Multi-authentication electronic official certificate verification method and system based on block chain

Abstract

The invention provides a multi-authentication electronic official certificate verification method and system based on a block chain, and relates to the technical field of block chains, and the method comprises the steps: receiving an electronic official certificate uploading request, carrying out encryption processing to generate a secret key, carrying out the block encryption of an official certificate file to obtain an electronic ciphertext, carrying out the authentication of a creator identity to obtain an elliptic curve digital signature, and carrying out the verification of the elliptic curve digital signature. Writing in a new block, and calculating a block hash value; the target block is inquired, and if matching succeeds, the first verification information is extracted and verified, and a comprehensive verification result is generated; and carrying out consensus verification, modifying the block outlet time by dynamically adjusting the block difficulty value and verifying, if the block outlet time is true and effective, generating a verification result ciphertext and feeding back the verification result ciphertext to the request main body, and if objection exists, sending an objection application and carrying out objection rechecking, generating an arbitration result and writing the arbitration result into the new block.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a blockchain-based multi-authentication electronic notarial certificate verification method and system. Background Art

[0002] With the rapid development of the Internet and e-commerce, electronic notarization, as a digital extension of traditional notarization services, has been widely used in the fields of electronic contracts, intellectual property protection, online arbitration, etc. However, the existing electronic notarization system still has many security risks.

[0003] The existing electronic notarization system has problems such as low verification efficiency, poor real-time performance, and lack of credibility in the verification process of electronic notarization certificates;

[0004] Therefore, a solution is urgently needed to solve the problems existing in the prior art. Summary of the invention

[0005] The embodiments of the present invention provide a blockchain-based multi-authentication electronic notarial certificate verification method and system, which can at least solve some of the problems existing in the prior art.

[0006] A first aspect of an embodiment of the present invention provides a blockchain-based multi-authentication electronic notarial certificate verification method, comprising:

[0007] Receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the cipher block chaining mode, encrypt the notarial certificate file in groups to obtain an encrypted electronic ciphertext, authenticate and sign the creator of the electronic notarial certificate based on the elliptic curve public key cryptography algorithm to obtain an elliptic curve digital signature, write the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature into a new block, and calculate a block hash value of the new block in combination with the cryptographic hash algorithm;

[0008] Receive an electronic notarial certificate verification request, query a target block that matches the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract first verification information related to the electronic notarial certificate to be verified and timestamp information, random number information, and block hash value information corresponding to the target block from the block body of the target block, send the extracted information to a pre-selected verification party for verification, and generate a comprehensive verification result in combination with a pre-set verification rule;

[0009] The comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified are written into the new block, and the new block is verified by consensus based on the proof-of-work consensus mechanism. The block time is modified by dynamically adjusting the block difficulty value and the comprehensive verification result is verified. If the electronic notarial certificate to be verified is authentic and valid, it is encrypted through an asymmetric encryption algorithm, and a verification result ciphertext is generated and fed back to the requesting entity. If the requesting entity has any objection to the comprehensive verification result, an objection application is sent and the objection is reviewed through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and fed back to the requesting entity and the blockchain system at the same time.

[0010] In an optional embodiment,

[0011] Receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the French cipher block chaining mode, encrypt the notarial certificate file in groups, and obtain the encrypted electronic ciphertext including:

[0012] The requesting subject uploads the electronic notarial certificate and fills in the basic information of the notarial certificate, the identity information of the creator, and submits the notarial certificate file and the creator's public key certificate. The central processing system operates the upload request through input data legitimacy verification and parameter filtering, extracts the uploaded notarial certificate file, extracts the content of the notarial certificate file by type identification, and temporarily stores the extracted content in the form of a byte array. The central processing system extracts the creator's elliptic curve digital signature algorithm certificate from the upload request and performs certificate parsing, performs online validity query through the online certificate status protocol, and performs segment-by-segment hashing on the electronic content temporarily stored in the form of a byte array, calculates the national secret hash algorithm security hash value, and obtains 256-bit digital fingerprint information;

[0013] The central processing system extracts the unique identity identifier corresponding to the creator from the creator certificate and obtains the central processing unit serial number as the unique hardware information from the server hardware environment, combines them to obtain a seed key, generates a 128-bit session key through the master key of the national secret block cipher algorithm and the seed key, combined with a password-based key derivation function, uses the 128-bit session key as the input key of the Zu Chongzhi sequence cipher algorithm, generates a random number and uses it as an initialization vector, and iteratively encrypts the electronic plaintext by calling the processing grouping method, performs standard padding at the beginning of each group, and performs padding alignment at the end where the group length is less than 128 bits. After all plaintext groups are encrypted, the encrypted electronic ciphertext is obtained.

[0014] In an optional embodiment,

[0015] The 128-bit session key is used as the input key of Zu Chongzhi's sequence cipher algorithm, a random number is generated and used as an initialization vector, and the electronic plaintext is encrypted in groups by calling the processing grouping method as shown in the following formula:

[0016]

[0017] Among them, C i represents the i-th ciphertext block, AES256() represents encryption using the AES256 algorithm, Indicates the key used by the AES256 encryption algorithm. SM4() indicates encryption using the SM4 algorithm. represents the key used by the SM4 algorithm, R(i) represents the random perturbation term, Represents a bitwise XOR operation, C i-1 represents the i-1th ciphertext block, P i represents the i-th plaintext block, the value range of i is an integer greater than 1. When i is 1, C i-1 The value of is the initial vector IV.

[0018] In an optional embodiment,

[0019] The creator identity of the electronic notarial certificate is authenticated and signed based on the elliptic curve public key cryptographic algorithm to obtain an elliptic curve digital signature, the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature are written into a new block, and the block hash value of the new block is calculated in combination with a cryptographic hash algorithm, including:

[0020] The central processing system generates a curve key pair based on the elliptic curve public key cryptography algorithm and sends the public key in the curve key pair to the creator, encrypts it through a password-based key derivation function and stores it persistently. The creator encrypts the system random number based on the private key to obtain the curve ciphertext and sends it to the central processing system through a secure channel. The central processing system verifies the signature through the public key, the original random number and the digital fingerprint information. If the signature verification passes, the identity of the creator is confirmed and the elliptic curve digital signature is obtained.

[0021] The central processing system interacts with the underlying blockchain platform through a software development kit, constructs the digital fingerprint information, the electronic ciphertext and the elliptic curve digital signature into a blockchain transaction, organizes the generated block data through a Merkle tree structure, stores the root hash corresponding to the Merkle tree in the block header and adopts an authorization proof mechanism through a consensus algorithm, takes turns to generate blocks according to pre-selected trusted verification nodes and verifies the validity of the blocks through a multi-signature algorithm. If the verification is successful, the block data is written into the current block and the block hash value of the current block is calculated according to the cryptographic hash algorithm.

[0022] In an optional embodiment,

[0023] Receive an electronic notarial certificate verification request, query a target block that matches the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract the first verification information related to the electronic notarial certificate to be verified and the timestamp information, random number information and block hash value information corresponding to the target block in the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule, including:

[0024] The central processing system receives the electronic notarial certificate verification request from the requester and extracts the request parameters, wherein the request parameters include the unique identification code of the electronic notarial certificate to be verified and the identity information of the requester, parses the digital fingerprint information from the electronic notarial certificate to be verified through the document processing library, performs integrity verification on the parsed digital fingerprint information, and if the integrity verification passes, the electronic notarial certificate is put on the chain through the chain code according to the pre-set blockchain network;

[0025] For the electronic notarial certificate uploaded to the chain, the digital fingerprint information is used as a key to perform a matching query in a pre-set blockchain status database. If there is a target block that matches the digital fingerprint information, the block body data structure is parsed and the first verification information related to the electronic notarial certificate to be verified is extracted, wherein the first verification information includes the notarial certificate metadata, notarization time, notarial agency and notary;

[0026] A trusted third-party platform is used as an intermediary, a verification party is selected and a verification cooperation relationship is established, a data exchange format and a secure communication protocol are set, and the first verification information and the timestamp information, random number information and block hash value information corresponding to the target block are packaged according to the secure communication protocol according to a universal data serialization format, encrypted by digital envelope technology, and sent to multiple verification parties using a secure channel. The verification parties verify and check the encrypted information according to pre-set verification rules and verification processes, wherein the verification includes identity authentication, digital signature verification and timestamp verification, and the verification process includes ownership verification, source verification and hash value verification, and the verification result of the current verification party is generated. The verification result of each verification party is integrated and combined with the verification time and the digital signature of the verification agency to generate a verification receipt, which is encrypted by the public key of the trusted third-party platform and fed back to the trusted third-party platform using a secure channel, and the verification receipt is decrypted and statistically analyzed to obtain the comprehensive verification result.

