An audit method and system based on smart contract

Through an audit method based on smart contracts, blockchain hash summary value comparison and database search are used to solve the tampering and redundancy problems of confirmation data, and achieve efficient and secure confirmation information cross-verification and data sharing.

CN119788291BActive Publication Date: 2025-10-10CHINA CONSTR BANK CO LTD GUANGDONG BRANCH
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202510047482.4
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2025-01-13
Publication Date
2025-10-10
Estimated Expiration
2045-01-13

AI Technical Summary

Technical Problem

In the existing technology, confirmation letters for accounting items such as accounts receivable and accounts payable are investigated and collected through one-way paper letters, which is inefficient and easy to tamper with. It is impossible to effectively cross-verify the authenticity of transaction data. At the same time, building a blockchain service platform will lead to data redundancy and resource consumption.

Method used

An audit method based on smart contracts is adopted to obtain the hash summary values ​​of the confirmation requester and the provider through the blockchain for comparison to ensure that the information has not been tampered with, and to search the database for the previous confirmation application information to reduce duplicate data and realize data sharing and reuse.

Benefits of technology

Effectively cross-verify the authenticity of confirmation information, reduce data redundancy, improve audit efficiency and security, and ensure the immutability and transparency of data.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119788291B_ABST
    Figure CN119788291B_ABST
Patent Text Reader

Abstract

The application discloses an audit method and system based on a smart contract, comprising the following steps: obtaining and verifying the hash digest value of the certification application information, if consistent, proving that the information has not been tampered with, and feeding back the certification pass result to the certification requester, so that the certification requester sends a letter request to the certification provider; receiving and verifying the hash value of the letter application information, if consistent, determining that the letter content has not been tampered with, and sending a letter download notification to the certification requester; when the certification provider is audited, obtaining and verifying the target certification application information, comparing the target certification application information with the previous certification application information in the database, if there is a corresponding record, feeding back the previous certification result to the certification provider. This process reduces repeated data confirmation by sharing and reusing certification data, solves the problem of data redundancy, and improves data processing efficiency.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to an audit method and system based on smart contracts. Background Art

[0002] Currently, the traditional method for verifying and collecting evidence for accounting items such as accounts receivable, accounts payable, other accounts receivable, and other accounts payable is typically through one-way paper correspondence. This method is not only inefficient, but also, due to its one-way nature and the tamperability of paper documents, it is cost-effective to fabricate and cannot effectively cross-verify the authenticity of transaction data. Building a blockchain service platform for verification of accounting items such as accounts receivable and accounts payable requires a massive database and efficient data processing capabilities. This, however, generates significant data redundancy and consumes significant computing power and storage resources. Therefore, addressing this data redundancy issue is urgently needed. Summary of the Invention

[0003] Based on the above-mentioned deficiencies in the existing technology, this application provides an audit method and system based on smart contracts to solve the problem of data redundancy.

[0004] In order to achieve the above objectives, this application provides the following technical solutions:

[0005] The first aspect of this application provides an audit method based on smart contracts, which is applied to the confirmation blockchain service platform, including:

[0006] Obtaining from the blockchain the hash digest value corresponding to the confirmation request information stored by the confirmation requester, and receiving the verification hash digest value sent over the internet; wherein the hash digest value is pre-calculated by the confirmation requester through hashing the confirmation request information and the encrypted file; the confirmation request information is the information submitted by the confirmation requester to the confirmation provider for confirmation;

[0007] Comparing the hash digest value with the verification hash digest value to see if they are consistent;

[0008] If the hash digest value is consistent with the verification hash digest value, it is determined that the confirmation application information has not been tampered with, and a confirmation approval result is fed back to the confirmation requester, so that the confirmation requester sends a reply request to the confirmation provider based on the confirmation approval result;

[0009] Obtaining a target hash digest value corresponding to the reply request information stored by the confirmation provider from the blockchain, and receiving the reply hash digest value sent via the internet; wherein the target hash digest value is pre-obtained by the confirmation provider through hashing the reply request information and a target encrypted file; the reply request information is obtained by the confirmation provider by aggregating and encrypting confirmation data based on the confirmation approval result;

[0010] Comparing the target hash digest value with the reply hash digest value to see if they are consistent;

[0011] If the target hash digest value is consistent with the reply letter hash digest value, it is determined that the reply letter application information has not been tampered with, and a notification message for downloading the reply letter application information is sent to the confirmation requester;

[0012] When the confirmation provider is audited, the target confirmation application information stored by the confirmation provider is obtained from the blockchain, and the database is checked to see whether the previous confirmation application information corresponding to the target confirmation application information exists; wherein the previous confirmation application information refers to the confirmation application information stored by the confirmation requester based on the confirmation provider;

[0013] If the previous confirmation application information corresponding to the target confirmation application information exists in the database, the confirmation result corresponding to the previous confirmation application information is sent to the confirmation provider.

[0014] Optionally, in the above-mentioned smart contract-based audit method, after comparing the hash digest value with the verification hash digest value to determine whether they are consistent, the method further includes:

[0015] If the hash summary value is inconsistent with the verification hash summary value, the information that the confirmation application information is not approved is fed back to the confirmation requester.

[0016] Optionally, in the above-mentioned smart contract-based audit method, after comparing the target hash digest value with the reply hash digest value to determine whether they are consistent, the method further includes:

[0017] If the target hash digest value is inconsistent with the reply letter hash digest value, the information indicating that the reply letter application information is not approved is fed back to the confirmation provider.

