Transaction information management method and device based on block chain

Abstract

The invention discloses a transaction information management method and device based on a block chain. The method comprises the following steps: receiving a verification code generated by a target server for a target user, and verifying the verification code; if the verification is passed, determining an access level of the target user on the block chain network according to the target identity identifier, and receiving an auditing request for auditing multiple pieces of transaction information initiated by the target user through the target server according to the access level; for each piece of transaction information, performing integrity verification and accuracy verification on the transaction information, and determining an audit result of the transaction information according to the obtained accuracy score and integrity score; and managing the access permission range of the target user on the block chain network according to the audit result of each piece of transaction information in the audit request. The technical problem that the reliability and safety of transaction auditing are low due to the fact that a fixed management rule on which a related financial transaction auditing method depends cannot cover all transaction risks is solved.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and more specifically, to a transaction information management method and device based on blockchain. Background Art

[0002] With the rapid development of digital financial services, relevant regulations are currently unable to effectively match a rapidly developing industry like finance, thus providing space for malicious actors to exploit. Blockchain technology, with its technical advantages, such as unmodifiable characteristics and verifiability, provides new opportunities for financial transaction audits. For example, relevant technologies can monitor whether there are new transaction information blocks in the blockchain. If so, the smart contract access rights of the corresponding transaction node in the smart contract library are obtained according to the authorization key corresponding to the transaction information block; the transaction information block is audited and verified according to the preset management rules of the transaction node in the smart contract. If the audit is passed, a real account book block is generated according to the transaction information block and uploaded to the chain. Otherwise, the transaction information block is determined to be a false account book and the corresponding exception handling operation is performed.

[0003] However, the above financial transaction auditing methods still rely on the preset management rules of smart contracts, and these rules may not fully cover all potential financial transaction risks. There is currently no effective solution to the problems of existing financial transaction auditing methods. Summary of the invention

[0004] The embodiments of the present application provide a transaction information management method and device based on blockchain, so as to at least solve the technical problem that the fixed management rules relied on by the relevant financial transaction auditing methods cannot cover all transaction risks, resulting in low reliability and security of transaction auditing.

[0005] According to one aspect of an embodiment of the present application, a transaction information management method based on blockchain is provided, comprising: receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code includes at least: target identity information of the target user; when the verification code passes the verification, determining the access level of the target user on the blockchain network according to the target identity, and receiving an audit request for auditing multiple transaction information initiated by the target user through the target server according to the access level, wherein copies of the multiple transaction information are in a block storage node within the access permission scope corresponding to the access level; for each transaction information in the audit request, performing integrity check and accuracy check on the transaction information respectively to obtain corresponding accuracy scores and completeness scores, and determining the audit result of the transaction information according to the accuracy score and the completeness score; managing the access permission scope of the target user on the blockchain network according to the audit results of each transaction information in the audit request.

[0006] Optionally, the target server is used to receive an identity authentication request initiated by a target user, wherein the identity authentication request carries at least the first identity identification information, the second identity identification information, and the third identity identification information of the target user; the first identity identification information, the second identity identification information, and the third identity identification information in the identity authentication request are matched with a preset identity information library in turn to obtain corresponding first matching results, second matching results, and third matching results; when the first matching result, the second matching result, and the third matching result are all matched successfully, it is determined that the target user has passed the identity authentication and a verification code is sent; wherein the first identity identification information includes at least one of the following: name, ID number, current login address, last login address, the second identity identification information includes at least one of the following: facial features, fingerprint features, voiceprint features, and the third identity identification information includes at least one of the following: digital password, graphic password, question-and-answer password; the identity information library includes at least: the identity identification information of each of multiple users who have passed the identity authentication, and the identity authentication results include: the target user has passed the identity authentication and the target user has not passed the identity authentication.

[0007] Optionally, the verification code also includes: a preset timestamp, and a random encrypted number obtained by encrypting a random number using an encryption algorithm corresponding to the access level of the target user, wherein verifying the verification code includes: determining the access level of the target user based on the target user identity information, and determining the decryption algorithm corresponding to the access level; decrypting the random encrypted number in the verification code using the decryption algorithm to obtain a corresponding decryption result; determining whether the decryption result is the same as the random number and whether the preset timestamp is within a preset validity period; determining that the verification code has passed the verification if the decryption result is the same as the random number and the preset timestamp is within the preset validity period; determining that the verification code has passed the verification if the decryption result is different from the random number and / or the preset timestamp is not within the preset validity period.

[0008] Optionally, determining the access level of the target user based on the target identity identification information includes: matching the target identity identification information with a preset identity information library to obtain the target permission authentication information and the target permission type of the target user, wherein the identity information library also includes: the permission authentication information and the permission type of each of the multiple users who have passed the identity authentication, and the permission type includes: static permission or dynamic permission; in the case where the target permission type is static permission, determining the access level corresponding to the target permission authentication information according to the preset permission information verification rules, wherein the permission information verification rules include: the correspondence between different permission authentication information and different access levels; in the case where the target permission type is dynamic permission, adjusting the target permission authentication information according to the preset permission adjustment parameters, and determining the access level corresponding to the adjusted target permission authentication information according to the permission information verification rules, wherein the permission adjustment parameters include at least one of the following: business rules, monitoring matters, and policy modes.