[0027] In an optional embodiment,

[0028] The comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified are written into the new block, the new block is verified by consensus based on the proof-of-work consensus mechanism, the block time is modified by dynamically adjusting the block difficulty value and the comprehensive verification result is verified, if the electronic notarial certificate to be verified is authentic and valid, it is encrypted by an asymmetric encryption algorithm, a verification result ciphertext is generated and fed back to the requesting subject, if the requesting subject has an objection to the comprehensive verification result, an objection application is sent and the objection review is conducted through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and the feedback is simultaneously provided to the requesting subject and the blockchain system, including:

[0029] Collect verification receipts and extract verification results of the comprehensive verification results, perform hash operations on the comprehensive verification results and the digital fingerprint information of the electronic notarial certificate to be verified according to the Merkle tree structure, generate a root hash and construct a block header, connect the root hash with the block header to form a complete block and append the complete block to the new block;

[0030] For the new block after the complete block is appended, based on the constraint that the legal block hash needs to satisfy the number of leading zero bits, the block difficulty target is set in combination with the proof-of-work consensus mechanism, the actual block time and the expected block time of each difficulty cycle and the corresponding difficulty adjustment factor are determined, the block difficulty target is updated based on the difficulty adjustment factor, the block hash value is calculated from 0 repeatedly and combined with the pre-added miner node, and it is determined whether the block hash value is less than the block difficulty target. If not, the calculation continues until the block hash value is less than the block difficulty target, and the current block is legal and broadcast to the network to complete the consensus verification;

[0031] If the consensus verification indicates that the electronic notarial certificate to be verified is authentic and valid, the requesting entity generates a public-private key pair of the requesting entity, encrypts the consensus verification result based on the public-private key pair of the requesting entity in combination with an asymmetric encryption algorithm, generates a verification result ciphertext and feeds it back to the requesting entity; if the requesting entity has an objection to the comprehensive verification result, it sends an objection application and selects an arbitration participant according to a pre-set arbitration smart contract; the arbitration participant reviews the objection application according to the objection handling process and the pre-set arbitration result generation rules to obtain an arbitration result;

[0032] The arbitration result is fed back to the requesting entity and written into the new block, and the new block body with the arbitration result added is submitted to the blockchain network.

[0033] In an optional embodiment,

[0034] The block difficulty target is updated based on the difficulty adjustment factor as shown in the following formula:

[0035]

[0036] Among them, Tt (i+1) represents the block difficulty target of the i+1th period, α represents the smoothing factor, Tt i represents the block difficulty target of the i-th cycle, T0 represents the expected block time, It represents the average block time of the last N blocks, and △ represents the difficulty adjustment factor, which is used to limit the difficulty adjustment range.

[0037] A second aspect of an embodiment of the present invention provides a blockchain-based multi-authentication electronic notarial certificate verification system, comprising:

[0038] The first unit is used to receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the cipher block linking mode, encrypt the notarial certificate file in groups to obtain an encrypted electronic ciphertext, authenticate and sign the creator of the electronic notarial certificate based on the elliptic curve public key cryptography algorithm to obtain an elliptic curve digital signature, write the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature into a new block, and calculate a block hash value of the new block in combination with the cryptographic hash algorithm;

[0039] The second unit is used to receive a request for verification of an electronic notarial certificate, query a target block matching the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract first verification information related to the electronic notarial certificate to be verified and timestamp information, random number information, and block hash value information corresponding to the target block from the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule;

[0040] The third unit is used to write the comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified into the new block, perform consensus verification on the new block based on the proof-of-work consensus mechanism, modify the block time by dynamically adjusting the block difficulty value and verify the comprehensive verification result. If the electronic notarial certificate to be verified is authentic and valid, it is encrypted through an asymmetric encryption algorithm, and a verification result ciphertext is generated and fed back to the requesting entity. If the requesting entity has an objection to the comprehensive verification result, an objection application is sent and the objection is reviewed through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and fed back to the requesting entity and the blockchain system at the same time.

[0041] According to a third aspect of the embodiments of the present invention,

[0042] An electronic device is provided, comprising:

[0043] processor;

[0044] a memory for storing processor-executable instructions;

[0045] The processor is configured to call the instructions stored in the memory to execute the aforementioned method.

[0046] According to a fourth aspect of the embodiments of the present invention,

[0047] A computer-readable storage medium is provided, on which computer program instructions are stored. When the computer program instructions are executed by a processor, the aforementioned method is implemented.

[0048] In the present invention, the encrypted electronic ciphertext, digital fingerprint and digital signature are stored on the chain, and the tamper-proof property of the blockchain is utilized to ensure the integrity and tamper-proofness of the notarial certificate. A third-party verification agency is introduced to perform multi-party verification on the notarial certificate, and a comprehensive verification result is generated and uploaded to the chain in combination with the preset verification rules. The consensus verification of the verification result is achieved by utilizing the proof-of-work consensus mechanism, thereby ensuring the authority and credibility of the verification process and results, and providing traceable audit evidence for the verification of the notarial certificate. An arbitration smart contract is introduced to perform automated and fair arbitration on verification objections, resolve verification disputes, and safeguard the legitimate rights and interests of all participants. Through the improved consensus mechanism design, while ensuring the credibility of the verification of the notarial certificate on the chain, the transaction processing efficiency and scalability of the blockchain are improved. In summary, the present invention effectively solves the problems of difficult anti-counterfeiting of notarial certificates, unreliable verification, and inefficient processes in the traditional notarization model, and provides a new technical idea and innovative solution for the electronic notarization industry. BRIEF DESCRIPTION OF THE DRAWINGS

[0049] Figure 1 This is a flowchart of a method for verifying a multi-authentication electronic notarial certificate based on blockchain according to an embodiment of the present invention;

[0050] Figure 2 This is a schematic diagram of the structure of a multi-authentication electronic notarial certificate verification system based on blockchain according to an embodiment of the present invention. DETAILED DESCRIPTION

[0051] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0052] The technical solution of the present invention is described in detail with specific embodiments below. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments.

[0053] Figure 1 FIG. 1 is a flowchart of a method for verifying a multi-authentication electronic notarial certificate based on blockchain according to an embodiment of the present invention. Figure 1 As shown, the method includes:

[0054] S1. Receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the cipher block linking mode, encrypt the notarial certificate file in groups to obtain an encrypted electronic ciphertext, authenticate and sign the creator of the electronic notarial certificate based on the elliptic curve public key cryptography algorithm to obtain an elliptic curve digital signature, write the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature into a new block, and calculate a block hash value of the new block in combination with the cryptographic hash algorithm;

[0055] The electronic notarial certificate is a certificate issued by a notary public to verify the legitimacy of an electronic file, and usually contains information such as a signature and a timestamp to ensure the authenticity and validity of the file. The Zu Chongzhi sequence block cipher algorithm is a cryptographic algorithm based on the Zu Chongzhi sequence to generate keys, combined with symmetric encryption technology, and aims to improve data security. The cipher block chaining mode is a technology that connects multiple data blocks together in a specific way for encryption, which enhances the security and flexibility of encryption. The unique hardware information refers to a unique identifier used to identify a specific hardware device, such as a serial number or MAC address, which is usually used for security verification. The elliptic curve public key cryptography algorithm is a public key encryption scheme based on the mathematical principles of elliptic curves, which provides strong security and efficiency with a smaller key length. The elliptic curve digital signature is a digital signature generated using an elliptic curve algorithm to ensure the integrity of information and the identity of the sender. The cryptographic hash algorithm converts data input of any length into a hash value of a fixed length, which is often used for data integrity verification and secure storage.

