Blockchain-based transaction information management method and device

Abstract

The application discloses a kind of based on blockchain transaction information management method and device. Among them, the method comprises: receiving the verification code generated by target server for target user, and the verification code is checked;If check passes, it is determined that the access level of target user on the blockchain network according to target identity, and according to access level, the audit request of the multiple transaction information initiated by target user through target server is received;For each transaction information, the integrity check and accuracy check of transaction information are carried out respectively, and the audit result of transaction information is determined according to the accuracy score and the completeness score obtained;According to the audit result of each transaction information in audit request, the access permission range of target user on the blockchain network is managed.The application solves the technical problem that the fixed management rule relied on by the related financial transaction audit method cannot cover all transaction risks, resulting in lower reliability and security of transaction audit.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchains, in particular, to a transaction information management method and device based on a blockchain. BACKGROUND

[0002] With the rapid development of the digitization of financial services, relevant regulations cannot effectively match the rapid development of the financial industry, thus providing a space for malicious actors to exploit. The blockchain technology, with its technical advantages such as non-modifiable characteristics and verifiability, provides new opportunities for financial transaction auditing. For example, the related technology can monitor whether there is a new transaction information block in the blockchain, and if so, obtain the smart contract access permission of the corresponding transaction node in the smart contract library according to the authorization key corresponding to the transaction information block; perform an audit and verification operation on the transaction information block according to the preset management rule of the transaction node in the smart contract, and if the audit and verification is passed, generate a real ledger block according to the transaction information block and chain it, otherwise, determine that the transaction information block is a false ledger and perform a corresponding exception handling operation.

[0003] However, the above-mentioned financial transaction auditing method still relies on the preset management rules of the smart contract, and these rules may not completely cover all potential financial transaction risks. In view of the problems existing in the prior art financial transaction auditing method, no effective solution has been proposed. SUMMARY

[0004] The embodiments of the present application provide a transaction information management method and device based on a blockchain, to at least solve the technical problem that the fixed management rules relied on by the related financial transaction auditing method cannot cover all transaction risks, resulting in low reliability and security of transaction auditing.

[0005] According to an aspect of an embodiment of the present application, a transaction information management method based on a blockchain is provided, comprising: receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code at least includes: target identity information of the target user; in the case that the verification code passes the verification, determining an access level of the target user on a blockchain network according to the target identity, and receiving an audit request of the target user for auditing a plurality of transaction information initiated through the target server according to the access level, wherein each copy of the plurality of transaction information is in a block storage node within the access permission range corresponding to the access level; for each transaction information in the audit request, performing integrity verification and accuracy verification on the transaction information respectively, obtaining an accuracy score and an integrity score, and determining an audit result of the transaction information according to the accuracy score and the integrity score; and managing the access permission range of the target user on the blockchain network according to the audit result of each transaction information in the audit request.

[0006] Optionally, the target server is used to receive an identity authentication request initiated by a target user, wherein the identity authentication request carries at least the first identity identification information, second identity identification information, and third identity identification information of the target user; the first identity identification information, second identity identification information, and third identity identification information in the identity authentication request are matched with a preset identity information library in sequence to obtain corresponding first matching results, second matching results, and third matching results; when the first matching result, the second matching result, and the third matching result are all matched successfully, it is determined that the target user has passed the identity authentication and a verification code is sent; wherein the first identity identification information includes at least one of the following: name, ID number, current login address, last login address, the second identity identification information includes at least one of the following: facial features, fingerprint features, voiceprint features, and the third identity identification information includes at least one of the following: digital password, graphic password, question-and-answer password; the identity information library includes at least: the identity identification information of multiple users who have passed the identity authentication, and the identity authentication results include: the target user passed the identity authentication and the target user failed the identity authentication.

[0007] Optionally, the verification code also includes: a preset timestamp, and a random encrypted number obtained by encrypting a random number using an encryption algorithm corresponding to the access level of the target user, wherein verifying the verification code includes: determining the access level of the target user based on the target user identity information, and determining the decryption algorithm corresponding to the access level; decrypting the random encrypted number in the verification code using the decryption algorithm to obtain a corresponding decryption result; judging whether the decryption result is the same as the random number and whether the preset timestamp is within a preset validity period; if the decryption result is the same as the random number and the preset timestamp is within the preset validity period, determining that the verification code has passed the verification; if the decryption result is different from the random number and / or the preset timestamp is not within the preset validity period, determining that the verification code has failed the verification.

[0008] Optionally, determining the access level of the target user based on the target identity identification information includes: matching the target identity identification information with a preset identity information library to obtain the target permission authentication information and target permission type of the target user, wherein the identity information library also includes: the permission authentication information and permission type of each of multiple users who have passed identity authentication, and the permission type includes: static permission or dynamic permission; in the case where the target permission type is static permission, determining the access level corresponding to the target permission authentication information according to the preset permission information verification rules, wherein the permission information verification rules include: the correspondence between different permission authentication information and different access levels; in the case where the target permission type is dynamic permission, adjusting the target permission authentication information according to the preset permission adjustment parameters, and determining the access level corresponding to the adjusted target permission authentication information according to the permission information verification rules, wherein the permission adjustment parameters include at least one of the following: business rules, monitoring matters, and policy modes.

[0009] Optionally, the transaction information includes at least: the transaction amount, the transaction time, the account information of the two parties to the transaction, and a hash value, wherein the transaction information is respectively subjected to integrity verification and accuracy verification to obtain corresponding accuracy scores and completeness scores, including: performing accuracy verification on the transaction amount, the transaction time, and the account information of the two parties to the transaction in the transaction information to obtain a first accuracy score for the transaction amount, a second accuracy score for the transaction time, and a third accuracy score for the account information of the two parties to the transaction, and adding the first accuracy score, the second accuracy score, and the third accuracy score to obtain the accuracy score of the transaction information; obtaining the hash value of the copy of the transaction information on the blockchain network, and determining whether the hash value of the transaction information is consistent with the hash value of the copy; when the hash value of the transaction information is consistent with the hash value of the copy, determining that the completeness score of the transaction information is full marks; when the hash value of the transaction information is inconsistent with the hash value of the copy, determining that the completeness score of the transaction information is zero, wherein the blockchain network includes: multiple block storage nodes, and each block storage node is used to store at least one copy of the transaction information.