[0009] Optionally, the transaction information includes at least: transaction amount, transaction time, account information of both parties to the transaction, and a hash value, wherein the transaction information is respectively checked for integrity and accuracy to obtain corresponding accuracy scores and completeness scores, including: respectively checking the transaction amount, transaction time, and account information of both parties to the transaction in the transaction information for accuracy to obtain a first accuracy score for the transaction amount, a second accuracy score for the transaction time, and a third accuracy score for the account information of both parties to the transaction, and adding the first accuracy score, the second accuracy score, and the third accuracy score to obtain the accuracy score of the transaction information; obtaining the hash value of the copy of the transaction information on the blockchain network, and determining whether the hash value of the transaction information is consistent with the hash value of the copy; when the hash value of the transaction information is consistent with the hash value of the copy, determining that the completeness score of the transaction information is full marks; when the hash value of the transaction information is inconsistent with the hash value of the copy, determining that the completeness score of the transaction information is zero, wherein the blockchain network includes: multiple block storage nodes, and each block storage node is used to store at least one copy of the transaction information.

[0010] Optionally, determining the audit result of the transaction information based on the accuracy score and the completeness score includes: respectively determining the size relationship between the accuracy score and a preset accuracy threshold, and the size relationship between the completeness score and a preset completeness threshold, to obtain corresponding first comparison results and second comparison results; when the first comparison result is that the completeness score is not lower than the completeness threshold, and the second comparison result is that the accuracy score is not lower than the accuracy threshold, determining that the audit result corresponding to the transaction information is audit passed; when the first comparison result is that the completeness score is lower than the accuracy threshold, and / or the second comparison result is that the accuracy score is lower than the completeness threshold, determining that the audit result corresponding to the transaction information is audit failed.

[0011] Optionally, after determining that the audit result of the transaction information is that the audit failed, the method also includes: weighted summing the accuracy score and the corresponding first weight coefficient, the completeness score and the corresponding second weight coefficient to obtain a security score for the transaction information; matching the first comparison result, the second comparison result and the security score with preset security risk impact rules to determine target influencing items that caused the transaction information to fail the audit, wherein the security risk impact rules include: the correspondence between the first comparison result, the second comparison result, the security score and the influencing items, and the influencing items include at least one of the following: smart contract leakage, transaction anomalies, information recording errors; determining the audit rectification strategy for the blockchain network based on the target influencing items.

[0012] Optionally, the scope of access rights of the target user on the blockchain network is managed based on the audit results of each transaction information in the audit request, including: determining the number of transaction information in the audit request that failed the audit due to information recording errors, and determining the difference between the number and a preset threshold value; when the difference is greater than the preset threshold, narrowing the scope of access rights of the target user on the blockchain network; when the difference is not greater than the preset threshold, expanding the scope of access rights of the target user on the blockchain network.

[0013] According to another aspect of an embodiment of the present application, a transaction information management device based on blockchain is also provided, including: a verification module, which is used to receive a verification code generated by a target server for a target user, and verify the verification code, wherein the verification code at least includes: the target identity information of the target user; a receiving module, which is used to determine the access level of the target user on the blockchain network according to the target identity when the verification code passes the verification, and receive an audit request for auditing multiple transaction information initiated by the target user through the target server according to the access level, wherein copies of the multiple transaction information are in a block storage node within the access permission range corresponding to the access level; an audit module, which is used to perform integrity check and accuracy check on each transaction information in the audit request, respectively, to obtain corresponding accuracy scores and completeness scores, and determine the audit results of the transaction information according to the accuracy scores and completeness scores; a management module, which is used to manage the access permission range of the target user on the blockchain network according to the audit results of each transaction information in the audit request.

[0014] According to another aspect of an embodiment of the present application, a computer program product is also provided, the computer program product comprising: a computer program, wherein when the computer program is executed by a processor, the above-mentioned blockchain-based transaction information management method is implemented.

[0015] In an embodiment of the present application, the verification center receives a verification code generated by the target server for the target user, and verifies the verification code, wherein the verification code includes at least: the target identity information of the target user; when the verification code passes the verification, the target user's access level on the blockchain network is determined based on the target identity, and an audit request for auditing multiple transaction information initiated by the target user through the target server is received based on the access level, wherein the copies of the multiple transaction information are in the block storage node within the access permission range corresponding to the access level; for each transaction information in the audit request, the transaction information is respectively checked for integrity and accuracy, and the corresponding accuracy score and integrity score are obtained, and the audit result of the transaction information is determined based on the accuracy score and integrity score; the scope of the target user's access rights on the blockchain network is managed based on the audit results of each transaction information in the audit request to meet different security requirements. The rectification process realizes the automation and intelligence of the financial transaction information audit process, thereby solving the technical problem that the fixed management rules relied on by the relevant financial transaction audit method cannot cover all transaction risks, resulting in low reliability and security of transaction audit. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0017] Figure 1 is a flowchart of an optional blockchain-based transaction information management method according to an embodiment of the present application;

[0018] Figure 2 This is a schematic diagram of an optional user identity information verification process according to an embodiment of the present application;

[0019] Figure 3 It is a structural diagram of an optional blockchain-based transaction information management device according to an embodiment of the present application;

[0020] Figure 4 It is a schematic diagram of the structure of an optional electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0022] It should be noted that the terms "first", "second", etc. in the specification, claims and drawings of the present application are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0023] In order to better understand the embodiments of the present application, some nouns or terms that appear in the description of the embodiments of the present application are first translated and explained as follows:

[0024] Blockchain: It is a distributed database technology that stores data in the form of blocks and uses cryptographic methods to ensure the security and integrity of the data. Each block protects a certain amount of transaction information and is linked to the previous block through encryption to form a growing chain. This design makes it impossible to tamper with the data in the network, because any attempt to modify the data of a block will destroy the continuity of the entire chain. Through this decentralized network structure, blockchain technology realizes the distributed sharing and management of data.

[0025] Example 1

[0026] According to an embodiment of the present application, a transaction information management method based on blockchain is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0027] Figure 1 is a flowchart of a transaction information management method based on blockchain provided in an embodiment of the present application, such as Figure 1 As shown, the method includes the following steps S102-S108, wherein:

[0028] Step S102: receiving a verification code generated by the target server for the target user, and verifying the verification code.