[0056] In an optional embodiment,

[0057] Receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the French cipher block chaining mode, encrypt the notarial certificate file in groups, and obtain the encrypted electronic ciphertext including:

[0058] The requesting subject uploads the electronic notarial certificate and fills in the basic information of the notarial certificate, the identity information of the creator, and submits the notarial certificate file and the creator's public key certificate. The central processing system operates the upload request through input data legitimacy verification and parameter filtering, extracts the uploaded notarial certificate file, extracts the content of the notarial certificate file by type identification, and temporarily stores the extracted content in the form of a byte array. The central processing system extracts the creator's elliptic curve digital signature algorithm certificate from the upload request and performs certificate parsing, performs online validity query through the online certificate status protocol, and performs segment-by-segment hashing on the electronic content temporarily stored in the form of a byte array, calculates the national secret hash algorithm security hash value, and obtains 256-bit digital fingerprint information;

[0059] The central processing system extracts the unique identity identifier corresponding to the creator from the creator certificate and obtains the central processing unit serial number as the unique hardware information from the server hardware environment, combines them to obtain a seed key, generates a 128-bit session key through the master key of the national secret block cipher algorithm and the seed key, combined with a password-based key derivation function, uses the 128-bit session key as the input key of the Zu Chongzhi sequence cipher algorithm, generates a random number and uses it as an initialization vector, and iteratively encrypts the electronic plaintext by calling the processing grouping method, performs standard padding at the beginning of each group, and performs padding alignment at the end where the group length is less than 128 bits. After all plaintext groups are encrypted, the encrypted electronic ciphertext is obtained.

[0060] The basic information of the notarial certificate includes the notarial certificate number, creation date and validity period, etc., which are used to identify and manage the notarial certificate. The creator identity information records the detailed identity information of the notarial agency and its representative to ensure the legality of the notarization. The legality verification is to confirm the authenticity and validity of the notarial certificate through digital signatures and other means to prevent forgery. The parameter filtering is to check the validity of the parameters involved in the notarial certificate to ensure the accuracy and reliability of the data. The certificate parsing is to read and decode the content of the notarial certificate and extract the key information therein for subsequent use. The online certificate status protocol is a mechanism for real-time query and confirmation of the validity and status of the notarial certificate. The segmented hashing refers to segmenting the data during the encryption process. Process and calculate hash values ​​one by one to improve processing efficiency and security. The national secret hash algorithm secure hash value is a data summary generated using the national secret standard to ensure the integrity of information during transmission and storage. The seed key is the basic key used to generate other keys, providing an initial value for the encryption process to ensure the security of the key. The national secret block cipher algorithm master key is a symmetric encryption master key used under the national secret standard, responsible for data encryption and decryption. The password-based key derivation function is an algorithm for generating encryption keys from a password provided by a user, which enhances the security of key management. The standard padding is a technology used to ensure that the size of the encrypted data block meets the requirements of the encryption algorithm, thereby ensuring the effectiveness of the encryption process.

[0061] The requesting subject uploads the electronic notarial certificate file, fills in the basic information of the notarial certificate and the identity information of the creator, and submits the creator's public key certificate. After receiving the upload request, the central processing system verifies the legality of the input data and filters the parameters to ensure the integrity and security of the data, extracts the uploaded electronic notarial certificate file, identifies the file type, extracts the electronic content of the notarial certificate, and temporarily stores the extracted electronic content in the form of a byte array to facilitate subsequent hash calculation and encryption operations;

[0062] Extract the creator's Elliptic Curve Digital Signature Algorithm (ECDSA) certificate from the upload request, parse the certificate, perform online validity query on the creator's certificate through the Online Certificate Status Protocol (OCSP) to ensure the legitimacy and validity of the certificate, perform segment-by-segment hash operations on the temporarily stored electronic content byte array, and use the national secret SM3 cryptographic hash algorithm to calculate the secure hash value to obtain 256-bit digital fingerprint information;

[0063] Extract the creator's unique identity identifier from the creator's elliptic curve digital signature algorithm certificate, such as the certificate serial number or the subject key identifier, obtain the hardware environment information of the server where the current central processing system is located, extract the unique serial number of the central processing unit (CPU) as the hardware identifier, combine the creator's identity identifier and the hardware identifier into a seed key for subsequent session key generation, adopt the national secret SM4 block cipher algorithm, use the preset master key and seed key, and generate a 128-bit session key through a password-based key derivation function (PBKDF2), and use the generated 128-bit session key as Zu Chong The input key of the Zu Chongzhi (ZUC) sequence cipher algorithm is used to generate a random number sequence as an initialization vector, and the processing grouping method of the Zu Chongzhi algorithm is called to perform group iterative encryption on the electronic plaintext content. Before the start of each group encryption, the plaintext group is padded in a standard padding manner. When the length of the last plaintext group is less than 128 bits, it is padded and aligned to ensure that the group length is an integer multiple of 128 bits. After completing the encryption of all plaintext groups, the encrypted electronic ciphertext is output, and the encrypted electronic ciphertext is packaged together with metadata (such as digital fingerprints, creator information, etc.) to generate an encrypted electronic notarial certificate file;

[0064] For example, suppose the requesting subject uploads an electronic notarial certificate file "contract.pdf" in PDF format, the creator's elliptic curve digital signature algorithm certificate is "creator.cer", the requesting subject fills in the basic information of the notarial certificate (such as notarization date, notarial agency, etc.), and submits the creator's identity information (such as name, certificate number, etc.), the central processing system verifies the legitimacy of the uploaded data, extracts the "contract.pdf" file content, identifies it as a PDF type, parses the PDF content into a byte array [0x48, 0x65, 0x6C, 0x6C, 0x6F, ...] and Temporarily store, parse the "creator.cer" certificate, extract the subject information, query the certificate status through the online certificate status protocol, calculate the SM3 hash value of the byte array [0x48, 0x65, 0x6C, 0x6C, 0x6F, ...], and get the 256-bit digital fingerprint "A1B2C3D4...", extract the creator identity "CN=Alice, OU=Org, O=Example, C=CN" from "creator.cer", obtain the server CPU serial number "1A2B3C4D5E6F", and combine it with the identity to form the seed key "CN=Ali ce, OU=Org, O=Example, C=CN:1A2B3C4D5E6F", use the master key "key1234" and the seed key "CN=Alice, OU=Org, O=Example, C=CN:1A2B3C4D5E6F" to derive the 128-bit session key "E41F2D53C8AB6F..." through PBKDF2, input the session key "E41F2D53C8AB6F..." into Zu Chongzhi's algorithm, generate the random number "9A8B7C..." as the initial vector, and perform a random operation on the byte array [0x48, 0x65, 0x6 C, 0x6C, 0x6F, ...], each group is 128 bits, the last group is less than 128 bits, the last group is padded to [..., 0x80, 0x00, 0x00, ...], encrypted to [0x1F, 0x2A, 0x3B, ...], output the encrypted electronic ciphertext [0xA5, 0xB6, 0xC7, ..., 0x1F, 0x2A, 0x3B, ...], package the electronic ciphertext with digital fingerprint "A1B2C3D4..." and other metadata, and generate the encrypted electronic notarial certificate file "encrypted_contract.bin".

[0065] In this embodiment, by performing hash calculation on the content of the electronic notarial certificate to obtain unique digital fingerprint information, the integrity of the content of the notarial certificate can be ensured. Through certificate parsing and online validity query, the authenticity of the creator's identity and the legitimacy of the certificate can be confirmed to prevent forgery or impersonation of others to issue notarial certificates. Each group is encrypted independently and does not affect each other. Even if the ciphertext of some groups is damaged, it will not affect the decryption of other groups. The encrypted notarial certificate ciphertext is packaged and stored together with metadata such as digital fingerprints. Establishing an association between the ciphertext and metadata can quickly determine the integrity and validity of the notarial certificate, thereby improving processing efficiency. In summary, this embodiment provides a safe and reliable electronic notarial data protection solution, which facilitates subsequent application integration and upgrade optimization, and is of great significance for ensuring the security, credibility and legitimacy of electronic notarial services.