[0018] Optionally, in the above-mentioned smart contract-based audit method, after verifying whether there is previous confirmation application information corresponding to the target confirmation application information in the database, the method further includes:

[0019] If the previous confirmation application information corresponding to the target confirmation application information exists in the database, a verification operation is performed.

[0020] The second aspect of the application provides an audit method based on a smart contract, applied to a letter of confirmation requester, comprising:

[0021] Obtaining letter of confirmation data;

[0022] Generating letter of confirmation application information according to the letter of confirmation data through a smart contract, and encrypting the letter of confirmation application information to obtain an encrypted file;

[0023] Hash calculating the letter of confirmation application information and the encrypted file to obtain a hash digest value corresponding to the letter of confirmation application information;

[0024] Storing the hash digest value corresponding to the letter of confirmation application information into a block chain, obtaining the hash digest value corresponding to the letter of confirmation application information from the block chain by a letter of confirmation block chain service platform, and comparing whether the hash digest value and a check hash digest value are consistent, if the hash digest value and the check hash digest value are consistent, determining that the letter of confirmation application information is not tampered, and feeding back a letter of confirmation passing result to the letter of confirmation requester;

[0025] Sending the letter of confirmation passing result to a letter of confirmation provider, collecting letter of confirmation data and encrypting the letter of confirmation data based on the letter of confirmation passing result by the letter of confirmation provider to obtain a reply letter application information, storing a target hash digest value corresponding to the reply letter application information into the block chain, comparing whether the target hash digest value and a reply letter hash digest value are consistent through the letter of confirmation block chain service platform, if the target hash digest value and the reply letter hash digest value are consistent, determining that the reply letter application information is not tampered, and sending notification information of downloading the reply letter application information to the letter of confirmation requester;

[0026] Receiving the notification information of downloading the reply letter application information sent by the letter of confirmation block chain service platform, and downloading the reply letter application information corresponding to the notification information from the letter of confirmation block chain service platform;

[0027] Decrypting the reply letter application information to obtain decrypted reply letter application information.

[0028] The third aspect of the application provides an audit system based on a smart contract, applied to a letter of confirmation block chain service platform, comprising:

[0029] A first obtaining unit is used for obtaining a hash digest value corresponding to letter of confirmation application information stored by a letter of confirmation requester from a block chain, and receiving a check hash digest value sent by the Internet; wherein, the hash digest value is obtained by hash calculating the letter of confirmation application information and an encrypted file through the letter of confirmation requester in advance; the letter of confirmation application information is information applied for a letter of confirmation by the letter of confirmation requester to a letter of confirmation provider;

[0030] a first comparison unit configured to compare the hash digest value with the check hash digest value;

[0031] a feedback unit configured to, if the hash digest value is consistent with the check hash digest value, determine that the certification application information is not tampered with, and feed back a certification pass result to the certification requester, so that the certification requester sends a reply request to the certification provider based on the certification pass result;

[0032] a second acquisition unit configured to acquire a target hash digest value corresponding to reply application information stored by the certification provider from the blockchain, and receive a reply hash digest value sent by the Internet; the target hash digest value is obtained by the certification provider performing hash calculation on the reply application information and a target encrypted file in advance; the reply application information is obtained by the certification provider collecting certification data based on the certification pass result and performing encryption;

[0033] a second comparison unit configured to compare the target hash digest value with the reply hash digest value;

[0034] a first sending unit configured to, if the target hash digest value is consistent with the reply hash digest value, determine that the reply application information is not tampered with, and send notification information of downloading the reply application information to the certification requester;

[0035] a verification unit configured to, when the certification provider is audited, acquire target certification application information stored by the certification provider from the blockchain, and verify whether previous certification application information corresponding to the target certification application information exists in the database; the previous certification application information refers to certification application information stored by the certification provider based on the certification request of the certification requester;

[0036] a second sending unit configured to, if the previous certification application information corresponding to the target certification application information exists in the database, send a certification result corresponding to the previous certification application information to the certification provider.

[0037] Optionally, in the above-mentioned smart contract-based auditing system, further comprising:

[0038] a first information feedback unit configured to, if the hash digest value is inconsistent with the check hash digest value, feed back information that the certification application information does not pass to the certification requester.

[0039] Optionally, in the above-mentioned smart contract-based auditing system, further comprising:

[0040] The second information feedback unit is configured to feedback information indicating that the reply application information has been rejected to the confirmation provider if the target hash digest value is inconsistent with the reply hash digest value.

[0041] Optionally, the above-mentioned smart contract-based audit system further includes:

[0042] An execution unit is used to perform a verification operation if the previous confirmation application information corresponding to the target confirmation application information exists in the database.

[0043] A fourth aspect of the present application provides an audit system based on a smart contract, which is applied to a confirmation requester, including:

[0044] A data acquisition unit, used to acquire confirmation data;

[0045] an encryption unit, configured to generate confirmation application information based on the confirmation data through a smart contract, and encrypt the confirmation application information to obtain an encrypted file;

[0046] a calculation unit, configured to perform a hash calculation on the confirmation application information and the encrypted file to obtain a hash summary value corresponding to the confirmation application information;

[0047] a storage unit configured to store the hash digest value corresponding to the confirmation application information in the blockchain, and the confirmation blockchain service platform to obtain the hash digest value corresponding to the confirmation application information from the blockchain, and compare the hash digest value with the verification hash digest value to determine whether the hash digest value is consistent; if the hash digest value is consistent with the verification hash digest value, it is determined that the confirmation application information has not been tampered with, and a confirmation approval result is fed back to the confirmation requester;

[0048] a result sending unit, configured to send the confirmation pass result to the confirmation provider, which collects and encrypts the confirmation data based on the confirmation pass result to obtain reply application information, and stores the target hash digest value corresponding to the reply application information in the blockchain, compares the target hash digest value with the reply hash digest value through the confirmation blockchain service platform to see whether they are consistent; if the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and sends a notification message for downloading the reply application information to the confirmation requester;

[0049] A receiving unit, configured to receive a notification message of downloading reply application information sent by the confirmation blockchain service platform, and download the reply application information corresponding to the notification message from the confirmation blockchain service platform;

[0050] The decryption unit is used to decrypt the reply application information to obtain the decrypted reply application information.