[0010] Optionally, determining the audit result of the transaction information based on the accuracy score and the completeness score includes: respectively judging the size relationship between the accuracy score and a preset accuracy threshold, and the size relationship between the completeness score and a preset completeness threshold, to obtain corresponding first comparison results and second comparison results; when the first comparison result is that the completeness score is not lower than the completeness threshold, and the second comparison result is that the accuracy score is not lower than the accuracy threshold, determining that the audit result corresponding to the transaction information is audit passed; when the first comparison result is that the completeness score is lower than the accuracy threshold, and / or the second comparison result is that the accuracy score is lower than the completeness threshold, determining that the audit result corresponding to the transaction information is audit failed.

[0011] Optionally, after determining that the audit result of the transaction information is that the audit failed, the method also includes: weighted summing the accuracy score and the corresponding first weight coefficient, the completeness score and the corresponding second weight coefficient to obtain the security score of the transaction information; matching the first comparison result, the second comparison result and the security score with the preset security risk impact rules to determine the target influencing items that caused the transaction information to fail the audit, wherein the security risk impact rules include: the correspondence between the first comparison result, the second comparison result, the security score and the influencing items, and the influencing items include at least one of the following: smart contract leakage, transaction anomaly, information recording error; determining the audit rectification strategy of the blockchain network based on the target influencing items.

[0012] Optionally, the scope of the target user's access rights on the blockchain network is managed based on the audit results of each transaction information in the audit request, including: determining the number of transaction information in the audit request that failed the audit due to information recording errors, and determining the difference between the number and a preset threshold value; if the difference is greater than the preset threshold, narrowing the scope of the target user's access rights on the blockchain network; if the difference is not greater than the preset threshold, expanding the scope of the target user's access rights on the blockchain network.

[0013] According to another aspect of an embodiment of the present application, a blockchain-based transaction information management device is also provided, including: a verification module for receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code includes at least: the target identity information of the target user; a receiving module for determining the access level of the target user on the blockchain network based on the target identity when the verification code passes the verification, and receiving an audit request for auditing multiple transaction information initiated by the target user through the target server based on the access level, wherein copies of the multiple transaction information are all in a block storage node within the access permission range corresponding to the access level; an audit module for performing integrity verification and accuracy verification on each transaction information in the audit request, obtaining corresponding accuracy scores and completeness scores, and determining the audit results of the transaction information based on the accuracy scores and completeness scores; a management module for managing the access permission range of the target user on the blockchain network based on the audit results of each transaction information in the audit request.

[0014] According to another aspect of an embodiment of the present application, a computer program product is also provided, comprising: a computer program, wherein when the computer program is executed by a processor, the above-mentioned blockchain-based transaction information management method is implemented.

[0015] In the embodiment of the present application, the verification center receives the verification code generated by the target server for the target user, and verifies the verification code, wherein the verification code at least includes: target identity information of the target user; in the case that the verification code passes the verification, the access level of the target user on the blockchain network is determined according to the target identity, and an audit request for auditing a plurality of transaction information initiated by the target user through the target server is received according to the access level, wherein each copy of the plurality of transaction information is in a block storage node within the access permission range corresponding to the access level; for each transaction information in the audit request, the transaction information is respectively subjected to integrity verification and accuracy verification, and the corresponding accuracy score and integrity score are obtained, and the audit result of the transaction information is determined according to the accuracy score and the integrity score; the access permission range of the target user on the blockchain network is managed according to the audit result of each transaction information in the audit request to adapt to different security requirements. The rectification process realizes the automation and intelligentization of the financial transaction information audit process, thereby solving the technical problem that the fixed management rules relied on by the related financial transaction audit method cannot cover all transaction risks, resulting in low reliability and security of transaction audit. BRIEF DESCRIPTION OF DRAWINGS

[0016] The drawings described herein are used to provide further understanding of the present application, and form a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application, and do not constitute improper limitations on the present application. In the drawings:

[0017] Figure 1 is a flowchart of an optional blockchain-based transaction information management method according to an embodiment of the present application;

[0018] Figure 2 is a verification flowchart of an optional user identity information according to an embodiment of the present application;

[0019] Figure 3 is a structural schematic diagram of an optional blockchain-based transaction information management device according to an embodiment of the present application;

[0020] Figure 4 is a structural schematic diagram of an optional electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0021] In order to enable those skilled in the art to better understand the present invention, the following will clearly and completely describe the technical solutions in the embodiments of the present invention in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts should fall within the scope of protection of this application.

[0022] It should be noted that the terms "first", "second", etc. in the specification, claims, and drawings of the present application are used to distinguish similar objects and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions, for example, a process, method, system, product, or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products, or devices.

[0023] In order to better understand the embodiments of the present application, some nouns or terms that appear in the description of the embodiments of the present application are first translated and explained as follows:

[0024] Blockchain is a distributed database technology that stores data in blocks and uses cryptographic methods to ensure data security and integrity. Each block contains a certain amount of transaction information and is cryptographically linked to the previous block, forming a continuously growing chain. This design makes data tamper-proof within the network, as any attempt to modify a block would disrupt the continuity of the entire chain. Through this decentralized network structure, blockchain technology enables distributed sharing and management of data.

[0025] Example 1

[0026] According to an embodiment of the present application, a blockchain-based transaction information management method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0027] Figure 1 This is a flowchart of a transaction information management method based on blockchain provided in an embodiment of the present application, such as Figure 1 As shown, the method includes the following steps S102-S108, wherein:

[0028] Step S102, receiving the verification code generated by the target server for the target user, and verifying the verification code.