[0066] In an optional embodiment,

[0067] The 128-bit session key is used as the input key of Zu Chongzhi's sequence cipher algorithm, a random number is generated and used as an initialization vector, and the electronic plaintext is encrypted in groups by calling the processing grouping method as shown in the following formula:

[0068]

[0069] Among them, C i represents the i-th ciphertext block, AES256() represents encryption using the AES256 algorithm, Indicates the key used by the AES256 encryption algorithm. SM4() indicates encryption using the SM4 algorithm. represents the key used by the SM4 algorithm, R(i) represents the random perturbation term, Represents a bitwise XOR operation, C i-1 represents the i-1th ciphertext block, P i represents the i-th plaintext block, the value range of i is an integer greater than 1. When i is 1, C i-1 The value of is the initial vector IV.

[0070] In this embodiment, a double encryption protection mechanism is formed, which significantly improves security. Different rounds of encryption use different keys. Even if the key of a certain round is leaked, it will not affect the security of other rounds, which increases the difficulty of cryptographic analysis. Ciphertext feedback and random noise are introduced, so that the same plaintext block will generate different ciphertexts at different positions, eliminating the statistical regularity between plaintext and ciphertext, and increasing the difficulty of cryptographic analysis. The introduction of the initial vector can ensure that even if multiple plaintexts are encrypted with the same key, the ciphertexts corresponding to different plaintexts will be different, preventing statistical analysis and replay attacks based on ciphertext. In summary, this embodiment can effectively resist various cryptographic attacks, such as differential analysis, linear analysis, statistical analysis, etc., provides a high security level of protection for electronic plaintext, and significantly improves the security strength of encryption.

[0071] In an optional embodiment,

[0072] The creator identity of the electronic notarial certificate is authenticated and signed based on the elliptic curve public key cryptographic algorithm to obtain an elliptic curve digital signature, the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature are written into a new block, and the block hash value of the new block is calculated in combination with a cryptographic hash algorithm, including:

[0073] The central processing system generates a curve key pair based on the elliptic curve public key cryptography algorithm and sends the public key in the curve key pair to the creator, encrypts it through a password-based key derivation function and stores it persistently. The creator encrypts the system random number based on the private key to obtain the curve ciphertext and sends it to the central processing system through a secure channel. The central processing system verifies the signature through the public key, the original random number and the digital fingerprint information. If the signature verification passes, the identity of the creator is confirmed and the elliptic curve digital signature is obtained.

[0074] The central processing system interacts with the underlying blockchain platform through a software development kit, constructs the digital fingerprint information, the electronic ciphertext and the elliptic curve digital signature into a blockchain transaction, organizes the generated block data through a Merkle tree structure, stores the root hash corresponding to the Merkle tree in the block header and adopts an authorization proof mechanism through a consensus algorithm, takes turns to generate blocks according to pre-selected trusted verification nodes and verifies the validity of the blocks through a multi-signature algorithm. If the verification is successful, the block data is written into the current block and the block hash value of the current block is calculated according to the cryptographic hash algorithm.

[0075] The curve ciphertext refers to data generated after encryption using the elliptic curve algorithm, which has high security and anti-cracking capabilities. The secure channel is a mechanism for protecting the data transmission process to ensure that the information is not eavesdropped and tampered with, so as to improve the security of communication. The signature verification is the process of verifying the digital signature to ensure the source and integrity of the message, so that the recipient can trust the sender's information. The blockchain transaction is the data exchange information recorded in the blockchain network, which usually includes the sender, the receiver and the related amount and transaction time. The Merkle tree structure is a tree structure used for efficient verification and ensuring data integrity, which is organized through hierarchical hash calculations. Data, the root hash is the hash value at the top of the Merkle tree, representing the data integrity of the entire tree, and can effectively verify the content of the entire tree. The authorization proof mechanism is a mechanism to ensure the legality and validity of specific operations, and is commonly used in access control and authority management. The trusted verification node is a node in the blockchain network responsible for verifying transactions and blocks, ensuring the security of the network and the legality of transactions. The block generation is the process of generating new blocks in the blockchain, which involves packaging transaction data and generating corresponding block hashes. The block hash value is a hash value representing the content of the block, which is used to ensure the non-tamperability of the data and enhance the security of the blockchain system.

[0076] The central processing system uses the elliptic curve public key cryptography (ECC) algorithm to generate a pair of curve keys, including a public key and a private key. The central processing system sends the generated elliptic curve encryption algorithm public key to the creator of the electronic notarial certificate. The central processing system uses a password-based key derivation function (PBKDF) to encrypt the elliptic curve encryption algorithm private key, and then stores the encrypted private key persistently. After the creator receives the elliptic curve encryption algorithm public key sent by the central processing system, he generates a random number as a challenge value, and encrypts the random number using the elliptic curve encryption algorithm private key to obtain the curve ciphertext;

[0077] The creator sends the curve ciphertext to the central processing system through a secure channel. After receiving the curve ciphertext, the central processing system uses the elliptic curve encryption algorithm public key, the original random number and the digital fingerprint information of the electronic notarial certificate to verify the signature of the curve ciphertext. If the verification signature is passed, the identity of the creator is confirmed, and the creator's elliptic curve digital signature on the content of the electronic notarial certificate is obtained. The central processing system interacts with the underlying blockchain platform through the software development kit (SDK) to construct a blockchain transaction with the digital fingerprint of the electronic notarial certificate, the encrypted electronic notarial certificate ciphertext and the creator's ECDSA signature. The central processing system uses the Merkle Tree data structure to organize the generated block data, stores the hash value of the block data in the leaf node of the Merkle Tree, and calculates the root hash value of the Merkle Tree.

[0078] The central processing system stores the root hash value of the Merkle tree in the block header. The trusted verification nodes pre-selected in the blockchain network take turns to produce blocks through the consensus algorithm using the authorization proof mechanism. The current block-producing node verifies the newly generated block and signs the block using a multi-signature algorithm to ensure the validity of the block. If the multi-signature verification passes, the newly generated block is added to the blockchain and the status of the blockchain is updated. The central processing system calculates the block hash value of the current block according to the cryptographic hash algorithm (such as SHA-256) as the pre-order hash of the next block to form a chain structure.

[0079] For example, suppose the creator Alice wants to notarize an electronic contract "contract.pdf". The central processing system generates an ECC key pair, with the public key "PubKey_A" and the private key "PrivKey_A". The central processing system sends the public key "PubKey_A" to Alice. The central processing system encrypts the private key "PrivKey_A" using PBKDF to obtain the encrypted private key "Enc_PrivKey_A" and stores it in the database. Alice generates a random number "Nonce_A" and encrypts it using the private key "PrivKey_Alice" to obtain the curve ciphertext "CipherText_A". Alice sends "CipherText_A" to the central processing system through the HTTPS secure channel.

[0080] The central processing system uses "PubKey_A", "Nonce_A" and the digital fingerprint "Fingerprint_A" of "contract.pdf" to verify the signature of "CipherText_A". If the signature verification is successful, Alice's identity is confirmed, and Alice's ECDSA signature "Sig_A" for "contract.pdf" is obtained. The central processing system interacts with the blockchain platform through the SDK to build a transaction "Tx_A" with the content of "Fingerprint_A", "Enc_contract.pdf" and "Sig_A". The central processing system constructs a Merkle tree with the transaction data such as "Tx_A", and the root hash is "MerkleRoot_A";

[0081] The central processing system stores "MerkleRoot_A" into the new block header "BlockHeader_A". The blockchain verification node "Validator_1" obtains the right to generate blocks through the PoA mechanism and generates a new block "Block_A". "Validator_2" and "Validator_3" perform multi-signature verification on "Block_A". If the multi-signature verification passes, "Block_A" is added to the blockchain and the status is updated. The central processing system calculates the block hash "BlockHash_A" of "Block_A" as the pre-order hash of the next block.

[0082] In this embodiment, the digital fingerprint, encrypted ciphertext and digital signature of the electronic notarial certificate are written into the blockchain as transaction data, and the tamper-proof feature of the blockchain is utilized to ensure the integrity of the electronic notarial certificate data. The digital signature of the creator is bound to the notarial data, providing irrefutable electronic evidence to prevent the creator from denying it afterwards. Even if the blockchain data is made public, unauthorized third parties cannot obtain the notarial document, effectively protecting the sensitive information of the creator and related parties. Through the hash chain verification of the Merkle tree, it is possible to efficiently verify whether a transaction is included in the block without storing complete transaction data, thereby improving storage and verification efficiency. The multi-signature algorithm ensures the validity of the block, prevents single point failures and attacks by malicious nodes, and ensures the security of the blockchain network. Through the audit function of the blockchain, the source, time and operation process of the notarial data can be tracked, meeting legal and regulatory requirements. In summary, this embodiment provides a decentralized trusted storage and verification mechanism, provides technical support for the digital transformation of the electronic notarization industry, promotes the automation and intelligence of the electronic notarization process, improves notarization efficiency and accessibility, and has broad application prospects.