[0051] This application provides an audit method based on smart contracts, which obtains the hash summary value corresponding to the confirmation application information stored by the confirmation requester from the blockchain, and receives the verification hash summary value sent by the Internet. Secondly, the hash summary value is compared with the verification hash summary value to see whether they are consistent. If the hash summary value is consistent with the verification hash summary value, it is determined that the confirmation application information has not been tampered with, and the confirmation requester is fed back a confirmation result, so that the confirmation requester sends a reply request to the confirmation provider based on the confirmation result. Then, the target hash summary value corresponding to the reply application information stored by the confirmation provider is obtained from the blockchain, and the reply sent by the Internet is received. The target hash digest value is compared with the reply hash digest value to see if they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and a notification message for downloading the reply application information is sent to the confirmation requester. Finally, when the confirmation provider is audited, the target confirmation application information stored by the confirmation provider is obtained from the blockchain, and the database is checked to see whether the previous confirmation application information corresponding to the target confirmation application information exists. If the database contains the previous confirmation application information corresponding to the target confirmation application information, the confirmation result corresponding to the previous confirmation application information is sent to the confirmation provider. Therefore, since the confirmation application information is a shared and reusable data, when the confirmation provider initiates a confirmation request, the original first confirmation record will be automatically found and called and sent to the confirmation provider, thereby effectively reducing the duplication of data confirmation and effectively solving the problem of data redundancy. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are merely embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without any creative work.

[0053] Figure 1 A flowchart of an audit method based on smart contracts provided in an embodiment of the present application;

[0054] Figure 2 A flowchart of another smart contract-based audit method provided in an embodiment of the present application;

[0055] Figure 3 A schematic diagram of the structure of an audit system based on smart contracts provided in another embodiment of the present application;

[0056] Figure 4 A schematic diagram of the structure of another smart contract-based audit system provided in another embodiment of the present application. DETAILED DESCRIPTION

[0057] The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, rather than all the embodiments of the present application. Based on the embodiments in the present application, all other embodiments obtained by a person of ordinary skill in the art without creative effort belong to the scope of protection of the present application.

[0058] In the present application, the relationship terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between the entities or operations. Moreover, the terms "include", "contain" or any other variants thereof are intended to cover non-exclusive inclusion, so that the process, method, article or equipment including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or equipment. Without more limitations, the element defined by the statement "including a" does not exclude the presence of another same element in the process, method, article or equipment including the element.

[0059] The embodiments of the present application provide an audit method based on a smart contract, applied to a confirmation blockchain service platform, as shown in the following figure, specifically comprising the following steps: Figure 1 As shown in the figure, specifically comprising the following steps:

[0060] S101, obtaining a hash digest value corresponding to the confirmation application information stored by the confirmation request party from the blockchain, and receiving an Internet sent check hash digest value.

[0061] The hash digest value is obtained by the confirmation request party performing hash calculation on the confirmation application information and the encrypted file in advance. The confirmation application information is information applied for confirmation by the confirmation request party to the confirmation provider.

[0062] It should be noted that the confirmation request party refers to the accounting firm of the audited unit. The embodiments of the present application are in the process of the accounting firm and the like issuing a confirmation letter to the upstream and downstream enterprises after obtaining the authorization of the audited unit through the banking financial institutions, the banking financial institutions querying and checking the relevant information and providing a reply letter or information according to the received confirmation letter, and the confirmation blockchain service platform is intervened to ensure the authenticity of the cross-verification transaction data.

[0063] Therefore, after the audited unit of the confirmation request party is authorized, the confirmation request party, that is, the accounting firm, will generate the transaction data to be cross-verified into confirmation application information, then encrypt the confirmation application information to obtain an encrypted file, and finally generate a hash digest value of the confirmation application information and the related encrypted file and store it in the blockchain for evidence.

[0064] Meanwhile, the attestation blockchain service platform calls the attestation information on the blockchain, that is, obtains the hash digest value corresponding to the attestation application information stored by the attestation requester. Of course, in order to ensure the authenticity of cross-verification transaction data, the attestation requester also sends the verification hash digest value of the attestation application information through the Internet.

[0065] S102, compare the hash digest value with the verification hash digest value.

[0066] It should be noted that, in order to ensure that the attestation application information received by the platform is not tampered with, thereby ensuring the authenticity of the data, therefore, in the embodiment of the application, whether the hash digest value is consistent with the verification hash digest value is compared, if the hash digest value is consistent with the verification hash digest value, it is determined that the attestation application information is not tampered with, therefore, step S103 is executed at this time.

[0067] Optionally, after step S102 is executed, it further comprises:

[0068] If the hash digest value is not consistent with the verification hash digest value, the attestation requester is fed back information that the attestation application information is not passed.

[0069] Specifically, when the hash digest value is not consistent with the verification hash digest value, it can be determined that the attestation application information has been tampered with, therefore, in order to ensure the safety and correctness of the audit, therefore, the attestation requester is fed back information that the attestation application information is not passed at this time.