[0029] In the technical solution provided in the above step S102, the verification center of the block chain network (i.e. the "cloud server") can first receive the verification code generated by the target server of the user end for the currently logged-in target user, wherein the verification code at least includes the target identity information of the target user itself; and verify the verification code to determine whether the verification code is valid.

[0030] Step S104, in the case where the verification code passes the verification, determining the access level of the target user on the block chain network according to the target identity, and receiving the audit request for auditing the plurality of transaction information initiated by the target user through the target server according to the access level.

[0031] In the technical solution provided in the above step S104, after the verification center completes the verification of the verification code and the verification result is that the verification passes, the verification center can determine the access level of the target user according to the target user identification information in the verification code, wherein the access level can be divided into, for example, low, medium, high, or first, second, …, fifth levels, etc., which are not specifically limited by the embodiments of the present application.

[0032] In addition, the access level of the target user on the block chain network can reflect the access permission range of the target user on the block chain network, i.e. the access permission to the block storage node, such as browsing, backtracking and updating of data, etc. Different access permission ranges contain different block storage nodes on the block chain network, and each block storage node stores at least one copy of transaction information. Therefore, the verification center of the block chain network can receive the audit request for auditing the plurality of transaction information initiated by the target user according to the access level of the target user, and the copies of these transaction information are all in the block storage nodes within the access permission range corresponding to the access level. For example, the supplier inputs the hash information of the goods at the user end to initiate an audit request for querying the traceability information of the goods.

[0033] Step S106, for each transaction information in the audit request, performing integrity verification and accuracy verification on the transaction information respectively, obtaining the accuracy score and the integrity score corresponding to the transaction information, and determining the audit result of the transaction information according to the accuracy score and the integrity score.

[0034] In the technical solution provided in the step S106, for each transaction information, the verification center can perform completeness verification and accuracy verification to obtain the corresponding accuracy score and completeness score. The completeness verification is to determine whether the transaction information is modified or damaged during transmission or processing. The accuracy verification is to verify the authenticity and accuracy of the transaction information, and to determine whether the transaction information meets the preset rules and standards. Therefore, by performing completeness verification and accuracy verification on the transaction information to obtain the corresponding audit result, fraud in the transaction information, such as false transaction and data tampering, can be effectively prevented, and it can be ensured that all operations meet the relevant regulations and policy requirements, and compliance problems can be avoided.

[0035] In the step S108, the access permission range of the target user on the blockchain network is managed according to the audit results of the transaction information in the audit request.

[0036] In the technical solution provided in the step S108, the audit results of the transaction information in the audit request are counted to obtain the number of transaction information that fails the audit, and the access permission range of the target user on the blockchain network is dynamically adjusted according to the number. For example, if the audit result shows that the target user is involved in non-compliant or problematic transaction information multiple times, the access permission range of the target user can be reduced to limit the access permission of the target user to sensitive or high-value transaction data. Conversely, if the target user has good transaction records and the audit result continuously shows that the transaction information is complete and accurate, the access permission range of the target user can be expanded to give the target user more extensive data access and operation permissions.

[0037] Through the steps S102 to S108, it can be known that in the above embodiment, the verification center receives the audit request of the target user for the transaction information in the access permission range corresponding to the access level of the target user according to the access level of the target user; for each transaction information, the completeness verification and accuracy verification of the transaction information are performed by a preset algorithm, so that the transaction information with problems can be accurately found; finally, the access permission range of the target user on the blockchain network is dynamically adjusted according to the audit results of the transaction information in the audit request to adapt to different security requirements. The rectification process realizes the automation and intelligentization of the financial transaction information audit process, thereby solving the technical problem that the fixed management rules relied on by the related financial transaction audit method cannot cover all transaction risks, resulting in low reliability and security of transaction audit.

[0038] The specific implementation steps of the transaction information management method based on the blockchain provided in the embodiments of the present application will be described in detail in combination with the specific implementation process.

[0039] The verification center, before receiving the verification code generated by the target server for the target user, ensures the security of the transaction information and reduces the risk of illegal transactions and fraud. Before the target user submits the transaction information (such as transaction amount, transaction time, and transaction parties) through the target server, the target user can first perform identity authentication on the target user according to the flowchart shown in Figure 2 The flowchart shown in

[0040] Step 1: The target server receives an identity authentication request initiated by the target user. The identity authentication request carries at least the target identity information of the target user, including: first identity information, second identity information, and third identity information. The first identity information includes at least one of the following: name, ID number, current login address, and last login address. The second identity information includes at least one of the following: facial features, fingerprint features, and voiceprint features. The third identity information includes at least one of the following: digital password, graphical password, and question-answer password.

[0041] Step 2: The target server sequentially matches the first identity information, the second identity information, and the third identity information in the identity authentication request with a preset identity information library to obtain corresponding first matching results, second matching results, and third matching results. The identity information library includes the identity information of a plurality of users who have passed identity verification (i.e., the user reference identity information pre-registered on the server).

[0042] Step 3: Determine whether the first matching result, the second matching result, and the third matching result are all successful. If yes, proceed to Step 4; otherwise, proceed to Step 5.

[0043] Step 4: Determine that the target user has passed identity authentication and send a verification code.

[0044] Step 5: Determine that the target user has not passed identity authentication.

[0045] It should be noted that in the matching process of the above-mentioned second step, the order of the step-by-step identity verification is first verification item, second verification item, and third verification item. Only after the current verification item is passed will the subsequent verification item be executed. If a verification item fails, the user verification failure will be directly sent to the client.

[0046] Furthermore, since the identity information database within the target server also includes the permission authentication information and permission types of multiple authenticated users, and the permission types include static permissions and dynamic permissions, with different permission types corresponding to different user types, such as static permissions corresponding to non-management-level users and dynamic permissions corresponding to management-level users, similar to the difference between ordinary technicians and technical supervisors, the target server can continue to determine the target permission authentication information and target permission type bound / associated with the target identity information from the preset identity information database.