[0083] S2. Receive a request for verification of an electronic notarial certificate, query a target block that matches the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract the first verification information related to the electronic notarial certificate to be verified and the timestamp information, random number information, and block hash value information corresponding to the target block in the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule;

[0084] The blockchain network is a decentralized distributed system that realizes data sharing and secure storage through interconnection and consensus mechanisms between nodes to ensure that data cannot be tampered with. The target block refers to a new block that is expected to be generated and added to the blockchain, which usually contains specific transaction data and other related information. The block body is the main content of the block, which contains key information such as transaction data, timestamp, and hash value of the previous block. The verifier refers to a participant in the blockchain network who is responsible for verifying the legitimacy of transactions and blocks to ensure the validity and security of information. The verification rule is used by the verifier to check whether transactions and blocks meet the requirements according to pre-set standards and protocols.

[0085] In an optional embodiment,

[0086] Receive an electronic notarial certificate verification request, query a target block that matches the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract the first verification information related to the electronic notarial certificate to be verified and the timestamp information, random number information and block hash value information corresponding to the target block in the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule, including:

[0087] The central processing system receives the electronic notarial certificate verification request from the requester and extracts the request parameters, wherein the request parameters include the unique identification code of the electronic notarial certificate to be verified and the identity information of the requester, parses the digital fingerprint information from the electronic notarial certificate to be verified through the document processing library, performs integrity verification on the parsed digital fingerprint information, and if the integrity verification passes, the electronic notarial certificate is put on the chain through the chain code according to the pre-set blockchain network;

[0088] For the electronic notarial certificate uploaded to the chain, the digital fingerprint information is used as a key to perform a matching query in a pre-set blockchain status database. If there is a target block that matches the digital fingerprint information, the block body data structure is parsed and the first verification information related to the electronic notarial certificate to be verified is extracted, wherein the first verification information includes the notarial certificate metadata, notarization time, notarial agency and notary;

[0089] A trusted third-party platform is used as an intermediary, a verification party is selected and a verification cooperation relationship is established, a data exchange format and a secure communication protocol are set, and the first verification information and the timestamp information, random number information and block hash value information corresponding to the target block are packaged according to the secure communication protocol according to a universal data serialization format, encrypted by digital envelope technology, and sent to multiple verification parties using a secure channel. The verification parties verify and check the encrypted information according to pre-set verification rules and verification processes, wherein the verification includes identity authentication, digital signature verification and timestamp verification, and the verification process includes ownership verification, source verification and hash value verification, and the verification result of the current verification party is generated. The verification result of each verification party is integrated and combined with the verification time and the digital signature of the verification agency to generate a verification receipt, which is encrypted by the public key of the trusted third-party platform and fed back to the trusted third-party platform using a secure channel, and the verification receipt is decrypted and statistically analyzed to obtain the comprehensive verification result.

[0090] The chain code is an implementation form of smart contracts, which contains codes for executing specific logic and rules on the blockchain to ensure the automated execution of the protocol. The chain is the process of recording data or transaction information on the blockchain to ensure that this information is shared and verified in the network. The universal data serialization format is a standardized data representation method that enables interoperability between different systems and facilitates data transmission and storage. The chain is the process of recording data or transaction information on the blockchain to ensure that this information is shared and verified in the network. The universal data serialization format is a standardized data representation method that enables interoperability between different systems and facilitates data transmission and storage. The secure communication protocol is a protocol that ensures the secure transmission of information in the network, and uses encryption and identity authentication technologies to protect the confidentiality and integrity of data. The digital envelope technology is an encryption technology for protecting digital information. By encapsulating information in an encrypted envelope, it ensures that only authorized parties can access it. The verification is the process of verifying the authenticity of information, and confirms that the information has not been tampered with by various means to ensure its credibility. The trusted third-party platform public key is a public key used to encrypt and verify information, provided by the third-party platform to ensure the effectiveness of secure communication.

[0091] The central processing system receives the electronic notarial certificate verification request from the requester, extracts the request parameters, including the unique identification code of the electronic notarial certificate to be verified and the identity information of the requester, uses the document processing library to parse the electronic notarial certificate to be verified, extracts the digital fingerprint information therein, performs integrity verification on the extracted digital fingerprint information, and ensures that the content of the electronic notarial certificate has not been tampered with. If the integrity verification passes, the electronic notarial certificate is chained through the preset blockchain network using the chain code (Chaincode) and recorded in the blockchain. For the electronic notarial certificate after chaining, the digital fingerprint information is used as a key to perform a matching query in the blockchain state database. If a target block matching the digital fingerprint is queried, the block body data structure is parsed to extract the first verification information related to the electronic notarial certificate to be verified, including the notarial certificate metadata, notarization time, notarial agency and notary, etc.;

[0092] A trusted third-party platform is selected as an intermediary to establish a verification cooperation relationship with multiple verification parties, set a data exchange format and a secure communication protocol, and package the first verification information, the timestamp information of the target block, the random number information, and the block hash value according to a universal data serialization format. The packaged information is encrypted using a digital envelope technology and sent to multiple verification parties through a secure channel. The verification parties verify and check the received encrypted information according to preset verification rules and processes. The verification process includes identity authentication, digital signature verification, and timestamp verification. The verification process includes ownership verification, source verification, and hash value verification. Each verification party independently generates its own verification result. The verification results of all verification parties are combined, combined with the verification time and the digital signature of the verification agency, to generate a final verification receipt. The verification receipt is encrypted using the public key of the trusted third-party platform and fed back to the trusted third-party platform through a secure channel. The trusted third-party platform decrypts and performs statistical analysis on the received verification receipt to obtain a comprehensive verification result.

[0093] For example, suppose the requester wants to verify an electronic notarial certificate "Certificate_001". The central processing system receives the verification request and extracts the request parameters: "Certificate_ID_001" (notarial certificate identification code) and "Bob_ID". The central processing system uses the document processing library to parse "Certificate_001", extracts the digital fingerprint "Fingerprint_001", performs an integrity check on "Fingerprint_001", confirms that the notarial certificate has not been tampered with, and passes the integrity check. The chain code is used to upload "Certificate_001" to the blockchain network, and "Fingerprint_001" is used. As the key, query the matching block in the blockchain status database, query the matching target block "Block_001", parse the block body, extract the first verification information: "Metadata_001" (notarization metadata), "Time_001" (notarization time), "Notary_001" (notarization agency) and "Notarist_001" (notary), select the trusted third-party platform "TTP", establish a collaborative relationship with the verifiers "Validator_1", "Validator_2", and "Validator_3", set the data exchange format to JSON, the secure communication protocol to HTTPS, and set "Metadata_001" to the JSON format. 1", "Time_001", "Notary_001", "Notarist_001" and timestamps, random numbers and hash values ​​of "Block_001" are packaged in JSON format, and the packaged JSON data is encrypted using digital envelope technology to generate ciphertext "Encrypted_Data_001", which is sent to "Validator_1", "Validator_2" and "Validator_3" through HTTPS secure channel. The verifier decrypts "Encrypted_Data_001" and verifies and checks it according to the preset verification rules and processes. The verification process verifies Bob's identity, digital The validity of the signature and timestamp. The verification process verifies the ownership, source and integrity of the notarial certificate. "Validator_1" generates the verification result "Result_1", "Validator_2" generates "Result_2", and "Validator_3" generates "Result_3". "Result_1", "Result_2", and "Result_3" are combined with the verification timestamp "Validation_Time" and the digital signature "Signature_TTP" of the verification agency to generate the final verification receipt "Receipt_001". The public key of "TTP" is used to encrypt "Receipt_001".Generate the ciphertext "Encrypted_Receipt_001" and feed it back to "TTP" through HTTPS. "TTP" decrypts "Encrypted_Receipt_001", performs statistical analysis, and obtains the comprehensive verification result: "Validation_Result_001", which indicates the verification result of "Certificate_001".