[0029] In the technical solution provided in the above step S102, the verification center (i.e., the "cloud server") of the blockchain network can first receive the verification code generated by the target server on the user side for the currently logged-in target user, wherein the verification code at least includes the target identity identification information of the target user himself; and verify the verification code to determine whether the verification code is valid.

[0030] Step S104, when the verification code passes the verification, the access level of the target user on the blockchain network is determined according to the target identity, and an audit request for auditing multiple transaction information initiated by the target user through the target server is received according to the access level.

[0031] In the technical solution provided in the above step S104, after the verification center completes the verification of the verification code and the verification result is verification passed, the verification center can determine the access level of the target user based on the target user identification information in the verification code, where the access level can generally be divided into such as low level, intermediate level, high level or first level, second level,..., fifth level, etc., and the embodiments of the present application do not impose specific restrictions on this.

[0032] In addition, since the target user's access level on the blockchain network can reflect the target user's access rights scope on the blockchain network, that is, the access rights to the block storage nodes, such as browsing, backtracking and updating of data. Different access rights scopes include different block storage nodes on the blockchain network, and each block storage node stores at least one copy of transaction information. Therefore, the verification center of the blockchain network can receive an audit request initiated by the target user to audit multiple transaction information according to the target user's access level, and the copies of these transaction information are all in the block storage nodes within the access rights scope corresponding to the access level. For example, the supplier enters the hash information of the product on the user end to initiate an audit request to query the traceability information of the product.

[0033] Step S106: for each transaction information in the audit request, perform integrity check and accuracy check on the transaction information respectively to obtain corresponding accuracy score and completeness score, and determine the audit result of the transaction information based on the accuracy score and completeness score.

[0034] In the technical solution provided in the above step S106, for each transaction information, the verification center can perform integrity verification and accuracy verification on it to obtain the corresponding accuracy score and integrity score. Among them, the integrity verification is to determine whether the transaction information has been modified or damaged during the transmission or processing process; and the accuracy verification is to verify the authenticity and accuracy of the transaction information, and comply with the preset rules and standards. Therefore, by performing integrity verification and accuracy verification on the transaction information to obtain the corresponding audit results, it is possible to effectively prevent fraud in the transaction information, such as false transactions, data tampering, etc., and at the same time ensure that all operations comply with relevant laws and regulations and policy requirements to avoid compliance issues.

[0035] Step S108: manage the scope of access rights of the target user on the blockchain network based on the audit results of each transaction information in the audit request.

[0036] In the technical solution provided in the above step S108, the audit results of each transaction information in the audit request are counted to obtain the number of transaction information that failed the audit, and the scope of the target user's access rights on the blockchain network is dynamically adjusted based on these numbers. For example, if the audit results show that the target user is involved in non-compliant or problematic transaction information many times, the scope of the target user's access rights may be narrowed, limiting their access to sensitive or high-value transaction data; conversely, if the target user has a good transaction record and the audit results continue to show that the transaction information is complete and accurate, the scope of the target user's access rights will be expanded, granting them a wider range of data access and operation permissions.

[0037] Through the above steps S102 to S108, it can be known that in the above embodiment, the verification center receives audit requests for multiple transaction information within the scope of access rights corresponding to the target user's access level sent by the target user according to the target user's access level; for each transaction information, the transaction information is checked for integrity and accuracy through a preset algorithm, so as to accurately find the transaction information with problems; finally, the scope of the target user's access rights on the blockchain network is dynamically adjusted according to the audit results of each transaction information in the audit request to adapt to different security requirements. The rectification process realizes the automation and intelligence of the financial transaction information audit process, thereby solving the technical problem that the fixed management rules relied on by the relevant financial transaction audit method cannot cover all transaction risks, resulting in low reliability and security of transaction audit.

[0038] The specific implementation steps of the blockchain-based transaction information management method proposed in the embodiment of the present application are described in detail below in combination with the specific implementation process.

[0039] Before receiving the verification code generated by the target server for the target user, the verification center can first verify the transaction information in accordance with the verification code generated by the target server to ensure the security of the transaction information and reduce the risk of illegal transactions and fraud. Figure 2 The flowchart shown in the figure performs identity authentication on the target user, including:

[0040] Step 1: The target server receives an identity authentication request initiated by the target user. The identity authentication request carries at least the target identity information of the target user, including: first identity information, second identity information, and third identity information, and the first identity information includes at least one of the following: name, ID number, current login address, and last login address; the second identity information includes at least one of the following: facial features, fingerprint features, and voiceprint features; and the third identity information includes at least one of the following: digital password, graphic password, and question-and-answer password.

[0041] Step 2: The target server matches the first identity identification information, the second identity identification information, and the third identity identification information in the identity authentication request with a preset identity information database in turn to obtain corresponding first matching results, second matching results, and third matching results, wherein the identity information database includes the identity identification information of each of the multiple users who have passed the identity authentication (that is, the user baseline identity information pre-registered on the server).

[0042] Step 3: Determine whether the first matching result, the second matching result and the third matching result are all matched successfully. If so, execute step 4; otherwise, execute step 5.

[0043] Step 4: Confirm that the target user has passed identity authentication and send a verification code;

[0044] Step 1: Determine if the target user has not passed identity authentication.

[0045] It should be noted that in the matching process of the second step above, the order of the step-by-step identity authentication is the first verification item, the second verification item, and the third verification item, and subsequent verification items will only be executed after the current verification item passes. If a verification item fails, the user verification failure will be sent directly to the client.