[0070] Optionally, when the attestation requester receives the information that the attestation application information is not passed, it can submit the application again until it is passed.

[0071] S103, determine that the attestation application information is not tampered with, and feed back the attestation passing result to the attestation requester, so that the attestation requester sends a reply request to the attestation provider based on the attestation passing result.

[0072] It can be understood that when the hash digest value is consistent with the verification hash digest value, the attestation blockchain service platform needs to feed back the attestation passing result to the attestation requester, so that the attestation requester sends a reply request to the attestation provider, thereby obtaining the reply of the attestation application. The attestation provider refers to the upstream and downstream enterprises of the audited unit providing a reply or information bank financial institutions.

[0073] S104, obtaining the target hash digest value corresponding to the reply application information stored by the attestation provider from the blockchain, and receiving the reply hash digest value sent through the Internet.

[0074] Among them, the target hash summary value is obtained in advance by the confirmation provider through hash calculation of the reply application information and the target encrypted file. The reply application information is obtained by the confirmation provider by collecting the confirmation data based on the confirmation result and encrypting it.

[0075] It should be noted that when the confirmation provider receives a reply request sent by the confirmation requester, the confirmation provider will log in to the corporate online banking to verify the amount of accounts receivable and confirm it. After confirmation, the confirmation data will be collected to form reply application information, and the file will be encrypted to obtain the target encrypted file. The bank then generates a target hash summary value based on the reply application information and the target encrypted file, and uploads the target hash summary value and reply application information to the blockchain for evidence storage. Finally, a reply application is sent to the confirmation blockchain service platform. When the confirmation blockchain service platform receives the reply application, it will obtain the target hash summary value corresponding to the reply application information stored by the confirmation provider from the blockchain, and receive the reply hash summary value sent by the confirmation provider through the Internet for subsequent verification.

[0076] S105: Compare the target hash digest value and the reply hash digest value to see if they are consistent.

[0077] It should be noted that in order to know whether the reply application information has been tampered with during the transmission process, the target hash digest value can be compared with the reply hash digest value to see whether they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, so step S106 is executed.

[0078] Optionally, after executing step S105, the method further includes:

[0079] If the target hash digest value is inconsistent with the reply letter hash digest value, the information that the reply letter application information is not approved will be fed back to the confirmation provider.

[0080] It can be understood that when the target hash digest value is inconsistent with the reply hash digest value, it is determined that the reply application information has been tampered with during the transmission process. Therefore, the reply application information at this time cannot be used by the confirmation requester as a reply to the confirmation application. Therefore, the confirmation blockchain service platform needs to feedback the information that the reply application information is not passed to the confirmation provider, so that the confirmation provider can re-produce the reply application information until the reply application information is not tampered with during the transmission process.

[0081] S106. Determine that the reply application information has not been tampered with, and send a notification message for downloading the reply application information to the confirmation requester.

[0082] Specifically, when the target hash digest value is consistent with the reply letter hash digest value, it can be determined that the reply letter application information has not been tampered with. The confirmation blockchain service platform needs to send a notification message to the confirmation requester to download the reply letter application information so that the confirmation requester can download the reply letter application information through the confirmation blockchain service platform to view the internal information of the confirmation.

[0083] S107. When the confirmation provider is audited, the target confirmation application information stored by the confirmation provider is obtained from the blockchain, and the database is checked to see whether the previous confirmation application information corresponding to the target confirmation application information exists.

[0084] It should be noted that in addition to the confirmation requester being audited, the confirmation provider corresponding to the confirmation requester will also be audited. Therefore, when the confirmation provider is audited, the authorized accounting firm will use the basic information that needs to be confirmed according to the corresponding confirmation format (select the amount of accounts receivable, accounts payable, other accounts receivable, and other accounts payable accounting items at a certain point in time) to prepare the target confirmation application information. After encrypting the target confirmation application information, the relevant encrypted file is obtained, and a hash summary is generated based on the target confirmation application information and the relevant encrypted file, which is stored on the blockchain for evidence, and the confirmation application is sent to the confirmation blockchain service platform.

[0085] Therefore, when the confirmation blockchain service platform receives a confirmation application sent by the confirmation provider, it will obtain the target confirmation application information stored by the confirmation provider from the blockchain, and will also check whether the database contains the previous confirmation application information corresponding to the target confirmation application information, wherein the previous confirmation application information refers to the confirmation application information stored by the confirmation requester based on the confirmation provider, thereby avoiding the problem of data redundancy. Therefore, if the database contains the previous confirmation application information corresponding to the target confirmation application information, it means that the target confirmation application information is a duplicate confirmation application information, so step S108 needs to be executed at this time.

[0086] Optionally, after executing step S107, the method further includes:

[0087] If the previous confirmation application information corresponding to the target confirmation application information exists in the database, the verification operation is performed.

[0088] Specifically, when the previous confirmation application information corresponding to the target confirmation application information exists in the database, it means that the target confirmation application information is not a duplicate confirmation application information, so steps S102 to S106 can be executed, that is, the verification operation is performed. It should be noted that during the execution process, the confirmation provider will be converted into the confirmation requester, and the confirmation requester will be converted into the confirmation provider to reply.

[0089] S108. Send the confirmation result corresponding to the previous confirmation application information to the confirmation provider.

[0090] Specifically, when the database contains the previous confirmation application information corresponding to the target confirmation application information, the confirmation blockchain service platform will feedback the confirmation results corresponding to the previous confirmation application information to the confirmation provider, thereby effectively reducing the problem of data redundancy.