[0094] In this embodiment, by comparing the consistency between the on-chain data and the notarial certificate to be verified, it is possible to effectively verify whether the content of the notarial certificate has been tampered with, thereby ensuring the integrity and credibility of the data. By integrating the results of multiple parties to draw a credible verification conclusion, single point failure and fraud can be effectively prevented. By tracing the verification data on the blockchain, the verification process can be accurately restored, and the credibility of the verification results can be verified to meet the needs of post-audit and judicial evidence collection. By defining standardized data exchange formats and interface specifications, interoperability and integration between different verification parties are facilitated. In summary, this embodiment effectively reduces the cost and time of notarial verification, improves the accessibility of notarial services, and provides important technical support for the digital transformation of the electronic notarization industry and the establishment of a credible verification mechanism.

[0095] S3. Write the comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified into the new block, perform consensus verification on the new block based on the proof-of-work consensus mechanism, modify the block time by dynamically adjusting the block difficulty value and verify the comprehensive verification result. If the electronic notarial certificate to be verified is authentic and valid, encrypt it through an asymmetric encryption algorithm, generate a verification result ciphertext and feed it back to the requesting entity. If the requesting entity has any objection to the comprehensive verification result, send an objection application and conduct an objection review through a pre-set arbitration smart contract, generate an arbitration result and write the arbitration result into the new block, and feed it back to the requesting entity and the blockchain system at the same time.

[0096] The proof-of-work consensus mechanism is a mechanism that verifies transactions and generates new blocks by calculating workload, ensuring the security and fairness of the network. The consensus verification is a process in which participants confirm the validity of transactions and blocks in order to reach consensus and maintain the consistency of the blockchain. The asymmetric encryption algorithm is an encryption method that uses a pair of public and private keys for encryption and decryption, providing high security and flexibility. The arbitration smart contract is an automatically executed contract that can achieve arbitration and dispute resolution on the blockchain through preset conditions and logic.

[0097] In an optional embodiment,

[0098] The comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified are written into the new block, the new block is verified by consensus based on the proof-of-work consensus mechanism, the block time is modified by dynamically adjusting the block difficulty value and the comprehensive verification result is verified, if the electronic notarial certificate to be verified is authentic and valid, it is encrypted by an asymmetric encryption algorithm, a verification result ciphertext is generated and fed back to the requesting subject, if the requesting subject has an objection to the comprehensive verification result, an objection application is sent and the objection review is conducted through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and the feedback is simultaneously provided to the requesting subject and the blockchain system, including:

[0099] Collect verification receipts and extract verification results of the comprehensive verification results, perform hash operations on the comprehensive verification results and the digital fingerprint information of the electronic notarial certificate to be verified according to the Merkle tree structure, generate a root hash and construct a block header, connect the root hash with the block header to form a complete block and append the complete block to the new block;

[0100] For the new block after the complete block is appended, based on the constraint that the legal block hash needs to satisfy the number of leading zero bits, the block difficulty target is set in combination with the proof-of-work consensus mechanism, the actual block time and the expected block time of each difficulty cycle and the corresponding difficulty adjustment factor are determined, the block difficulty target is updated based on the difficulty adjustment factor, the block hash value is calculated from 0 repeatedly and combined with the pre-added miner node, and it is determined whether the block hash value is less than the block difficulty target. If not, the calculation continues until the block hash value is less than the block difficulty target, and the current block is legal and broadcast to the network to complete the consensus verification;

[0101] If the consensus verification indicates that the electronic notarial certificate to be verified is authentic and valid, the requesting entity generates a public-private key pair of the requesting entity, encrypts the consensus verification result based on the public-private key pair of the requesting entity in combination with an asymmetric encryption algorithm, generates a verification result ciphertext and feeds it back to the requesting entity; if the requesting entity has an objection to the comprehensive verification result, it sends an objection application and selects an arbitration participant according to a pre-set arbitration smart contract; the arbitration participant reviews the objection application according to the objection handling process and the pre-set arbitration result generation rules to obtain an arbitration result;

[0102] The arbitration result is fed back to the requesting entity and written into the new block, and the new block body with the arbitration result added is submitted to the blockchain network.

[0103] The hash operation is the process of converting input data into a hash value of fixed length, which is widely used in data integrity verification and encryption technology. The root hash is the top-level hash value of the Merkle tree in the blockchain, which indicates the content integrity of the entire tree and is the key to verifying the validity of data. The block difficulty target refers to the difficulty value set for generating new blocks in the proof-of-work mechanism, which affects the speed and frequency of block generation. The difficulty adjustment factor is the value of dynamically adjusting the block difficulty target, which is calculated based on the ratio of the actual block generation time to the expected block generation time. The miner node is the node in the blockchain network responsible for packaging transactions and verifying blocks, and is usually rewarded through proof-of-work. The requesting subject public-private key pair refers to the public key and private key used in asymmetric encryption, where the public key is used to encrypt information and the private key is used to decrypt and sign. The arbitration participants are the parties involved in dispute resolution on the blockchain, and the arbitration rules and procedures are executed through smart contracts.

[0104] Collect verification receipts from various verifiers, extract comprehensive verification results, perform hash operations on the comprehensive verification results and the digital fingerprint information of the electronic notarization to be verified according to the Merkle tree structure, generate a root hash value, construct a block header, connect the root hash value with the block header to form a complete new block, append the newly generated block to the existing blockchain to form a new blockchain, and for the blockchain after the new block is appended, set the block difficulty target based on the leading zero bit constraint that the legal block hash needs to meet and combine the Proof of Work (PoW) consensus mechanism to determine the actual block time and expected block time for each difficulty cycle, and calculate the difficulty adjustment factor;

[0105] The block difficulty target is updated based on the difficulty adjustment factor, miner nodes are added in advance, and the block hash value is calculated from 0 to determine whether the calculated block hash value is less than the current block difficulty target. If not, the calculation continues until a block hash value that meets the conditions is found. The block that meets the conditions is marked as a legal block and broadcast to the entire blockchain network to complete the consensus verification. If the consensus verification result shows that the electronic notarial certificate to be verified is authentic and valid, the requesting subject generates its own public-private key pair, and based on the public-private key pair of the requesting subject, an asymmetric encryption algorithm (such as RSA) is used to encrypt the consensus verification result to generate a verification result ciphertext, and the encrypted verification result ciphertext is fed back to the requesting subject. If the requesting subject has an objection to the comprehensive verification result, an objection application is sent, and the arbitration participants are selected according to the pre-set arbitration smart contract. The arbitration participants review the objection application according to the objection handling process and the preset arbitration result generation rules, and obtain the arbitration result. The arbitration result is fed back to the requesting subject and written into a new block. The new block with the arbitration result added is submitted to the blockchain network to complete the arbitration processing process;

[0106] For example, assuming that the comprehensive verification result "Validation_Result_001" indicates that the electronic notarial certificate "Certificate_001" is authentic and valid, the trusted third-party platform "TTP" collects the verification receipts of the verifiers "Validator_1", "Validator_2", and "Validator_3", extracts the comprehensive verification result "Validation_Result_001", hashes the digital fingerprint "Fingerprint_001" of "Validation_Result_001" and "Certificate_001" according to the Merkle tree structure, generates a root hash "Root_Hash_001", constructs a block header "Block_Header_001", connects "Root_Hash_001" with the block header to form a new block "New_Block_001", appends "New_Block_001" to the existing blockchain, and generates a new blockchain state;

[0107] According to the PoW consensus mechanism, the difficulty target of the new block is set to "Target_001", requiring the number of leading zero bits of the legal block hash to be no less than 20, determining the difficulty cycle to be 2016 blocks, the actual block time to be "Actual_Time_001", and the expected block time to be 10 minutes. The difficulty adjustment factor "Adjustment_Factor_001" is calculated, and the block difficulty target is updated using "Adjustment_Factor_001" to obtain a new difficulty target "New_Target_001". Miner nodes "Miner_1", "Miner_2", and "Miner_3" are pre-added, and the block hash value is calculated starting from nonce=0. "Miner_2" first finds the block hash "Block_Hash_001" that meets the difficulty target "New_Target_001", that is, the number of leading zero bits is greater than or equal to 20, and marks the block where "Block_Hash_001" is located as a legal block, broadcasts it to the blockchain network, and completes the consensus verification;

[0108] The requester "Bob" generates his own public-private key pair "Bob_PubKey" and "Bob_PriKey", uses "Bob_PubKey" to perform RSA encryption on the comprehensive verification result "Validation_Result_001", generates the verification result ciphertext "Encrypted_Result_001", and feeds "Encrypted_Result_001" back to "Bob" through a secure channel. "Bob" objects to "Validation_Result_001" and sends an objection application "Objection_001". According to the arbitration intelligence The contract selects arbitrators "Arbitrator_1", "Arbitrator_2", and "Arbitrator_3". The arbitrators review "Objection_001" and obtain the arbitration result "Arbitration_Result_001" based on the preset arbitration rules. The original comprehensive verification result is supported, and "Arbitration_Result_001" is fed back to "Bob" and written into the new block "New_Block_002". "New_Block_002" containing the arbitration result is submitted to the blockchain network to complete the arbitration process.