[0046] In addition, since the identity information database in the target server also includes: the authority authentication information and authority type of each of the multiple users who have passed the identity authentication, and the authority type includes: static authority or dynamic authority, different authority types correspond to different user types, such as static authority corresponds to non-management level users, and dynamic authority corresponds to management level users, similar to the difference between ordinary technicians and technical supervisors. Therefore, the target server can continue to determine the target authority authentication information and target authority type bound / associated with the target identity identification information from the preset identity information database.

[0047] In this way, the target server can further determine the access level (also known as user level) corresponding to the currently logged-in target user, including:

[0048] When the target permission type is a static permission, the access level corresponding to the target permission authentication information is determined according to the preset permission information verification rules.

[0049] When the target permission type is a dynamic permission, the target permission authentication information is adjusted according to the preset permission adjustment parameters, and the access level corresponding to the adjusted target permission authentication information is determined according to the permission information verification rules.

[0050] Among them, the above-mentioned permission information verification rules include: the correspondence between different permission authentication information and different access levels, and the permission authentication information can be considered as the user level, which is reflected by binding a specific identifier. In addition, the above-mentioned permission adjustment parameters refer to both "set business rules" and "user's current permission adjustment requirements", so they can include but are not limited to: business rules, monitoring matters, strategy patterns, etc. Taking business rules as an example, when user A currently meets the permission conditions of business rule a, and the user level corresponding to the identifier 1 bound to the permission authentication information of user A is low, since user A is a senior manager of the headquarters (referring to the high permission level of user A), and the account login address of user A is at the headquarters (corresponding to the current login address in the previous text), then under the premise that the permission level and login address are met, user A can adjust the identifier according to his own requirements, such as user A can update identifier 1 to identifier 2 (corresponding to the user level identifier 1 is high), or even to identifier 3 (corresponding to the user level higher than identifier 2).

[0051] After the target server determines the target user's access level, the target server can generate a corresponding verification code for the target user according to the following rules. The specific method is as follows:

[0052] When the target user's access level is high or not lower than a preset level threshold, a verification code is generated based on the target user's target identity information, a preset timestamp, and a random number encrypted by using an encryption algorithm corresponding to the target user's access level;

[0053] When the target user's access level is medium or low or lower than the preset level threshold, a verification code is generated by encrypting a random number based on part of the target user's identity information, a preset timestamp, and an encryption algorithm corresponding to the target user's access level.

[0054] Among them, the above-mentioned preset timestamp is the time period from the moment when the target user inputs the target identity information to the client to the current moment when the verification code is generated; or it is a preset time period before the current moment when the verification code is generated. For example, if the time node of generating the verification code is 8 o'clock, then the timestamp can refer to 7:55-8:00 in the evening, that is, the preset time period before generating the verification code, such as within 5 minutes, within 10 minutes, etc. In addition, when the target server generates a random encryption number, it can use an encryption algorithm that matches the access level of the target user, so that the generation strategy of the verification code can be adaptively adjusted according to the user level, so as to improve the security and anti-cracking ability of the verification code, which not only ensures the convenience of operation for high-level users, but also limits the potential risks of low-level users, and enhances the flexibility and security of the system. It can also use a fixed algorithm to reduce the difficulty of encryption operations.

[0055] Therefore, after receiving the verification code generated by the target server for the target user, the verification center can verify the verification code according to the following method, including:

[0056] First, the target user's access level is determined based on the target user's identity information, and a decryption algorithm corresponding to the access level is determined;

[0057] Next, the random encrypted number in the verification code is decrypted using a decryption algorithm to obtain the corresponding decryption result;

[0058] Then, determine whether the decryption result is the same as the random number and whether the preset timestamp is within the preset validity period;

[0059] If the decryption result is the same as the random number and the preset timestamp is within the preset validity period, it is determined that the verification code has passed the verification;

[0060] If the decryption result is different from the random number and / or the preset timestamp is not within the preset valid time period, it is determined that the verification code has failed the verification.

[0061] Furthermore, after the verification code passes the verification, the verification center may determine the access level of the target user according to the target identity information, and the specific steps are the same as the steps of the target server determining the access level of the target user according to the target identity information, including:

[0062] First, the target identity information is matched with the preset identity information database to obtain the target user's target permission authentication information and target permission type;

[0063] When the target permission type is a static permission, the access level corresponding to the target permission authentication information is determined according to the preset permission information verification rules;

[0064] When the target permission type is a dynamic permission, the target permission authentication information is adjusted according to the preset permission adjustment parameters, and the access level corresponding to the adjusted target permission authentication information is determined according to the permission information verification rules.

[0065] Since the above steps have already described this process in detail, we will not go into details here.

[0066] Furthermore, the target user can send an audit request to the blockchain network through the target server, and the audit request includes: the scope of transaction information to be audited corresponding to the target user's access level and its corresponding audit plan, and the hash value of each transaction information to be audited. Among them, the transaction information scope is used to indicate the audit information to be audited; and the audit plan includes the audit time, audit method, audit precautions, and resources to be audited. After receiving the audit request, each block storage node in the blockchain network can first parse the hash value of the verification information to be audited in the audit request; match the hash value with the hash value stored in the transaction information database in the block storage node to locate the corresponding copy of the transaction information to be audited; check the copy of the transaction information to be audited with the transaction information scope included in the audit request and its corresponding audit plan, and all target block storage nodes to be audited. After determining that the copy of the transaction information to be audited is not missing, perform an audit operation on the copy of the transaction information to be audited.

[0067] Since the transaction information at least includes: transaction amount, transaction time, account information of both parties, and the audit request also includes: hash value of each transaction information. Therefore, when the verification center conducts the following audit on each transaction information, it can be implemented in the following way, including:

[0068] Step S1061, perform accuracy checks on the transaction amount, transaction time, and account information of both parties to the transaction in the transaction information, respectively, to obtain a first accuracy score for the transaction amount, a second accuracy score for the transaction time, and a third accuracy score for the account information of both parties to the transaction, and add the first accuracy score, the second accuracy score, and the third accuracy score to obtain an accuracy score for the transaction information.

