction.

7. The method according to claim 6, wherein: The blockchain network includes a main chain and a second-layer network, and the first smart contract is deployed in the second-layer network; The sending a first transaction to the blockchain network includes: Sending a first transaction to the layer 2 network.

8. The method according to claim 1, wherein: The second device is an institutional device of an authoritative certification body; The storing the first commitment and the first certification data correspondingly in the second device includes: A data storage request including the first commitment and the first certification data is sent to the institution device, so that the institution device stores the first commitment and the first certification data correspondingly.

9. The method according to claim 1, further comprising: The first commitment and the original resource data are stored correspondingly in a third device of the local data service provider so that a supervisory party can check the original resource data.

10. The method according to claim 9, wherein: The third device is a node in the trusted oracle network.

11. The method according to any one of claims 1 to 10, wherein: The physical resource is a power battery resource, the original resource data includes the battery power of the power battery resource within a target time period, and the conclusion data is the cumulative number of charge and discharge times of the power battery resource within the target time period.

12. The method according to claim 11, wherein: The original resource data also includes the battery voltage of the power battery resource within the target time period; The calculating conclusion data corresponding to the original resource data includes: For any two battery charges of the power battery resource with adjacent collection times within the target time period, if a first difference between the latter battery charge and the former battery charge is greater than 0, and a second difference between battery voltages corresponding to the latter battery charge and the former battery charge is greater than 0, then the accumulated charge of the power battery resource within the target time period is increased by the first difference; The accumulated charge and discharge times are determined based on the calculated accumulated charge amount and a preset charge threshold.

13. A method for authenticating physical resources based on privacy protection, comprising: The first device generates a first commitment for the original resource data of the physical resource held by the first device using its first private key; The first device is provided with target circuit logic, which includes a calculation circuit part and a generation algorithm part; The first device at least inputs the original resource data and the first commitment into the target circuit logic, verifies the first commitment through the calculation circuit part, calculates conclusion data corresponding to the original resource data, and generates a zero-knowledge proof of the correctness of the calculation of the calculation circuit part through the generation algorithm part to obtain first proof data, wherein the conclusion data indicates the health status of the physical resource, which is used for resource value assessment; The first device stores the first commitment and the first certification data correspondingly in the second device; The second device verifies the zero-knowledge proof shown by the first proof data.

14. The method according to claim 13, wherein: The second device verifies the zero-knowledge proof shown by the first proof data, including: The second device verifies the zero-knowledge proof shown by the first proof data in response to the resource evaluation request sent by the fourth device; wherein the resource evaluation request includes data identifiers of several proof data corresponding to several physical resources; the several proof data include the first proof data; The method further comprises: In response to the zero-knowledge proofs respectively indicated by the plurality of proof data being verified to be passed, the second device determines the resource values ​​of the plurality of physical resources according to the conclusion data respectively indicated by the plurality of proof data.

15. The method according to claim 14, wherein: Determining the resource values ​​of the plurality of physical resources according to the conclusion data respectively shown by the plurality of proof data comprises: The sum of the conclusion data respectively shown in the plurality of proof data is used as evaluation reference data; The total resource value of the plurality of physical resources is determined based on the evaluation reference data.

16. The method according to claim 15, wherein: The plurality of physical resources are a plurality of power battery resources, the original resource data include the battery power of the power battery resources within the target time period, and the conclusion data are the cumulative number of charge and discharge times of the power battery resources within the target time period; Determining the total resource value of the plurality of physical resources according to the evaluation reference data includes: Determine the overall health of the battery based on the evaluation reference data; The total resource value is determined according to the overall health of the battery.

17. The method according to claim 14, wherein: The second device is a blockchain network, in which a first smart contract for executing verification algorithm logic is deployed; the resource evaluation request is a second transaction that calls a verification interface of the first smart contract, and the plurality of proof data are stored in a contract state of the first smart contract; The verifying the zero-knowledge proof shown by the first proof data comprises: According to the second transaction, the verification algorithm logic corresponding to the verification interface of the first smart contract is executed to verify the zero-knowledge proof shown by the first proof data.

18. The method according to claim 17, wherein: The blockchain network includes a main chain and a second-layer network, the first smart contract is deployed in the second-layer network, and the main chain has a second smart contract deployed; The determining of the resource values ​​of the plurality of physical resources comprises: The second-layer network sends the transaction voucher of the second transaction to the main chain, which includes evaluation reference data, where the evaluation reference data is the sum of the conclusion data respectively shown by the plurality of proof data; After the main chain verifies the authenticity of the second transaction according to the transaction voucher, the second smart contract is called to determine the total resource value of the plurality of physical resources according to the evaluation reference data.

19. The method according to claim 18, wherein: The calling of the second smart contract to determine the total resource value of the plurality of physical resources according to the evaluation reference data includes: The main chain stores the transaction voucher and returns a verification result of the authenticity of the second transaction to the second-layer network; In response to receiving the verification result, the layer 2 network returns the transaction voucher to the fourth device; The fourth device sends a third transaction to the main chain, which calls the second smart contract and includes the transaction voucher; After verifying the transaction voucher in the third transaction, the main chain calls the second smart contract to determine the total resource value of the plurality of physical resources according to the evaluation reference data.

20. The method according to any one of claims 13 to 16, wherein: The second device is an institutional device of an authoritative certification body.

21. A physical resource authentication device based on privacy protection, applied to a first device, wherein a target circuit logic is deployed in the first device, including a computing circuit part and a generating algorithm part, the device comprising: A generating unit configured to generate a first commitment for the original resource data of the physical resource held by the first device using the first private key of the party; a proof unit configured to input at least the original resource data and the first commitment into the target circuit logic, verify the first commitment through the computing circuit part, and calculate conclusion data corresponding to the original resource data, and generate a zero-knowledge proof of the correctness of the calculation of the computing circuit part through the generating algorithm part, to obtain first proof data, wherein the conclusion data indicates the health status of the physical resource, and is used for resource value assessment; A storage unit is configured to store the first commitment and the first proof data correspondingly in a second device, so that the second device can verify the zero-knowledge proof.

22. A computer program product, comprising a computer program / instruction, which, when executed by a processor, implements the steps of the method according to any one of claims 1 to 12.

23. A computing device comprising a memory and a processor, wherein the memory stores executable code, and when the processor executes the executable code, the method according to any one of claims 1 to 12 is implemented.

Images