[0109] In this embodiment, the integrity and immutability of the verification results are guaranteed through the chain structure and hash pointer mechanism of the blockchain. Any modification to the verification results will result in changes in the hash value, which can be easily discovered. The results of the consensus verification are confirmed by all nodes in the network and have high credibility. The arbitration participants review the objections according to the preset rules. The arbitration results are automatically generated and written into the block through smart contracts. Anyone can query and verify, which improves the fairness and credibility of the arbitration. The objection application and the arbitration results are chained to protect the rights and interests of the requesting subject and avoid malicious tampering or negation of the verification results. In summary, this implementation explores the innovative application of blockchain technology in the field of electronic notarization and provides important technical support for building a reliable digital notarization service system.

[0110] In an optional embodiment,

[0111] The block difficulty target is updated based on the difficulty adjustment factor as shown in the following formula:

[0112]

[0113] Among them, Tt (i+1) represents the block difficulty target of the i+1th period, α represents the smoothing factor, Tt i represents the block difficulty target of the i-th cycle, T0 represents the expected block time, It represents the average block time of the last N blocks, and △ represents the difficulty adjustment factor, which is used to limit the difficulty adjustment range.

[0114] In this embodiment, the feedback adjustment mechanism helps to stabilize the block rhythm of the blockchain network, making it as close as possible to the preset expected block time, ensuring the stable operation of the blockchain system. Smoothing helps to maintain the stability of the blockchain network and reduce the impact of difficulty fluctuations on miners and users. A moderate difficulty adjustment range also helps to maintain the enthusiasm of miners and avoid drastic fluctuations in miners' income due to excessive changes in difficulty. In summary, this embodiment improves the flexibility and adaptability of the blockchain network, promotes fair competition among miners, and improves consensus efficiency and scalability, which is of great significance for building a high-performance and scalable blockchain application ecosystem.

[0115] Figure 2 FIG. 1 is a schematic diagram of a multi-authentication electronic notarial certificate verification system based on blockchain according to an embodiment of the present invention. Figure 2 As shown, the system comprises:

[0116] The first unit is used to receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the cipher block linking mode, encrypt the notarial certificate file in groups to obtain an encrypted electronic ciphertext, authenticate and sign the creator of the electronic notarial certificate based on the elliptic curve public key cryptography algorithm to obtain an elliptic curve digital signature, write the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature into a new block, and calculate a block hash value of the new block in combination with the cryptographic hash algorithm;

[0117] The second unit is used to receive a request for verification of an electronic notarial certificate, query a target block matching the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract first verification information related to the electronic notarial certificate to be verified and timestamp information, random number information, and block hash value information corresponding to the target block from the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule;

[0118] The third unit is used to write the comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified into the new block, perform consensus verification on the new block based on the proof-of-work consensus mechanism, modify the block time by dynamically adjusting the block difficulty value and verify the comprehensive verification result. If the electronic notarial certificate to be verified is authentic and valid, it is encrypted through an asymmetric encryption algorithm, and a verification result ciphertext is generated and fed back to the requesting entity. If the requesting entity has an objection to the comprehensive verification result, an objection application is sent and the objection is reviewed through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and fed back to the requesting entity and the blockchain system at the same time.

[0119] According to a third aspect of the embodiments of the present invention,

[0120] An electronic device is provided, comprising:

[0121] processor;

[0122] a memory for storing processor-executable instructions;

[0123] The processor is configured to call the instructions stored in the memory to execute the aforementioned method.

[0124] According to a fourth aspect of the embodiments of the present invention,

[0125] A computer-readable storage medium is provided, on which computer program instructions are stored. When the computer program instructions are executed by a processor, the aforementioned method is implemented.

[0126] The present invention may be a method, an apparatus, a system and / or a computer program product. The computer program product may include a computer-readable storage medium carrying computer-readable program instructions for executing various aspects of the present invention.

[0127] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A multi-authentication electronic notarial certificate verification method based on blockchain, characterized in that: include: Receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the cipher block chaining mode, encrypt the notarial certificate file in groups to obtain an encrypted electronic ciphertext, authenticate and sign the creator of the electronic notarial certificate based on the elliptic curve public key cryptography algorithm to obtain an elliptic curve digital signature, write the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature into a new block, and calculate a block hash value of the new block in combination with the cryptographic hash algorithm; Receive an electronic notarial certificate verification request, query a target block that matches the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract first verification information related to the electronic notarial certificate to be verified and timestamp information, random number information, and block hash value information corresponding to the target block from the block body of the target block, send the extracted information to a pre-selected verification party for verification, and generate a comprehensive verification result in combination with a pre-set verification rule; The comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified are written into the new block, and the new block is verified by consensus based on the proof-of-work consensus mechanism. The block time is modified by dynamically adjusting the block difficulty value and the comprehensive verification result is verified. If the electronic notarial certificate to be verified is authentic and valid, it is encrypted through an asymmetric encryption algorithm, and a verification result ciphertext is generated and fed back to the requesting entity. If the requesting entity has any objection to the comprehensive verification result, an objection application is sent and the objection is reviewed through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and fed back to the requesting entity and the blockchain system at the same time.

2. The method according to claim 1, characterized in that: Receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the French cipher block chaining mode, encrypt the notarial certificate file in groups, and obtain the encrypted electronic ciphertext including: The requesting subject uploads the electronic notarial certificate and fills in the basic information of the notarial certificate, the identity information of the creator, and submits the notarial certificate file and the creator's public key certificate. The central processing system operates the upload request through input data legitimacy verification and parameter filtering, extracts the uploaded notarial certificate file, extracts the content of the notarial certificate file by type identification, and temporarily stores the extracted content in the form of a byte array. The central processing system extracts the creator's elliptic curve digital signature algorithm certificate from the upload request and performs certificate parsing, performs online validity query through the online certificate status protocol, and performs segment-by-segment hashing on the electronic content temporarily stored in the form of a byte array, calculates the national secret hash algorithm security hash value, and obtains 256-bit digital fingerprint information; The central processing system extracts the unique identity identifier corresponding to the creator from the creator certificate and obtains the central processing unit serial number as the unique hardware information from the server hardware environment, combines them to obtain a seed key, generates a 128-bit session key through the master key of the national secret block cipher algorithm and the seed key, combined with a password-based key derivation function, uses the 128-bit session key as the input key of the Zu Chongzhi sequence cipher algorithm, generates a random number and uses it as an initialization vector, and iteratively encrypts the electronic plaintext by calling the processing grouping method, performs standard padding at the beginning of each group, and performs padding alignment at the end where the group length is less than 128 bits. After all plaintext groups are encrypted, the encrypted electronic ciphertext is obtained.

3. The method according to claim 2, characterized in that The 128-bit session key is used as the input key of Zu Chongzhi's sequence cipher algorithm, a random number is generated and used as an initialization vector, and the electronic plaintext is encrypted in groups by calling the processing grouping method as shown in the following formula: Among them, C i represents the i-th ciphertext block, AES256() represents encryption using the AES256 algorithm, Indicates the key used by the AES256 encryption algorithm. SM4() indicates encryption using the SM4 algorithm. represents the key used by the SM4 algorithm, R(i) represents the random perturbation term, ⊕ represents the bitwise XOR operation, C i-1 represents the i-1th ciphertext block, P i represents the i-th plaintext block, the value range of i is an integer greater than 1. When i is 1, C i-1 The value of is the initial vector IV.