[0091] The present application provides an audit method based on smart contracts, which obtains the hash summary value corresponding to the confirmation application information stored by the confirmation requester from the blockchain, and receives the verification hash summary value sent by the Internet. Secondly, the hash summary value is compared with the verification hash summary value to see whether they are consistent. If the hash summary value is consistent with the verification hash summary value, it is determined that the confirmation application information has not been tampered with, and the confirmation result is fed back to the confirmation requester, so that the confirmation requester sends a reply request to the confirmation provider based on the confirmation result. Then, the target hash summary value corresponding to the reply application information stored by the confirmation provider is obtained from the blockchain, and the verification hash summary value sent by the Internet is received. The reply hash digest value is compared with the target hash digest value and the reply hash digest value to see if they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and a notification message for downloading the reply application information is sent to the confirmation requester. Finally, when the confirmation provider is audited, the target confirmation application information stored by the confirmation provider is obtained from the blockchain, and the database is checked to see whether the previous confirmation application information corresponding to the target confirmation application information exists. If the database contains the previous confirmation application information corresponding to the target confirmation application information, the confirmation result corresponding to the previous confirmation application information is sent to the confirmation provider. Therefore, since the confirmation application information is a shared and reusable data, when the confirmation provider initiates a confirmation request, the original first confirmation record will be automatically found and called and sent to the confirmation provider, thereby effectively reducing the duplication of data confirmation and effectively solving the problem of data redundancy.

[0092] This embodiment of the application provides another audit method based on smart contracts, which is applied to the confirmation requester, such as Figure 2 As shown, the specific steps include:

[0093] S201. Obtain confirmation data.

[0094] It should be noted that when a company is audited, it will authorize the accounting firm to apply for confirmation letters. Therefore, at this time, the accounting firm will act as the confirmation requester to make a series of confirmation applications.

[0095] Specifically, the party requesting the confirmation will select and confirm the scope of confirmation required, that is, screen out the company directory and corresponding audit time nodes to be confirmed, and various accounts payable as confirmation data in the ERP system of the audited company.

[0096] S202. Generate confirmation application information based on the confirmation data through a smart contract, and encrypt the confirmation application information to obtain an encrypted file.

[0097] Specifically, in the embodiment of the present application, the confirmation application information will be automatically generated through the smart contract in accordance with the corresponding confirmation format (customer, time point, amount of accounts receivable, accounts payable, other accounts receivable, and other accounts payable accounting items), and then the confirmation application information will be encrypted to ensure the security and authenticity of the confirmation application information.

[0098] It should be noted that the use of smart contracts to interpret the content of confirmation letters can improve efficiency and enhance transparency.

[0099] S203. Perform hash calculation on the confirmation application information and the encrypted file to obtain a hash summary value corresponding to the confirmation application information.

[0100] It should be noted that in order to find out the possibility that the subsequent confirmation application information has been tampered with during the transmission process, the confirmation requester will also use a hash algorithm to perform hash calculation on the confirmation application information and the encrypted file to obtain the hash summary value corresponding to the confirmation application information, so as to verify whether the confirmation application information has been tampered with based on the hash summary value.

[0101] S204. The hash summary value corresponding to the confirmation application information is stored in the blockchain. The confirmation blockchain service platform obtains the hash summary value corresponding to the confirmation application information from the blockchain, and compares the hash summary value with the verification hash summary value to see if they are consistent. If the hash summary value is consistent with the verification hash summary value, it is determined that the confirmation application information has not been tampered with, and the confirmation approval result is fed back to the confirmation requester.

[0102] It should be noted that for the security, verifiability, transparency and tamper-proofing of information, the hash summary value corresponding to the confirmation application information and the confirmation application information can be stored in the blockchain.

[0103] It should also be noted that the specific implementation of step S204 can refer to steps S101 to S103 in the above method embodiment, and will not be repeated here.

[0104] S205. Send the confirmation result to the confirmation provider, which collects and encrypts the confirmation data based on the confirmation result to obtain the reply application information, and stores the target hash digest value corresponding to the reply application information in the blockchain. The confirmation blockchain service platform compares the target hash digest value with the reply hash digest value to see if they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and sends a notification message to the confirmation requester to download the reply application information.

[0105] It should also be noted that the specific implementation of step S205 can refer to steps S104 to S106 in the above method embodiment, and will not be repeated here.

[0106] S206. Receive notification information sent by the confirmation blockchain service platform for downloading reply application information, and download the reply application information corresponding to the notification information from the confirmation blockchain service platform.

[0107] Specifically, when the accounting firm receives the notification information for downloading the reply application information sent by the confirmation blockchain service platform, it will download the electronic reply file, that is, the reply application information, from the confirmation blockchain service platform to view the internal information of the confirmation in the reply application information.

[0108] S207. Decrypt the reply application information to obtain the decrypted reply application information.

[0109] It is understood that after downloading the confirmation request information, the accounting firm will use the private key to decrypt the confirmation request information. After successful decryption, the internal information of the confirmation letter can be viewed. The private key is provided by the confirmation provider.

[0110] This application provides a smart contract-based auditing method for confirmation requesters. This process ensures the authenticity, integrity, and immutability of confirmation requests and responses. Smart contracts are used to generate and encrypt confirmation information. The storage and verification of hash digest values ​​ensure the security and transparency of the information. The encryption and decryption of the response information ensures its privacy and validity.

[0111] Another embodiment of the present application provides an audit method based on a smart contract, which specifically includes the following steps:

[0112] The confirmation requester obtains the confirmation data.

[0113] The confirmation requester generates confirmation application information based on the confirmation data through a smart contract, encrypts the confirmation application information, and obtains an encrypted file.