[0047] In this way, the target server can further determine the access level (also known as user level) corresponding to the currently logged-in target user, including:

[0048] When the target permission type is static permission, the access level corresponding to the target permission authentication information is determined according to the preset permission information verification rules.

[0049] When the target permission type is dynamic permission, the target permission authentication information is adjusted according to the preset permission adjustment parameters, and the access level corresponding to the adjusted target permission authentication information is determined according to the permission information verification rules.

[0050] The aforementioned permission information verification rules include the correspondence between different permission authentication information and different access levels. The permission authentication information can be considered as a user level, which is reflected by binding a specific identifier. In addition, the aforementioned permission adjustment parameters refer to both "set business rules" and "user's current permission adjustment requirements," and thus may include, but are not limited to, business rules, monitoring matters, policy patterns, etc. Taking business rules as an example, when user A currently meets the permission conditions of business rule a, and the user level corresponding to identifier 1 bound to user A's permission authentication information is relatively low, since user A is a senior manager at headquarters (indicating that user A has a high permission level), and user A's account login address is at headquarters (corresponding to the current login address mentioned above), then, provided that both the permission level and login address are met, user A can adjust the identifier according to their own requirements. For example, user A can update identifier 1 to identifier 2 (corresponding to a higher user level than identifier 1), or even to identifier 3 (corresponding to a higher user level than identifier 2).

[0051] After the target server determines the target user's access level, it can generate a corresponding verification code for the target user according to the following rules. The specific method is as follows:

[0052] When the target user's access level is high or not lower than a preset level threshold, a verification code is generated based on the target user's target identity information, a preset timestamp, and a random number encrypted using an encryption algorithm corresponding to the target user's access level.

[0053] When the target user's access level is medium or low or lower than the preset level threshold, a verification code is generated based on a random encrypted number obtained by encrypting a random number using an encryption algorithm corresponding to the target user's access level based on part of the target user's target identity information, a preset timestamp, and the encryption algorithm.

[0054] The preset timestamp is the time period from the moment the target user inputs the target identity information into the client to the current moment when the verification code is generated; or it is a preset time period before the current moment when the verification code is generated. For example, if the time node for generating the verification code is 8 o'clock, the timestamp can refer to 7:55-8:00 in the evening, that is, a preset time period before the verification code is generated, such as within 5 minutes, 10 minutes, etc. In addition, when the target server generates a random encryption number, it can use an encryption algorithm that matches the access level of the target user, so that the generation strategy of the verification code can be adaptively adjusted according to the user level, thereby improving the security and anti-cracking ability of the verification code. This ensures the convenience of operation for high-level users, limits the potential risks of low-level users, and enhances the flexibility and security of the system. Alternatively, a fixed algorithm can be used to reduce the difficulty of encryption operations.

[0055] Therefore, after receiving the verification code generated by the target server for the target user, the verification center can verify the verification code according to the following methods, including:

[0056] First, the target user's access level is determined based on the target user's identity information, and a decryption algorithm corresponding to the access level is determined;

[0057] Next, the random encrypted number in the verification code is decrypted using a decryption algorithm to obtain the corresponding decryption result;

[0058] Then, determine whether the decryption result is the same as the random number and whether the preset timestamp is within the preset validity period;

[0059] If the decryption result is the same as the random number and the preset timestamp is within the preset validity period, it is determined that the verification code has passed the verification;

[0060] If the decryption result is different from the random number and / or the preset timestamp is not within the preset valid time period, it is determined that the verification code has failed the verification.

[0061] Further, after the above check code passes the check, the verification center can determine the access level of the target user according to the target identity information. The specific steps are the same as those of the target server determining the access level of the target user according to the target identity information, including:

[0062] First, match the target identity information with the preset identity information library to obtain the target permission authentication information and the target permission type of the target user;

[0063] In the case of static permission of the target permission type, determine the access level corresponding to the target permission authentication information according to the preset permission information verification rule;

[0064] In the case of dynamic permission of the target permission type, adjust the target permission authentication information according to the preset permission adjustment parameter, and determine the access level corresponding to the adjusted target permission authentication information according to the permission information verification rule.

[0065] Since the above steps have been described in detail, this will not be repeated here.

[0066] Further, the target user can send an audit request to the blockchain network through the target server, and the audit request includes: the transaction information range to be audited corresponding to the access level of the target user and the corresponding audit plan, and the hash value of each transaction information to be audited. The transaction information range is used to indicate the audit information to be audited; and the audit plan includes the audit time, the audit method, the audit matters needing attention, the resource to be audited, etc. After each block storage node in the blockchain network receives the audit request, it can first parse the hash value of the audit information to be audited in the audit request; match the hash value with the hash value stored in the transaction information database in the block storage node to locate the corresponding copy of the transaction information to be audited; compare the copy of the transaction information to be audited with the transaction information range and the corresponding audit plan included in the audit request, and all target block storage nodes to be audited to perform checking, and after determining that the copy of the transaction information to be audited is complete, perform the audit operation on the copy of the transaction information to be audited.

[0067] Since the transaction information at least includes: transaction amount, transaction time, and account information of both parties of the transaction, and the audit request further includes: the hash value of each transaction information. Therefore, when the verification center audits each transaction information, it can be implemented according to the following method, including:

[0068] Step S1061: Perform accuracy checks on the transaction amount, transaction time, and account information of both parties to the transaction in the transaction information to obtain a first accuracy score for the transaction amount, a second accuracy score for the transaction time, and a third accuracy score for the account information of both parties to the transaction. The first, second, and third accuracy scores are then added together to obtain an accuracy score for the transaction information.

[0069] Specifically, the steps for verifying the accuracy of the transaction amount, transaction time, and account information of both parties in the transaction information can be as follows:

[0070] The transaction amount comparison result M1 is scored based on the percentage difference in the transaction amounts. For example, if the difference in transaction amounts is within plus or minus 1%, M1 receives full marks. If the difference is between plus or minus 1% and plus or minus 5%, the corresponding points are deducted based on the specific percentage difference. If the difference exceeds plus or minus 5%, M1 receives zero marks.