4. The method according to claim 1, characterized in that: The creator identity of the electronic notarial certificate is authenticated and signed based on the elliptic curve public key cryptographic algorithm to obtain an elliptic curve digital signature, the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature are written into a new block, and the block hash value of the new block is calculated in combination with a cryptographic hash algorithm, including: The central processing system generates a curve key pair based on the elliptic curve public key cryptography algorithm and sends the public key in the curve key pair to the creator, encrypts it through a password-based key derivation function and stores it persistently. The creator encrypts the system random number based on the private key to obtain the curve ciphertext and sends it to the central processing system through a secure channel. The central processing system verifies the signature through the public key, the original random number and the digital fingerprint information. If the signature verification passes, the identity of the creator is confirmed and the elliptic curve digital signature is obtained. The central processing system interacts with the underlying blockchain platform through a software development kit, constructs the digital fingerprint information, the electronic ciphertext and the elliptic curve digital signature into a blockchain transaction, organizes the generated block data through a Merkle tree structure, stores the root hash corresponding to the Merkle tree in the block header and adopts an authorization proof mechanism through a consensus algorithm, takes turns to generate blocks according to pre-selected trusted verification nodes and verifies the validity of the blocks through a multi-signature algorithm. If the verification is successful, the block data is written into the current block and the block hash value of the current block is calculated according to the cryptographic hash algorithm.

5. The method according to claim 1, characterized in that: Receive an electronic notarial certificate verification request, query a target block that matches the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract the first verification information related to the electronic notarial certificate to be verified and the timestamp information, random number information and block hash value information corresponding to the target block in the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule, including: The central processing system receives the electronic notarial certificate verification request from the requester and extracts the request parameters, wherein the request parameters include the unique identification code of the electronic notarial certificate to be verified and the identity information of the requester, parses the digital fingerprint information from the electronic notarial certificate to be verified through the document processing library, performs integrity verification on the parsed digital fingerprint information, and if the integrity verification passes, the electronic notarial certificate is put on the chain through the chain code according to the pre-set blockchain network; For the electronic notarial certificate uploaded to the chain, the digital fingerprint information is used as a key to perform a matching query in a pre-set blockchain status database. If there is a target block that matches the digital fingerprint information, the block body data structure is parsed and the first verification information related to the electronic notarial certificate to be verified is extracted, wherein the first verification information includes the notarial certificate metadata, notarization time, notarial agency and notary; A trusted third-party platform is used as an intermediary, a verification party is selected and a verification cooperation relationship is established, a data exchange format and a secure communication protocol are set, and the first verification information and the timestamp information, random number information and block hash value information corresponding to the target block are packaged according to the secure communication protocol according to a universal data serialization format, encrypted by digital envelope technology, and sent to multiple verification parties using a secure channel. The verification parties verify and check the encrypted information according to pre-set verification rules and verification processes, wherein the verification includes identity authentication, digital signature verification and timestamp verification, and the verification process includes ownership verification, source verification and hash value verification, and the verification result of the current verification party is generated. The verification result of each verification party is integrated and combined with the verification time and the digital signature of the verification agency to generate a verification receipt, which is encrypted by the public key of the trusted third-party platform and fed back to the trusted third-party platform using a secure channel, and the verification receipt is decrypted and statistically analyzed to obtain the comprehensive verification result.

6. The method according to claim 1, characterized in that The comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified are written into the new block, the new block is verified by consensus based on the proof-of-work consensus mechanism, the block time is modified by dynamically adjusting the block difficulty value and the comprehensive verification result is verified, if the electronic notarial certificate to be verified is authentic and valid, it is encrypted by an asymmetric encryption algorithm, a verification result ciphertext is generated and fed back to the requesting subject, if the requesting subject has an objection to the comprehensive verification result, an objection application is sent and the objection review is conducted through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and the feedback is simultaneously provided to the requesting subject and the blockchain system, including: Collect verification receipts and extract verification results of the comprehensive verification results, perform hash operations on the comprehensive verification results and the digital fingerprint information of the electronic notarial certificate to be verified according to the Merkle tree structure, generate a root hash and construct a block header, connect the root hash with the block header to form a complete block and append the complete block to the new block; For the new block after the complete block is appended, based on the constraint that the legal block hash needs to satisfy the number of leading zero bits, the block difficulty target is set in combination with the proof-of-work consensus mechanism, the actual block time and the expected block time of each difficulty cycle and the corresponding difficulty adjustment factor are determined, the block difficulty target is updated based on the difficulty adjustment factor, the block hash value is calculated from 0 repeatedly and combined with the pre-added miner node, and it is determined whether the block hash value is less than the block difficulty target. If not, the calculation continues until the block hash value is less than the block difficulty target, and the current block is legal and broadcast to the network to complete the consensus verification; If the consensus verification indicates that the electronic notarial certificate to be verified is authentic and valid, the requesting entity generates a public-private key pair of the requesting entity, encrypts the consensus verification result based on the public-private key pair of the requesting entity in combination with an asymmetric encryption algorithm, generates a verification result ciphertext and feeds it back to the requesting entity; if the requesting entity has an objection to the comprehensive verification result, it sends an objection application and selects an arbitration participant according to a pre-set arbitration smart contract; the arbitration participant reviews the objection application according to the objection handling process and the pre-set arbitration result generation rules to obtain an arbitration result; The arbitration result is fed back to the requesting entity and written into the new block, and the new block body with the arbitration result added is submitted to the blockchain network.

7. The method according to claim 6, characterized in that The block difficulty target is updated based on the difficulty adjustment factor as shown in the following formula: Among them, Tt (i+1) represents the block difficulty target of the i+1th period, α represents the smoothing factor, Tt i represents the block difficulty target of the i-th cycle, T0 represents the expected block time, It represents the average block time of the last N blocks, and △ represents the difficulty adjustment factor, which is used to limit the difficulty adjustment range.

8. A multi-authentication electronic notarial certificate verification system based on blockchain, used to implement the method described in any one of claims 1 to 7, characterized in that: include: The first unit is used to receive an electronic notarial certificate upload request, wherein the electronic notarial certificate includes a notarial certificate file and digital fingerprint information corresponding to the notarial certificate file, encrypt the notarial certificate file based on the Zu Chongzhi sequence block cipher algorithm, obtain the current user's unique hardware information and generate a key in combination with the cipher block linking mode, encrypt the notarial certificate file in groups to obtain an encrypted electronic ciphertext, authenticate and sign the creator of the electronic notarial certificate based on the elliptic curve public key cryptography algorithm to obtain an elliptic curve digital signature, write the electronic ciphertext, the digital fingerprint information and the elliptic curve digital signature into a new block, and calculate a block hash value of the new block in combination with the cryptographic hash algorithm; The second unit is used to receive a request for verification of an electronic notarial certificate, query a target block matching the digital fingerprint information in combination with a preset blockchain network, and if the match is successful, extract first verification information related to the electronic notarial certificate to be verified and timestamp information, random number information, and block hash value information corresponding to the target block from the block body of the target block, send the extracted information and verify it through a pre-selected verification party, and generate a comprehensive verification result in combination with a pre-set verification rule; The third unit is used to write the comprehensive verification result and the digital fingerprint information of the electronic notarial certificate to be verified into the new block, perform consensus verification on the new block based on the proof-of-work consensus mechanism, modify the block time by dynamically adjusting the block difficulty value and verify the comprehensive verification result. If the electronic notarial certificate to be verified is authentic and valid, it is encrypted through an asymmetric encryption algorithm, and a verification result ciphertext is generated and fed back to the requesting entity. If the requesting entity has an objection to the comprehensive verification result, an objection application is sent and the objection is reviewed through a pre-set arbitration smart contract, an arbitration result is generated and the arbitration result is written into the new block, and fed back to the requesting entity and the blockchain system at the same time.

9. An electronic device, characterized in that: include: processor; a memory for storing processor-executable instructions; The processor is configured to call the instructions stored in the memory to execute the method described in any one of claims 1 to 7.

10. A computer-readable storage medium having computer program instructions stored thereon, characterized in that: When the computer program instructions are executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images