[0114] The confirmation requester performs hash calculation on the confirmation application information and the encrypted file to obtain the hash summary value corresponding to the confirmation application information.

[0115] The confirmation requester stores the hash summary value corresponding to the confirmation application information in the blockchain.

[0116] The confirmation blockchain service platform obtains the hash summary value corresponding to the confirmation application information stored by the confirmation requester from the blockchain, and receives the verification hash summary value sent by the Internet.

[0117] The confirmation blockchain service platform compares the hash summary value with the verification hash summary value to see if they are consistent.

[0118] If the confirmation blockchain service platform compares the hash summary value and the verification hash summary value and finds that they are consistent, it determines that the confirmation application information has not been tampered with, and feedback the confirmation approval result to the confirmation requester, so that the confirmation requester can send a reply request to the confirmation provider based on the confirmation approval result.

[0119] The confirmation requester sends the confirmation result to the confirmation provider.

[0120] The confirmation provider collects and encrypts the confirmation data based on the confirmation results, obtains the reply application information, and stores the target hash summary value corresponding to the reply application information in the blockchain.

[0121] The confirmation blockchain service platform obtains the target hash summary value corresponding to the reply application information stored by the confirmation provider from the blockchain, and receives the reply hash summary value sent by the Internet.

[0122] The confirmation blockchain service platform compares the target hash summary value with the reply hash summary value to see if they are consistent.

[0123] If the confirmation blockchain service platform compares the target hash summary value with the reply hash summary value and finds that it is consistent, it determines that the reply application information has not been tampered with, and sends a notification message to the confirmation requester to download the reply application information.

[0124] The confirmation requester receives the notification information sent by the confirmation blockchain service platform to download the reply application information, and downloads the reply application information corresponding to the notification information from the confirmation blockchain service platform.

[0125] The confirmation requesting party decrypts the reply application information and obtains the decrypted reply application information.

[0126] When the confirmation provider receives an audit request, it will upload the target confirmation application information to the blockchain.

[0127] The confirmation blockchain service platform obtains the target confirmation application information stored by the confirmation provider from the blockchain, and verifies whether the previous confirmation application information corresponding to the target confirmation application information exists in the database.

[0128] If the confirmation blockchain service platform detects that the previous confirmation application information corresponding to the target confirmation application information exists in the database, it will send the confirmation result corresponding to the previous confirmation application information to the confirmation provider.

[0129] Another embodiment of the present application provides an audit system based on smart contracts, which is applied to the confirmation blockchain service platform. Figure 3 As shown, it specifically includes the following units:

[0130] The first acquisition unit 301 is configured to obtain, from the blockchain, a hash digest value corresponding to the confirmation request information stored by the confirmation requester, and receive a verification hash digest value sent over the internet. The hash digest value is pre-calculated by the confirmation requester by hashing the confirmation request information and the encrypted file. The confirmation request information is the information submitted by the confirmation requester to the confirmation provider requesting confirmation.

[0131] The first comparing unit 302 is configured to compare the hash digest value with the verification hash digest value to see if they are consistent.

[0132] Feedback unit 303 is used to determine that the confirmation application information has not been tampered with if the hash digest value is consistent with the verification hash digest value, and to feedback the confirmation approval result to the confirmation requester, so that the confirmation requester can send a reply request to the confirmation provider based on the confirmation approval result.

[0133] The second acquisition unit 304 is configured to obtain the target hash digest value corresponding to the reply request information stored by the confirmation provider from the blockchain, and receive the reply hash digest value sent over the internet. The target hash digest value is pre-determined by the confirmation provider by hashing the reply request information and the target encrypted file. The reply request information is generated by the confirmation provider by compiling and encrypting the confirmation data based on the confirmation approval results.

[0134] The second comparison unit 305 is used to compare the target hash digest value with the reply hash digest value to see if they are consistent.

[0135] The first sending unit 306 is configured to determine that the reply application information has not been tampered with if the target hash digest value is consistent with the reply hash digest value, and to send a notification message for downloading the reply application information to the confirmation requester.

[0136] Verification unit 307 is configured to, when a confirmation provider is audited, retrieve the target confirmation request information stored by the confirmation provider from the blockchain and verify whether the previous confirmation request information corresponding to the target confirmation request information exists in the database. The previous confirmation request information refers to the confirmation request information stored by the confirmation provider by the confirmation requester.

[0137] The second sending unit 308 is configured to send the confirmation result corresponding to the previous confirmation application information to the confirmation provider if the previous confirmation application information corresponding to the target confirmation application information exists in the database.

[0138] It should be noted that the specific working process of the above modules in the embodiment of the present application can refer to steps S101 to S108 in the above method embodiment, and will not be repeated here.

[0139] Optionally, another embodiment of the present application provides an audit system based on a smart contract, further comprising:

[0140] The first information feedback unit is used to feedback information that the confirmation application information is rejected to the confirmation requester if the hash summary value is inconsistent with the verification hash summary value.

[0141] Optionally, another embodiment of the present application provides an audit system based on a smart contract, further comprising:

[0142] The second information feedback unit is used to feedback information that the reply letter application information is not passed to the letter of confirmation provider if the target hash summary value is inconsistent with the reply letter hash summary value.

[0143] Optionally, another embodiment of the present application provides an audit system based on a smart contract, further comprising:

[0144] The execution unit is used to perform a verification operation if the previous confirmation application information corresponding to the target confirmation application information exists in the database.

[0145] Another embodiment of the present application provides another audit system based on smart contracts, which is applied to the confirmation requester, such as Figure 4 As shown, it includes the following units:

[0146] The data acquisition unit 401 is used to acquire confirmation data.