[0071] For the comparison result T1 of the transaction time, a score is given according to the deviation of the transaction time. If the deviation of the transaction time is within 1 minute, T1 gets full marks; if the deviation is between 1 minute and 5 minutes, the corresponding score is deducted according to the specific time of the deviation; if the deviation exceeds 5 minutes, T1 gets zero points.

[0072] For the comparison result S1 of the account information of the two parties to the transaction, we will score based on whether the account information of the two parties to the transaction is completely consistent. If the account information is completely consistent, S1 will get full marks; if there are any differences, such as inconsistencies in account name, account number or account type, S1 will get zero points.

[0073] Therefore, by combining the above three comparison results M1, T1, and S1, we can get the accuracy score of the transaction information, which is specifically expressed as follows: Z1=M1+T1+S1.

[0074] Step S1062, obtain the hash value of the copy of the transaction information on the blockchain network, and determine whether the hash value of the transaction information is consistent with the hash value of the copy; when the hash value of the transaction information is consistent with the hash value of the copy, determine that the integrity score of the transaction information is full marks; when the hash value of the transaction information is inconsistent with the hash value of the copy, determine that the integrity score of the transaction information is zero.

[0075] In other words, the integrity check verifies the consistency of the hash value of the copy of the transaction information on the blockchain network with the hash value of the transaction information in the audit request, where the blockchain network includes: multiple block storage nodes, and each block storage node is used to store at least one copy of the transaction information. If the consistency check passes, the integrity score W1 is recorded as full marks (such as 10 points, 100 points, etc.); if the consistency check fails, the integrity score W1 is recorded as zero points, thereby ensuring that the transaction information has not been tampered with or lost during transmission.

[0076] Furthermore, after completing the integrity verification and accuracy verification of each transaction information through steps S1061-S1062, the verification center may also determine the audit results of each transaction information based on the accuracy score and completeness score, including:

[0077] Step S1063, determining the magnitude relationship between the accuracy score and a preset accuracy threshold, and the magnitude relationship between the completeness score and a preset completeness threshold, respectively, to obtain corresponding first and second comparison results;

[0078] Step S1064: If the first comparison result shows that the completeness score is not less than the completeness threshold, and the second comparison result shows that the accuracy score is not less than the accuracy threshold, the audit result corresponding to the transaction information is determined to be audit passed.

[0079] Step S1065: If the first comparison result is that the completeness score is lower than the accuracy threshold, and / or the second comparison result is that the accuracy score is lower than the completeness threshold, it is determined that the audit result corresponding to the transaction information is audit failure.

[0080] That is to say, Z1 is compared with the preset accuracy threshold Z0, and W1 is compared with the preset completeness threshold W0; if Z1 ≥ Z0 and W1 ≥ W0, the transaction information can be determined to be accurate and complete. At this time, the blockchain network will send a confirmation message of the audit passing to the user end and allow the user to perform the corresponding transaction operation; if Z1 <Z0和 / 或W1<W0,则判定交易信息不准确和 / 或不完整,系统将会拒绝用户进行相应的交易操作。

[0081] During the above-mentioned audit process, the verification center formulated detailed verification rules for transaction amount, time, and information of both parties, which improved the scientific nature of accuracy judgment.

[0082] After the verification center determines that the audit result corresponding to the transaction information is audit-passed, in order to accurately identify and optimize the security risks that may exist in the blockchain network, it can also implement the following measures:

[0083] Step 1: Perform a weighted summation of the accuracy score and the corresponding first weight coefficient, and the completeness score and the corresponding second weight coefficient to obtain the security score of the transaction information. The specific parameter settings for the first weight coefficient corresponding to the accuracy score and the second weight coefficient corresponding to the completeness score can be customized based on the actual application scenario. In this embodiment, the preferred settings are 0.5 and 0.5.

[0084] Step 2: Match the first comparison result, the second comparison result and the security score with the preset security risk impact rules to determine the target impact items that caused the transaction information to fail the audit.

[0085] Among them, the above-mentioned security risk impact rules include: the first comparison result, the second comparison result, the correspondence between the security score and the impact matters, and the impact matters include but are not limited to: smart contract leakage, transaction anomalies, information recording errors, etc.

[0086] Step 3: Determine the audit and rectification strategy of the blockchain network based on the target impact items.

[0087] Specifically, the verification center can first determine the audit issues based on the above-determined influencing items and the error parameters corresponding to the influencing items (such as the specific data where the influencing items occurred). For example, if the influencing item is the above-mentioned data leakage, the error parameters correspond to the specific block storage node where the data leakage occurred, the time, the degree of leakage, etc. Audit issues include at least one of financial management issues, internal control deficiencies, compliance issues, and operational efficiency issues. Then, the verification center determines the audit rectification strategy corresponding to each audit issue from the preset rectification strategy table, as follows:

[0088] When the audit issue is a financial management issue, financial management recommendations can be generated, including establishing an accounts receivable tracking system and / or implementing a regular collection mechanism. Establishing an accounts receivable tracking system indicates the introduction or optimization of an existing CRM (Customer Relationship Management) system to ensure that every transaction is tracked, including key information such as payment dates and days overdue. Implementing a regular collection mechanism indicates the development of an accounts receivable collection process, with different collection strategies based on the number of days overdue, such as email reminders, follow-up calls, and legal action.

[0089] When an audit issue is an internal control deficiency, recommendations for strengthening approval processes and / or addressing internal control deficiencies in the supplier management system can be generated. Strengthening approval processes instructs the establishment of a rigorous supplier selection and payment approval process, requiring all purchase orders and payments to undergo multi-level review to ensure regulatory compliance. The supplier management system, on the other hand, mandates the use of an electronic supplier management system that records supplier qualifications, historical transaction records, and other information for easier review and monitoring.