[0069] Specifically, the specific implementation steps for respectively checking the accuracy of the transaction amount, transaction time, and account information of both parties in the transaction information can be as follows:

[0070] For the comparison result M1 of the transaction amount, the score is given according to the difference percentage of the transaction amount. For example, if the difference of the transaction amount is within plus or minus 1%, M1 will get full marks; if the difference is between plus or minus 1% and plus or minus 5%, the corresponding score will be deducted according to the specific percentage of the difference; if the difference exceeds plus or minus 5%, M1 will get zero points.

[0071] For the comparison result T1 of the transaction time, a score is given according to the deviation of the transaction time. If the deviation of the transaction time is within 1 minute, T1 gets full marks; if the deviation is between 1 minute and 5 minutes, the corresponding score is deducted according to the specific time of the deviation; if the deviation exceeds 5 minutes, T1 gets zero points.

[0072] For the comparison result S1 of the account information of the two parties to the transaction, we will score based on whether the account information of the two parties to the transaction is completely consistent. If the account information is completely consistent, S1 will get full marks; if there are any differences, such as inconsistencies in account name, account number or account type, S1 will get zero points.

[0073] Therefore, by combining the above three comparison results M1, T1, and S1, we can get the accuracy score of the transaction information, and its specific expression is as follows: Z1=M1+T1+S1.

[0074] Step S1062, obtain the hash value of the copy of the transaction information on the blockchain network, and determine whether the hash value of the transaction information is consistent with the hash value of the copy; when the hash value of the transaction information is consistent with the hash value of the copy, determine that the integrity score of the transaction information is full marks; when the hash value of the transaction information is inconsistent with the hash value of the copy, determine that the integrity score of the transaction information is zero.

[0075] That is to say, when performing the integrity check, it is to check the consistency between the hash value of the copy of the transaction information on the blockchain network and the hash value of the transaction information in the audit request. Among them, the above blockchain network includes: multiple block storage nodes, and each block storage node is used to store at least one copy of the transaction information. If the consistency check is passed, the integrity score W1 is recorded as full marks (such as 10 points, 100, etc.); if the consistency check fails, the integrity score W1 is recorded as zero points, so as to ensure that the transaction information is not tampered with or lost during the transmission process.

[0076] Further, after the verification center completes the integrity verification and accuracy verification of each transaction information through the above steps S1061 - S1062, it can also determine the audit result of each transaction information based on the above accuracy score and integrity score, including:

[0077] Step S1063, respectively judge the magnitude relationship between the accuracy score and the preset accuracy threshold, and the magnitude relationship between the integrity score and the preset integrity threshold, to obtain the corresponding first comparison result and second comparison result;

[0078] Step S1064, when the first comparison result is that the integrity score is not lower than the integrity threshold, and the second comparison result is that the accuracy score is not lower than the accuracy threshold, determine that the audit result corresponding to the transaction information is audit passed;

[0079] Step S1065, when the first comparison result is that the integrity score is lower than the accuracy threshold, and / or the second comparison result is that the accuracy score is lower than the integrity threshold, determine that the audit result corresponding to the transaction information is audit not passed.

[0080] That is to say, compare Z1 with the preset accuracy threshold Z0 respectively, and compare W1 with the preset integrity threshold W0; if Z1≥Z0 and W1≥W0, then it can be determined that the transaction information is accurate and complete. At this time, the blockchain network will send a confirmation message of audit passed to the user terminal and allow the user to perform corresponding transaction operations; if Z1<Z0 and / or W1<W0, it is determined that the transaction information is inaccurate and / or incomplete, and the system will reject the user from performing corresponding transaction operations.

[0081] During the above audit process, the verification center has formulated detailed verification rules for transaction amount, time, and both parties' information, improving the scientificity of accuracy determination.

[0082] After the verification center determines that the audit result corresponding to the transaction information is audit passed, in order to accurately identify and optimize possible security risks in the blockchain network, it can also execute the following measures:

[0083] Step 1: Weighted sum the accuracy score and the corresponding first weight coefficient, the completeness score and the corresponding second weight coefficient to obtain the security score of the transaction information. The specific parameter settings of the first weight coefficient corresponding to the accuracy score and the second weight coefficient corresponding to the completeness score can be set according to the actual application scenario. In the embodiment of this application, they are preferably set to 0.5 and 0.5.

[0084] Step 2: Match the first comparison result, the second comparison result and the security score with the preset security risk impact rules to determine the target impact items that caused the transaction information to fail the audit.

[0085] Among them, the above-mentioned security risk impact rules include: the first comparison result, the second comparison result, the correspondence between the security score and the impact items, and the impact items include but are not limited to: smart contract leakage, transaction anomalies, information recording errors, etc.

[0086] Step 3: Determine the audit rectification strategy of the blockchain network based on the target impact items.

[0087] Specifically, the verification center can first determine the audit issues based on the above-determined influencing items and the error parameters corresponding to the influencing items (such as the specific data of the influencing items). For example, if the influencing item is the above-mentioned data leakage, the error parameters correspond to the specific block storage node, time, leakage degree, etc. where the data leakage occurred. Audit issues include at least one of financial management issues, internal control deficiencies, compliance issues, and operational efficiency issues. Then, the verification center determines the audit rectification strategy corresponding to each audit issue from the preset rectification strategy table, as follows:

[0088] When the audit question is a financial management issue, financial management recommendations can be generated for establishing an accounts receivable tracking system and / or implementing a regular collection mechanism. The establishment of an accounts receivable tracking system is used to indicate the introduction or optimization of the existing CRM (Customer Relationship Management) system to ensure that each transaction can be tracked, including key information such as payment date and overdue days; and the implementation of a regular collection mechanism is used to indicate the formulation of an accounts receivable collection process, setting different collection strategies according to the number of overdue days, such as email reminders, telephone follow-up, legal channels, etc.