[0147] The encryption unit 402 is used to generate confirmation application information based on the confirmation data through a smart contract, and encrypt the confirmation application information to obtain an encrypted file.

[0148] The calculation unit 403 is used to perform hash calculation on the confirmation application information and the encrypted file to obtain a hash summary value corresponding to the confirmation application information.

[0149] Storage unit 404 is used to store the hash digest value corresponding to the confirmation application information in the blockchain. The confirmation blockchain service platform obtains the hash digest value corresponding to the confirmation application information from the blockchain and compares the hash digest value with the verification hash digest value to see whether they are consistent. If the hash digest value is consistent with the verification hash digest value, it is determined that the confirmation application information has not been tampered with, and the confirmation approval result is fed back to the confirmation requester.

[0150] The result sending unit 405 is used to send the confirmation result to the confirmation provider, and the confirmation provider collects the confirmation data based on the confirmation result and encrypts it to obtain the reply application information, and stores the target hash digest value corresponding to the reply application information in the blockchain. The target hash digest value is compared with the reply hash digest value through the confirmation blockchain service platform to see whether they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and a notification message for downloading the reply application information is sent to the confirmation requester.

[0151] The receiving unit 406 is used to receive the notification information of downloading the reply application information sent by the confirmation blockchain service platform, and download the reply application information corresponding to the notification information from the confirmation blockchain service platform.

[0152] The decryption unit 407 is used to decrypt the reply application information to obtain the decrypted reply application information.

[0153] It should be noted that the specific working process of the above modules in the embodiment of the present application can refer to steps S201 to S207 in the above method embodiment, and will not be repeated here.

[0154] It should be noted that the specific working processes of the various modules provided in the above embodiments of the present application can refer to the corresponding steps in the above method embodiments, and will not be repeated here.

[0155] It should also be noted that the embodiment of the present application provides an audit system based on a smart contract, which has the technical effects of any of the above embodiments, and the embodiment of the present application will not be described in detail here.

[0156] Professionals may further appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the above description has generally described the components and steps of each example according to their functions. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professionals and technicians may use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0157] The above description of the disclosed embodiments is intended to enable one skilled in the art to implement or use the present application. Various modifications to these embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application is not limited to the embodiments shown herein, but is intended to conform to the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. An audit method based on smart contracts, characterized in that: Applied to the confirmation blockchain service platform, including: Obtaining from the blockchain a hash digest value corresponding to the confirmation request information stored by the confirmation requester, and receiving a verification hash digest value sent over the internet; wherein the hash digest value is pre-calculated by the confirmation requester on the confirmation request information and the encrypted file; the confirmation request information is the information submitted by the confirmation requester to the confirmation provider for confirmation; Comparing the hash digest value with the verification hash digest value to see if they are consistent; If the hash digest value is consistent with the verification hash digest value, it is determined that the confirmation application information has not been tampered with, and a confirmation approval result is fed back to the confirmation requester, so that the confirmation requester sends a reply request to the confirmation provider based on the confirmation approval result; Obtaining a target hash digest value corresponding to the reply request information stored by the confirmation provider from the blockchain, and receiving the reply hash digest value sent via the internet; wherein the target hash digest value is pre-obtained by the confirmation provider through hashing the reply request information and a target encrypted file; the reply request information is obtained by the confirmation provider by aggregating and encrypting confirmation data based on the confirmation approval result; Comparing the target hash digest value with the reply hash digest value to see if they are consistent; If the target hash digest value is consistent with the reply letter hash digest value, it is determined that the reply letter application information has not been tampered with, and a notification message for downloading the reply letter application information is sent to the confirmation requester; When the confirmation provider is audited, the target confirmation application information stored by the confirmation provider is obtained from the blockchain, and the database is checked to see whether the previous confirmation application information corresponding to the target confirmation application information exists; wherein the previous confirmation application information refers to the confirmation application information stored by the confirmation requester based on the confirmation provider; If the previous confirmation application information corresponding to the target confirmation application information exists in the database, the confirmation result corresponding to the previous confirmation application information is sent to the confirmation provider.

2. The method according to claim 1, characterized in that After comparing the hash digest value with the verification hash digest value to see whether they are consistent, the method further includes: If the hash summary value is inconsistent with the verification hash summary value, the information that the confirmation application information is not approved is fed back to the confirmation requester.

3. The method according to claim 1, characterized in that After comparing the target hash digest value with the reply hash digest value to see if they are consistent, the method further includes: If the target hash digest value is inconsistent with the reply letter hash digest value, the information indicating that the reply letter application information is not approved is fed back to the confirmation provider.

4. An audit method based on smart contracts, characterized in that: Applicable to confirmation requesters, including: Obtain confirmation data; Generate confirmation application information based on the confirmation data through a smart contract, and encrypt the confirmation application information to obtain an encrypted file; Performing hash calculation on the confirmation application information and the encrypted file to obtain a hash digest value corresponding to the confirmation application information; The hash digest value corresponding to the confirmation application information is stored in the blockchain. The confirmation blockchain service platform obtains the hash digest value corresponding to the confirmation application information from the blockchain and compares the hash digest value with the verification hash digest value to see if they are consistent. If the hash digest value is consistent with the verification hash digest value, it is determined that the confirmation application information has not been tampered with, and a confirmation approval result is fed back to the confirmation requester. The confirmation pass result is sent to the confirmation provider, which collects and encrypts the confirmation data based on the confirmation pass result to obtain reply application information, and stores the target hash digest value corresponding to the reply application information in the blockchain. The target hash digest value is compared with the reply hash digest value through the confirmation blockchain service platform to see whether they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and a notification message for downloading the reply application information is sent to the confirmation requester; Receive a notification message from the confirmation blockchain service platform requesting download of reply application information, and download the reply application information corresponding to the notification message from the confirmation blockchain service platform; Decrypting the reply application information to obtain decrypted reply application information; Wherein, when the confirmation provider is audited, the confirmation blockchain service platform obtains the target confirmation application information stored by the confirmation provider from the blockchain, and verifies whether the previous confirmation application information corresponding to the target confirmation application information exists in the database; wherein, the previous confirmation application information refers to the confirmation application information stored by the confirmation requester based on the confirmation provider; If the previous confirmation application information corresponding to the target confirmation application information exists in the database, the confirmation blockchain service platform sends the confirmation result corresponding to the previous confirmation application information to the confirmation provider.