[0090] When the audit issue is a compliance issue, compliance recommendations can be generated, including developing data protection policies, increasing technical protection, and / or conducting compliance audits and monitoring. The "development of data protection policies" section indicates the development of detailed policies for data collection, storage, processing, and transmission; the "strengthening of technical protection" section indicates upgrading data encryption technology and implementing access controls to ensure only authorized personnel can access sensitive data; and the "compliance audits and monitoring" section indicates regular data protection compliance audits and the establishment of monitoring mechanisms to promptly detect and correct violations.

[0091] When the audit question is about operational efficiency, operational efficiency recommendations can be generated for optimizing inventory management and / or supplier collaboration and / or sales promotion strategies. Optimizing inventory management refers to adopting advanced inventory management systems, implementing accurate forecasting and demand planning, and reducing inventory overstocks. Supplier collaboration refers to establishing closer partnerships with suppliers and adopting models like JIT (Just In Time) to reduce inventory holding costs. Sales promotion strategies refer to accelerating inventory turnover through promotional activities and bundling, while also analyzing the causes of slow sales and adjusting product lines.

[0092] In addition, after implementing the above-mentioned audit rectification strategy, the blockchain network can track the corresponding rectification status of each audit unit according to the preset tracking cycle, and review the blockchain network regularly according to business needs and security needs to ensure that each audit unit can take effective audit rectification measures in a timely manner and that the security risks in the blockchain network can be dealt with in a timely manner.

[0093] Finally, the verification center can also manage the target user's access rights on the blockchain network based on the audit results of each transaction information in the audit request, including:

[0094] Determine the number of transaction information within the audit request that failed the audit due to information record anomalies, and determine the difference between the number and the preset threshold value;

[0095] If the difference is greater than a preset threshold, the target user’s access rights on the blockchain network will be narrowed;

[0096] When the difference is no greater than a preset threshold, the scope of access rights of the target user on the blockchain network is expanded.

[0097] In other words, when a target impact event indicates a problem with transaction information (such as a leak or tampering), the verification center can record the error and send an alert to the user to inform them of the issue. Furthermore, the frequency of the alerts can be collected to adjust the user's access rights accordingly, ensuring the security of transaction information during the audit process.

[0098] Specifically, let's assume the user's alarm frequency (i.e., the number of transactions that failed audit due to information recording errors) is P1, and the preset alarm frequency (i.e., the preset threshold) is P2. First, calculate the difference between P1 and P2. When the difference is greater than the preset threshold, the user's access level is lowered, thereby reducing the scope of the target user's access rights on the blockchain network. When the difference is greater than the preset threshold, the user's access level is increased, thereby expanding the scope of the target user's access rights on the blockchain network.

[0099] The preset alarm frequency P2 can be set by collecting the target user's alarm data over multiple historical periods and calculating the average alarm frequency over the entire period as the initial value of P2; determining the difference between the user's alarm frequency in the current period and the average alarm frequency over multiple historical periods; if the user's alarm frequency in the current period is greater than the average alarm frequency over multiple historical periods, the initial value of the preset alarm frequency P2 can be increased; if the user's alarm frequency in the current period is less than or equal to the average alarm frequency over multiple historical periods, the initial value of the preset alarm frequency P2 can be maintained unchanged. In addition, the preset threshold is preferably set to 1 / 5 of the preset alarm frequency P2.

[0100] By the above blockchain-based transaction information management method, the security and reliability of transaction information auditing can be significantly improved. First, the verification and permission management of user information can effectively prevent unauthorized users from accessing and operating the block storage, while also enabling precise matching of permission ranges for users with different access levels, reducing the risk of malicious attacks or misoperation on the blockchain network. Second, by comparing the hash values and pre-set rules to check the integrity and accuracy of the transaction information, errors or tampering in the transaction information can be detected and corrected in a timely manner, ensuring the integrity and accuracy of the transaction information. Third, dynamically adjusting the user permission range based on the audit results of the transaction information within the access permission range allows the blockchain network to adjust permissions in real time based on user behavior and system security conditions, ensuring the security of the audit information. Finally, for the issues and corresponding error information that exist during the audit process, the audit rectification strategy can be intelligently generated to adapt to the audit and post-audit tracking, greatly improving the efficiency and accuracy of handling audit errors and further improving the overall audit security, practicality and reliability of the blockchain network.

[0101] Embodiment 2

[0102] According to the embodiments of the present application, a blockchain-based transaction information management device for implementing the blockchain-based transaction information management method in Embodiment 1 is also provided, as shown in Figure 3 The blockchain-based transaction information management device at least includes a verification module 32, a receiving module 34, an audit module 36, and a management module 38, wherein:

[0103] The verification module 32 is configured to receive a verification code generated by a target server for a target user and verify the verification code, wherein the verification code at least includes target identity information of the target user.

[0104] The receiving module 34 is configured to, in the case that the verification code passes the verification, determine an access level of the target user on the blockchain network according to the target identity, and receive an audit request for auditing a plurality of transaction information initiated by the target user through the target server according to the access level, wherein each copy of the plurality of transaction information is in a block storage node within an access permission range corresponding to the access level.

[0105] The audit module 36 is configured to, for each transaction information in the audit request, perform integrity checking and accuracy checking on the transaction information respectively, obtain an accuracy score and an integrity score, and determine an audit result of the transaction information according to the accuracy score and the integrity score.

[0106] The management module 38 is configured to manage the access permission range of the target user on the blockchain network according to the audit results of each transaction information in the audit request.

[0107] It should be noted that the modules in the blockchain-based transaction information management device in the embodiment of the present application correspond one-to-one to the implementation steps of the blockchain-based transaction information management method in Example 1. Since a detailed description has been given in Example 1, some details not reflected in this embodiment can be referred to Example 1 and will not be repeated here.

[0108] Example 3

[0109] According to an embodiment of the present application, a computer program product is also provided, which includes a computer program, wherein when the computer program is executed by a processor, it implements the blockchain-based transaction information management method in Example 1.

[0110] According to an embodiment of the present application, a non-volatile storage medium is also provided, which includes a stored computer program, wherein the device where the non-volatile storage medium is located executes the blockchain-based transaction information management method in Example 1 by running the computer program.