[0089] When the audit issue is an internal control deficiency, internal control deficiency suggestions corresponding to the approval process enhancement and / or supplier management system can be generated. Among them, the approval process enhancement is used to indicate the establishment of a strict supplier selection and payment approval process, and all purchase orders and payments must go through multiple levels of review to ensure compliance; while the supplier management system is used to indicate the use of an electronic supplier management system to record supplier qualifications, historical transaction records and other information for easy review and monitoring.

[0090] When the audit question is a compliance question, compliance recommendations corresponding to the formulation of data protection policies and / or the addition of technical protection and / or compliance audit and monitoring can be generated. Among them, the formulation of data protection policies is used to instruct the formulation of detailed data collection, storage, processing and transmission policies; the strengthening of technical protection is used to instruct the upgrading of data encryption technology and the implementation of access control to ensure that only authorized personnel can access sensitive data; compliance audit and monitoring is used to instruct regular data protection compliance audits, the establishment of monitoring mechanisms, and the timely detection and correction of violations.

[0091] When the audit question is an operational efficiency issue, operational efficiency recommendations corresponding to optimized inventory management and / or supplier cooperation and / or sales promotion strategies can be generated. Among them, optimized inventory management is used to indicate the use of advanced inventory management systems, the implementation of accurate forecasting and demand planning, and the reduction of inventory backlogs; supplier cooperation is used to indicate the establishment of a closer cooperative relationship with suppliers, the use of JIT (Just In Time Production) and other models to reduce inventory holding costs; sales promotion strategies are used to indicate the use of promotional activities, bundling sales and other methods to speed up inventory turnover, while analyzing the reasons for slow sales and adjusting product lines.

[0092] In addition, after executing the above-mentioned audit rectification strategy, the blockchain network can track the corresponding rectification status of each audit unit according to the preset tracking cycle, and review the blockchain network regularly according to business needs and security needs to ensure that each audit unit can take effective audit rectification measures in a timely manner and that the security risks in the blockchain network can be dealt with in a timely manner.

[0093] Finally, the verification center can also manage the scope of access rights of the target user on the blockchain network based on the audit results of each transaction information in the audit request, including:

[0094] Determine the number of transaction information in the audit request that failed the audit due to abnormal information records, and determine the difference between the number and the preset threshold value;

[0095] When the difference is greater than a preset threshold, the scope of the target user’s access rights on the blockchain network is narrowed;

[0096] When the difference is not greater than the preset threshold, the scope of access rights of the target user on the blockchain network is expanded.

[0097] That is to say, when the target impact item indicates that there is a problem with the transaction information (such as transaction information leakage, transaction information tampering, etc.), the verification center can record the error information and send an alarm to the user to remind the user that there is a problem with the transaction information. At the same time, the alarm frequency can be collected to adjust the user's access rights according to the frequency to ensure the security of transaction information during the audit process.

[0098] Specifically, assume that the user alarm frequency (i.e., the number of transaction information that failed the audit due to information recording errors) is P1, and the preset alarm frequency (i.e., the preset threshold value) is P2. First, calculate the difference between P1 and P2; when the difference is greater than the preset threshold, reduce the user's access level, that is, reduce the scope of the target user's access rights on the blockchain network. When the difference is greater than the preset threshold, increase the user's access level, that is, expand the scope of the target user's access rights on the blockchain network.

[0099] Among them, the setting of the preset alarm frequency P2 can be achieved by collecting the alarm data of the target user in multiple historical periods, and calculating the average of the alarm frequency in the entire time range as the initial value of P2; judging the difference between the alarm frequency of the user in the current period and the average of the alarm frequency in multiple historical periods; if the alarm frequency of the user in the current period is greater than the average of the alarm frequency in multiple historical periods, the initial value of the preset alarm frequency P2 can be increased; if the alarm frequency of the user in the current period is less than or equal to the average of the alarm frequency in multiple historical periods, the initial value of the preset alarm frequency P2 can be kept unchanged. In addition, the preset threshold is preferably set to 1 / 5 of the preset alarm frequency P2.

[0100] Through the above-mentioned transaction information management method based on blockchain, the security and reliability of transaction information audit can be significantly improved. First, the verification and permission management of user information can effectively prevent unauthorized users from accessing and operating block storage, and can also accurately match the permission range for users with different access levels, reducing the risk of malicious attacks or misoperation of the blockchain network. Secondly, by comparing the hash value and checking the integrity and accuracy of the transaction information according to the preset rules, errors or tampering in the transaction information can be discovered and corrected in time to ensure the integrity and accuracy of the transaction information. Thirdly, the user permission range is dynamically adjusted according to the audit results of the transaction information within the permission range, so that the blockchain network can adjust the permission in real time according to the user behavior and system security status, and ensure the security of the audit information. Finally, for the influencing matters and corresponding error information in the audit process, it can intelligently generate an adaptive audit rectification strategy and perform post-audit tracking, which can greatly improve the efficiency and accuracy of handling audit errors, and further improve the audit security, practicality and reliability of the overall blockchain network.