5. An audit system based on smart contracts, characterized in that: Applied to the confirmation blockchain service platform, including: A first obtaining unit is configured to obtain, from the blockchain, a hash digest value corresponding to the confirmation application information stored by the confirmation requester, and receive a verification hash digest value sent from the Internet; wherein the hash digest value is obtained in advance by the confirmation requester performing a hash calculation on the confirmation application information and an encrypted file; the confirmation application information is the information that the confirmation requester applies for confirmation from the confirmation provider; a first comparing unit, configured to compare the hash digest value with the verification hash digest value to see whether they are consistent; a feedback unit, configured to determine that the confirmation application information has not been tampered with if the hash digest value is consistent with the verification hash digest value, and to feed back a confirmation approval result to the confirmation requester, so that the confirmation requester sends a reply request to the confirmation provider based on the confirmation approval result; a second obtaining unit, configured to obtain from the blockchain a target hash digest value corresponding to the reply request information stored by the confirmation provider, and receive the reply hash digest value sent from the internet; wherein the target hash digest value is obtained in advance by the confirmation provider performing a hash calculation on the reply request information and a target encrypted file; and the reply request information is obtained by the confirmation provider compiling and encrypting confirmation data based on the confirmation approval result; A second comparison unit is used to compare whether the target hash digest value is consistent with the reply hash digest value; a first sending unit, configured to determine that the reply application information has not been tampered with if the target hash digest value is consistent with the reply hash digest value, and to send a notification message for downloading the reply application information to the confirmation requester; a verification unit configured to, when the confirmation provider is audited, obtain target confirmation application information stored by the confirmation provider from the blockchain, and verify whether previous confirmation application information corresponding to the target confirmation application information exists in the database; wherein the previous confirmation application information refers to the confirmation application information stored by the confirmation requester based on the confirmation provider; The second sending unit is used to send the confirmation result corresponding to the previous confirmation application information to the confirmation provider if the previous confirmation application information corresponding to the target confirmation application information exists in the database.

6. The system according to claim 5, characterized in that Also includes: The first information feedback unit is configured to feedback information indicating that the confirmation application information has been rejected to the confirmation requester if the hash summary value is inconsistent with the verification hash summary value.

7. The system according to claim 5, characterized in that Also includes: The second information feedback unit is configured to feedback information indicating that the reply application information has been rejected to the confirmation provider if the target hash digest value is inconsistent with the reply hash digest value.

8. An audit system based on smart contracts, characterized in that: Applicable to confirmation requesters, including: A data acquisition unit, used to acquire confirmation data; an encryption unit, configured to generate confirmation application information based on the confirmation data through a smart contract, and encrypt the confirmation application information to obtain an encrypted file; a calculation unit, configured to perform a hash calculation on the confirmation application information and the encrypted file to obtain a hash summary value corresponding to the confirmation application information; a storage unit configured to store the hash digest value corresponding to the confirmation application information in the blockchain, and the confirmation blockchain service platform to obtain the hash digest value corresponding to the confirmation application information from the blockchain, and compare the hash digest value with the verification hash digest value to determine whether the hash digest value is consistent; if the hash digest value is consistent with the verification hash digest value, it is determined that the confirmation application information has not been tampered with, and a confirmation approval result is fed back to the confirmation requester; a result sending unit, configured to send the confirmation pass result to the confirmation provider, which collects and encrypts the confirmation data based on the confirmation pass result to obtain reply application information, and stores the target hash digest value corresponding to the reply application information in the blockchain, and compares the target hash digest value with the reply hash digest value through the confirmation blockchain service platform to see whether they are consistent. If the target hash digest value is consistent with the reply hash digest value, it is determined that the reply application information has not been tampered with, and sends a notification message for downloading the reply application information to the confirmation requester; A receiving unit, configured to receive a notification message of downloading reply application information sent by the confirmation blockchain service platform, and download the reply application information corresponding to the notification message from the confirmation blockchain service platform; a decryption unit, configured to decrypt the reply application information to obtain the decrypted reply application information; Wherein, when the confirmation provider is audited, the confirmation blockchain service platform obtains the target confirmation application information stored by the confirmation provider from the blockchain, and verifies whether the previous confirmation application information corresponding to the target confirmation application information exists in the database; wherein, the previous confirmation application information refers to the confirmation application information stored by the confirmation requester based on the confirmation provider; If the previous confirmation application information corresponding to the target confirmation application information exists in the database, the confirmation blockchain service platform sends the confirmation result corresponding to the previous confirmation application information to the confirmation provider.

Citation Information

Patent Citations

  • Bank electronic confirmation request generation method based on blockchain multi-party authorization

    CN111415233A

  • Blockchain-based confirmation request transfer system, method, device, equipment and medium

    CN113297163A