[0111] According to an embodiment of the present application, a processor is also provided, which is used to run a computer program, wherein the blockchain-based transaction information management method in Example 1 is executed when the computer program is running.

[0112] According to an embodiment of the present application, an electronic device is also provided, which includes: a memory and a processor, wherein a computer program is stored in the memory, and the processor is configured to execute the blockchain-based transaction information management method in Example 1 through the computer program.

[0113] Specifically, the computer program executes the following steps when it is running: receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code includes at least: the target identity information of the target user; if the verification code passes the verification, determining the access level of the target user on the blockchain network based on the target identity, and receiving an audit request for auditing multiple transaction information initiated by the target user through the target server based on the access level, wherein copies of the multiple transaction information are all in the block storage node within the access permission range; for each transaction information in the audit request, performing integrity check and accuracy check on the transaction information respectively to obtain corresponding accuracy scores and completeness scores, and determining the audit results of the transaction information based on the accuracy scores and completeness scores; managing the access permission range of the target user on the blockchain network based on the audit results of each transaction information in the audit request.

[0114] As an optional implementation, the electronic device may be in the form of a mobile terminal, a computer terminal or a similar computing device. Figure 4 The following is a hardware structure diagram of an electronic device for implementing a transaction information management method based on blockchain. Figure 4 As shown, the electronic device 40 may include one or more (402a, 402b, ..., 402n are shown in the figure) processors 402 (the processor 402 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA), a memory 404 for storing data, and a transmission device 406 for communication functions. In addition, it may also include: a display, an input / output interface (I / O interface), a universal serial bus (USB) port (which may be included as one of the ports of the BUS bus), a network interface, a power supply and / or a camera. It will be understood by those skilled in the art that Figure 4 The structure shown is only for illustration and does not limit the structure of the above electronic device. Figure 4 More or fewer components than shown, or with Figure 4 Different configurations shown.

[0115] It should be noted that the one or more processors 402 and / or other data processing circuits described above may generally be referred to herein as "data processing circuitry." The data processing circuitry may be embodied in whole or in part as software, hardware, firmware, or any other combination thereof. In addition, the data processing circuitry may be a single, independent processing module, or may be incorporated in whole or in part into any of the other components of the electronic device 40. As described in the embodiments of the present application, the data processing circuitry serves as a processor control (e.g., selection of a variable resistor terminal path connected to an interface).

[0116] Memory 404 can be used to store software programs and modules for application software, such as the program instructions / data storage device corresponding to the blockchain-based transaction information management method in the embodiments of the present application. Processor 402 executes the software programs and modules stored in memory 404 to perform various functional applications and data processing, thereby implementing the aforementioned application vulnerability detection method. Memory 404 may include high-speed random access memory (RAM) and may also include non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, memory 404 may further include memory remotely located from processor 402, and such remote memory may be connected to electronic device 40 via a network. Examples of such networks include, but are not limited to, the Internet, corporate intranets, local area networks, mobile communication networks, and combinations thereof.

[0117] Transmission device 406 is used to receive or send data via a network. Specific examples of the aforementioned network may include a wireless network provided by the communications provider of electronic device 40. In one embodiment, transmission device 406 includes a network interface controller (NIC), which can be connected to other network devices via a base station to enable communication with the Internet. In another embodiment, transmission device 406 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0118] The display may be, for example, a touch screen liquid crystal display (LCD) that enables a user to interact with a user interface of the electronic device 40 .

[0119] The serial numbers of the above embodiments are for description only and do not represent the advantages or disadvantages of the embodiments.

[0120] In the above embodiments of the present application, the description of each embodiment has its own focus. For parts that are not described in detail in a certain embodiment, please refer to the relevant description of other embodiments.

[0121] In the several embodiments provided in this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are only exemplary. For example, the division of units can be a logical function division. In actual implementation, there may be other division methods, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of units or modules, which can be electrical or other forms.

[0122] Units described as separate components may or may not be physically separate, and components shown as units may or may not be physical units, that is, they may be located in one place or distributed across multiple units. Some or all of the units may be selected to achieve the purpose of the present embodiment according to actual needs.

[0123] In addition, the functional units in the various embodiments of the present application may be integrated into a single processing unit, or each unit may exist physically separately, or two or more units may be integrated into a single unit. The aforementioned integrated units may be implemented in the form of hardware or software functional units.

[0124] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for enabling a computer device (which can be a personal computer, server or network device, etc.) to execute all or part of the steps of the various embodiments of the present application. The aforementioned storage medium includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk and other media that can store program code.

[0125] The above is only a preferred embodiment of the present application. It should be pointed out that for ordinary technicians in this technical field, several improvements and modifications can be made without departing from the principles of the present application. These improvements and modifications should also be regarded as the scope of protection of the present application.

Claims

1. A transaction information management method based on blockchain, characterized in that: include: receiving a verification code generated by a target server for a target user, and verifying the verification code, wherein the verification code includes at least: target identity information of the target user; If the verification code passes verification, determining the target user's access level on the blockchain network based on the target identity identifier, and receiving an audit request for auditing multiple transaction information initiated by the target user through the target server based on the access level, wherein copies of each of the multiple transaction information are all in a block storage node within the access permission range corresponding to the access level; For each transaction information in the audit request, perform integrity check and accuracy check on the transaction information respectively to obtain corresponding accuracy scores and integrity scores, and determine the audit result of the transaction information based on the accuracy scores and the integrity scores; The scope of access rights of the target user on the blockchain network is managed based on the audit results of each transaction information in the audit request.