[0101] Example 2

[0102] According to an embodiment of the present application, a blockchain-based transaction information management device is also provided for implementing the blockchain-based transaction information management method in Example 1, such as Figure 3 As shown, the transaction information management device based on blockchain at least includes: a verification module 32, a receiving module 34, an audit module 36 and a management module 38, wherein:

[0103] The verification module 32 is used to receive the verification code generated by the target server for the target user and verify the verification code, wherein the verification code at least includes: target identity information of the target user;

[0104] The receiving module 34 is used to determine the access level of the target user on the blockchain network according to the target identity identifier when the verification code passes the verification, and receive an audit request for auditing multiple transaction information initiated by the target user through the target server according to the access level, wherein the copies of the multiple transaction information are all in the block storage node within the access permission range corresponding to the access level;

[0105] The audit module 36 is used to perform integrity check and accuracy check on each transaction information in the audit request, obtain corresponding accuracy score and integrity score, and determine the audit result of the transaction information according to the accuracy score and integrity score;

[0106] The management module 38 is used to manage the scope of access rights of the target user on the blockchain network based on the audit results of each transaction information in the audit request.

[0107] It should be noted that each module in the blockchain-based transaction information management device in the embodiment of the present application corresponds one by one to each implementation step of the blockchain-based transaction information management method in Example 1. Since a detailed description has been given in Example 1, some details not reflected in this embodiment can be referred to Example 1, and will not be repeated here.

[0108] Example 3

[0109] According to an embodiment of the present application, a computer program product is also provided, which includes a computer program, wherein when the computer program is executed by a processor, the blockchain-based transaction information management method in Example 1 is implemented.

[0110] According to an embodiment of the present application, a non-volatile storage medium is also provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the blockchain-based transaction information management method in Example 1 by running the computer program.

[0111] According to an embodiment of the present application, a processor is also provided, which is used to run a computer program, wherein the blockchain-based transaction information management method in Example 1 is executed when the computer program is running.

[0112] According to an embodiment of the present application, an electronic device is also provided, which includes: a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the blockchain-based transaction information management method in Example 1 through the computer program.

[0113] Specifically, the following steps are executed when the computer program is running: receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code includes at least: target identity information of the target user; when the verification code passes the verification, determining the access level of the target user on the blockchain network based on the target identity, and receiving an audit request for auditing multiple transaction information initiated by the target user through the target server based on the access level, wherein copies of the multiple transaction information are each in a block storage node within the access permission range; for each transaction information in the audit request, performing integrity check and accuracy check on the transaction information respectively to obtain corresponding accuracy scores and completeness scores, and determining the audit result of the transaction information based on the accuracy score and the completeness score; managing the access permission range of the target user on the blockchain network based on the audit results of each transaction information in the audit request.

[0114] As an optional implementation, the electronic device may be in the form of a mobile terminal, a computer terminal or a similar computing device. Figure 4 The hardware structure block diagram of an electronic device for implementing a transaction information management method based on blockchain is shown. Figure 4 As shown, the electronic device 40 may include one or more (402a, 402b, ..., 402n are used to illustrate) processors 402 (the processor 402 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 404 for storing data, and a transmission device 406 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It can be understood by those skilled in the art that Figure 4 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 4 More or fewer components as shown, or with Figure 4 Different configurations shown.

[0115] It should be noted that the one or more processors 402 and / or other data processing circuits described above may generally be referred to herein as "data processing circuits". The data processing circuits may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuit may be a single independent processing module, or may be incorporated in whole or in part into any of the other components in the electronic device 40. As described in the embodiments of the present application, the data processing circuit acts as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0116] The memory 404 can be used to store software programs and modules of application software, such as the program instructions / data storage device corresponding to the transaction information management method based on blockchain in the embodiment of the present application. The processor 402 executes various functional applications and data processing by running the software programs and modules stored in the memory 404, that is, realizing the vulnerability detection method of the above-mentioned application. The memory 404 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some instances, the memory 404 may further include a memory remotely arranged relative to the processor 402, and these remote memories may be connected to the electronic device 40 via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof.

[0117] The transmission device 406 is used to receive or send data via a network. The specific example of the above network may include a wireless network provided by a communication provider of the electronic device 40. In one example, the transmission device 406 includes a network adapter (Network Interface Controller, NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 406 can be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0118] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the electronic device 40 .

[0119] The serial numbers of the above embodiments are only for description and do not represent the advantages or disadvantages of the embodiments.

[0120] In the above embodiments of the present application, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0121] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only schematic. For example, the division of units can be a logical function division. There may be other division methods in actual implementation. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0122] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed over multiple units. Some or all of the units may be selected according to actual needs to achieve the purpose of the present embodiment.

[0123] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0124] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, server or network device, etc.) to perform all or part of the steps of each embodiment method of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk, etc. Various media that can store program codes.

[0125] The above are only preferred implementations of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A transaction information management method based on blockchain, characterized in that: include: Receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code at least includes: target identity information of the target user; In the case where the verification code passes the verification, the access level of the target user on the blockchain network is determined according to the target identity, and an audit request for auditing multiple transaction information initiated by the target user through the target server is received according to the access level, wherein the copies of each of the multiple transaction information are in the block storage node within the access permission range corresponding to the access level; For each transaction information in the audit request, respectively perform integrity check and accuracy check on the transaction information to obtain corresponding accuracy scores and integrity scores, and determine the audit result of the transaction information based on the accuracy scores and the integrity scores; The scope of access rights of the target user on the blockchain network is managed according to the audit results of each transaction information in the audit request.

2. The method according to claim 1, characterized in that The target server is used to receive an identity authentication request initiated by a target user, wherein the identity authentication request carries at least first identity identification information, second identity identification information, and third identity identification information of the target user; sequentially matching the first identity identification information, the second identity identification information, and the third identity identification information in the identity authentication request with a preset identity information database to obtain corresponding first matching results, second matching results, and third matching results; if the first matching result, the second matching result, and the third matching result are all matched successfully, determining that the target user has passed the identity authentication, and sending the verification code; Among them, the first identity identification information includes at least one of the following: name, ID number, current login address, last login address, the second identity identification information includes at least one of the following: facial features, fingerprint features, voiceprint features, and the third identity identification information includes at least one of the following: digital password, graphic password, question-and-answer password; the identity information database includes at least: the identity identification information of multiple users who have passed identity authentication, and the identity authentication results include: the target user passed the identity authentication, and the target user failed the identity authentication.