2. The method according to claim 1, characterized in that The target server is configured to receive an identity authentication request initiated by a target user, wherein the identity authentication request carries at least first identity identification information, second identity identification information, and third identity identification information of the target user; sequentially matching the first identity identification information, second identity identification information, and third identity identification information in the identity authentication request with a preset identity information database to obtain corresponding first matching results, second matching results, and third matching results; if the first matching result, the second matching result, and the third matching result are all matched successfully, determining that the target user has passed the identity authentication and sending the verification code; Among them, the first identity identification information includes at least one of the following: name, ID number, current login address, last login address; the second identity identification information includes at least one of the following: facial features, fingerprint features, voiceprint features; the third identity identification information includes at least one of the following: digital password, graphic password, question-and-answer password; the identity information database includes at least: the identity identification information of multiple users who have passed identity authentication, and the identity authentication results include: the target user passed the identity authentication, and the target user failed the identity authentication.

3. The method according to claim 1, characterized in that The verification code also includes: a preset timestamp and a random encrypted number obtained by encrypting a random number using an encryption algorithm corresponding to the access level of the target user, wherein verifying the verification code includes: Determining the access level of the target user based on the target user identity information, and determining a decryption algorithm corresponding to the access level; Decrypting the random encrypted number in the verification code using the decryption algorithm to obtain a corresponding decryption result; Determine whether the decryption result is the same as the random number and whether the preset timestamp is within a preset validity period; If the decryption result is the same as the random number and the preset timestamp is within the preset validity period, determining that the verification code passes the verification; If the decryption result is different from the random number and / or the preset timestamp is not within the preset validity period, it is determined that the verification code has failed verification.

4. The method according to claim 3, characterized in that Determining the access level of the target user based on the target identity information includes: Matching the target identity identification information with a preset identity information database to obtain the target permission authentication information and target permission type of the target user, wherein the identity information database also includes: the permission authentication information and permission type of each of multiple users who have passed identity authentication, and the permission type includes: static permission or dynamic permission; In the case where the target permission type is a static permission, determining the access level corresponding to the target permission authentication information according to a preset permission information verification rule, wherein the permission information verification rule includes: a correspondence between different permission authentication information and different access levels; In the case where the target permission type is dynamic permission, the target permission authentication information is adjusted according to preset permission adjustment parameters, and the access level corresponding to the adjusted target permission authentication information is determined according to the permission information verification rules, wherein the permission adjustment parameters include at least one of the following: business rules, monitoring matters, and policy modes.

5. The method according to claim 1, wherein The transaction information includes at least: transaction amount, transaction time, account information of both parties to the transaction, and hash value. The transaction information is subjected to integrity check and accuracy check respectively to obtain corresponding accuracy score and completeness score, including: performing accuracy checks on the transaction amount, transaction time, and account information of both parties to the transaction in the transaction information, respectively, to obtain a first accuracy score for the transaction amount, a second accuracy score for the transaction time, and a third accuracy score for the account information of both parties to the transaction; and summing the first accuracy score, the second accuracy score, and the third accuracy score to obtain an accuracy score for the transaction information; Obtain a hash value of the copy of the transaction information on the blockchain network, and determine whether the hash value of the transaction information is consistent with the hash value of the copy; if the hash value of the transaction information is consistent with the hash value of the copy, determine that the integrity score of the transaction information is full marks; if the hash value of the transaction information is inconsistent with the hash value of the copy, determine that the integrity score of the transaction information is zero, wherein the blockchain network includes: multiple block storage nodes, and each block storage node is used to store at least one copy of the transaction information.

6. The method according to claim 1, characterized in that Determining an audit result of the transaction information based on the accuracy score and the completeness score includes: Respectively determining a magnitude relationship between the accuracy score and a preset accuracy threshold, and a magnitude relationship between the completeness score and a preset completeness threshold, to obtain corresponding first comparison results and second comparison results; If the first comparison result is that the completeness score is not less than the completeness threshold, and the second comparison result is that the accuracy score is not less than the accuracy threshold, determining that the audit result corresponding to the transaction information is audit passed; When the first comparison result is that the completeness score is lower than the accuracy threshold, and / or the second comparison result is that the accuracy score is lower than the completeness threshold, it is determined that the audit result corresponding to the transaction information is audit failure.

7. The method according to claim 6, characterized in that After determining that the audit result of the transaction information is audit failure, the method further includes: Performing a weighted summation of the accuracy score and the corresponding first weight coefficient, and the completeness score and the corresponding second weight coefficient to obtain a security score for the transaction information; Matching the first comparison result, the second comparison result, and the security score with preset security risk impact rules to determine the target impact item that caused the transaction information to fail the audit, wherein the security risk impact rule includes: a correspondence between the first comparison result, the second comparison result, the security score, and the impact item, and the impact item includes at least one of the following: smart contract leakage, transaction anomaly, and information recording error; Determine the audit rectification strategy of the blockchain network based on the target impact matters.

8. The method according to claim 7, characterized in that Managing the scope of access rights of the target user on the blockchain network based on the audit results of each transaction information in the audit request, including: Determining the number of transaction information in the audit request that failed the audit due to information recording errors, and determining the difference between the number and a preset threshold value; If the difference is greater than a preset threshold, narrowing the scope of the target user's access rights on the blockchain network; When the difference is not greater than a preset threshold, the scope of access rights of the target user on the blockchain network is expanded.

9. A transaction information management device based on blockchain, characterized in that: include: A verification module, configured to receive a verification code generated by a target server for a target user and verify the verification code, wherein the verification code includes at least: target identity information of the target user; a receiving module, configured to determine, if the verification code passes verification, the target user's access level on the blockchain network based on the target identity identifier, and receive, based on the access level, an audit request initiated by the target user through the target server for auditing multiple transaction information, wherein copies of each of the multiple transaction information are located in a block storage node within the access permission range corresponding to the access level; an audit module, configured to perform integrity verification and accuracy verification on each transaction information in the audit request, obtain corresponding accuracy scores and integrity scores, and determine an audit result of the transaction information based on the accuracy scores and the integrity scores; A management module is used to manage the scope of access rights of the target user on the blockchain network based on the audit results of each transaction information in the audit request.

10. A computer program product, characterized in that include: A computer program, wherein when the computer program is executed by a processor, it implements the blockchain-based transaction information management method described in any one of claims 1 to 8.

Images