3. The method according to claim 1, characterized in that The verification code also includes: a preset timestamp, and a random encrypted number obtained by encrypting a random number using an encryption algorithm corresponding to the access level of the target user, wherein verifying the verification code includes: Determining the access level of the target user according to the target user identity information, and determining a decryption algorithm corresponding to the access level; Decrypting the random encrypted number in the verification code using the decryption algorithm to obtain a corresponding decryption result; Determine whether the decryption result is the same as the random number and whether the preset timestamp is within a preset validity period; If the decryption result is the same as the random number and the preset timestamp is within the preset validity period, determining that the verification code passes the verification; In a case where the decryption result is different from the random number and / or the preset timestamp is not within the preset valid time period, it is determined that the verification code has failed the verification.

4. The method according to claim 3, characterized in that: Determining the access level of the target user according to the target identity information includes: Matching the target identity identification information with a preset identity information database to obtain the target permission authentication information and target permission type of the target user, wherein the identity information database also includes: the permission authentication information and permission type of each of multiple users who have passed identity authentication, and the permission type includes: static permission or dynamic permission; In the case where the target permission type is a static permission, determining the access level corresponding to the target permission authentication information according to a preset permission information verification rule, wherein the permission information verification rule includes: a correspondence between different permission authentication information and different access levels; In the case where the target permission type is dynamic permission, the target permission authentication information is adjusted according to preset permission adjustment parameters, and the access level corresponding to the adjusted target permission authentication information is determined according to the permission information verification rules, wherein the permission adjustment parameters include at least one of the following: business rules, monitoring matters, and policy modes.

5. The method according to claim 1, characterized in that The transaction information at least includes: transaction amount, transaction time, account information of both parties to the transaction, and hash value, wherein the transaction information is respectively subjected to integrity check and accuracy check to obtain corresponding accuracy score and completeness score, including: Performing accuracy checks on the transaction amount, transaction time, and account information of both parties to the transaction in the transaction information, respectively, to obtain a first accuracy score for the transaction amount, a second accuracy score for the transaction time, and a third accuracy score for the account information of both parties to the transaction, and adding the first accuracy score, the second accuracy score, and the third accuracy score to obtain an accuracy score for the transaction information; Obtaining a hash value of the copy of the transaction information on the blockchain network, and determining whether the hash value of the transaction information is consistent with the hash value of the copy; when the hash value of the transaction information is consistent with the hash value of the copy, determining that the integrity score of the transaction information is full marks; when the hash value of the transaction information is inconsistent with the hash value of the copy, determining that the integrity score of the transaction information is zero, wherein the blockchain network includes: a plurality of block storage nodes, and each of the block storage nodes is used to store at least one copy of the transaction information.

6. The method according to claim 1, characterized in that Determining an audit result of the transaction information according to the accuracy score and the completeness score includes: Respectively determining a magnitude relationship between the accuracy score and a preset accuracy threshold, and a magnitude relationship between the integrity score and a preset integrity threshold, to obtain corresponding first comparison results and second comparison results; When the first comparison result is that the completeness score is not less than the completeness threshold, and the second comparison result is that the accuracy score is not less than the accuracy threshold, determining that the audit result corresponding to the transaction information is audit passed; When the first comparison result is that the completeness score is lower than the accuracy threshold, and / or the second comparison result is that the accuracy score is lower than the completeness threshold, it is determined that the audit result corresponding to the transaction information is audit failure.

7. The method according to claim 6, characterized in that After determining that the audit result of the transaction information is audit failure, the method further includes: Performing a weighted summation of the accuracy score and the corresponding first weight coefficient, the completeness score and the corresponding second weight coefficient to obtain a security score of the transaction information; Matching the first comparison result, the second comparison result and the security score with the preset security risk impact rules to determine the target impact items that caused the transaction information to fail the audit, wherein the security risk impact rules include: the correspondence between the first comparison result, the second comparison result, the security score and the impact items, and the impact items include at least one of the following: smart contract leakage, transaction abnormality, information recording error; Determine the audit rectification strategy of the blockchain network based on the target impact items.

8. The method according to claim 7, characterized in that The scope of access rights of the target user on the blockchain network is managed according to the audit results of each transaction information in the audit request, including: Determine the amount of transaction information in the audit request that fails the audit due to information recording errors, and determine the difference between the amount and a preset threshold value; When the difference is greater than a preset threshold, narrowing the scope of access rights of the target user on the blockchain network; When the difference is not greater than a preset threshold, the scope of access rights of the target user on the blockchain network is expanded.

9. A transaction information management device based on blockchain, characterized in that: include: A verification module, used for receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code at least includes: target identity information of the target user; A receiving module, configured to determine the access level of the target user on the blockchain network according to the target identity identifier when the verification code passes the verification, and receive an audit request for auditing multiple transaction information initiated by the target user through the target server according to the access level, wherein the copies of each of the multiple transaction information are in a block storage node within the access permission range corresponding to the access level; An audit module, configured to perform integrity check and accuracy check on each transaction information in the audit request, obtain corresponding accuracy scores and integrity scores, and determine the audit result of the transaction information according to the accuracy scores and the integrity scores; A management module is used to manage the scope of access rights of the target user on the blockchain network according to the audit results of each transaction information in the audit request.

10. A computer program product, characterized in that include: A computer program, wherein when the computer program is executed by a processor, it implements the blockchain-based transaction information management method described in any one of claims 1 to 8.

Images