Blockchain-based Carbon Asset Encryption Method and Platform

Abstract

The present invention provides a carbon asset encryption method and platform based on blockchain, which relates to the technical field of data processing, and includes: obtaining the first generation path of each first carbon asset of the first role node in the blockchain, and dividing the first carbon asset into original assets or successor assets based on the first generation path; after determining that a transaction request occurs between any second role node and the first role node, updating the first generation path corresponding to the original asset or successor asset of the transaction to obtain a second generation path; determining the first distributed key of the newly added node of the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset; obtaining the key structure tree of the second generation path based on the first distributed key and the second distributed key, and distributing the updated key structure tree to the corresponding role nodes based on the role relationship. The present invention can improve the authenticity and security of the source and transfer information of carbon assets.

Description

Technical Field

[0001] The present invention relates to data processing technologies, and in particular, to a carbon asset encryption method and platform based on a blockchain. Background Art

[0002] Currently, most carbon asset management adopts a traditional centralized management mode, which has many drawbacks. On the one hand, the security and credibility of data are relatively low, and it is vulnerable to human tampering and data leakage threats, unable to meet the strict requirements for data security in carbon asset transactions. On the other hand, during the carbon asset transaction process, there is a lack of an effective traceability mechanism, making it difficult to accurately track the origin and transfer process of carbon assets, resulting in an increase in transaction risks. In addition, under the traditional management mode, the information sharing and collaborative work efficiency among various participating entities are low, severely restricting the development of the carbon trading market.

[0003] Therefore, how to improve the authenticity and security of carbon asset origin and transfer information has become an urgent problem to be solved. Summary of the Invention

[0004] An embodiment of the present invention provides a carbon asset encryption method and platform based on a blockchain, which can improve the authenticity and security of carbon asset origin and transfer information.

[0005] In a first aspect of an embodiment of the present invention, a carbon asset encryption method based on a blockchain is provided, including:

[0006] Obtaining a first generation path of each first carbon asset of a first role node in the blockchain, and dividing the first carbon asset into original assets or successor assets based on the first generation path;

[0007] After determining that a transaction request occurs between any second role node and the first role node, updating the first generation path corresponding to the original asset or successor asset of the transaction to obtain a second generation path;

[0008] Determining a first distributed key of a newly added node of the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset;

[0009] Obtaining a key structure tree of the second generation path based on the first distributed key and a second distributed key, and distributing the updated key structure tree to the corresponding role nodes based on the role relationship.

[0010] Optionally, the obtaining a first generation path of each first carbon asset of a first role node in the blockchain, and dividing the first carbon asset into original assets or successor assets based on the first generation path includes:

[0011] The first carbon asset includes at least one of carbon emission allowances, green power values, and green certificate values;

[0012] If the first carbon asset is an original asset, an original node and a corresponding first generation path are generated;

[0013] If the first carbon asset is a successor asset, a successor node is generated, and the original historical generation path corresponding to the successor asset is obtained. The first generation path is assembled based on the viewing permission of the historical generation path and the successor node.

[0014] Optionally, the assembling the first generation path based on the viewing permission of the historical generation path and the successor node includes:

[0015] Obtain multiple third role nodes corresponding to other identities of each path node in the historical generation path;

[0016] If the third role nodes corresponding to the same path node are all added with viewable information, the corresponding path node is marked as a first path node;

[0017] If there is non-viewable information added to the third role nodes corresponding to the same path node, the corresponding path node is marked as a second path node;

[0018] Assemble the first path node and / or the second path node with the successor node according to the assembly strategy to generate the first generation path.

[0019] Optionally, the assembling the first path node and / or the second path node with the successor node according to the assembly strategy to generate the first generation path includes:

[0020] If it is determined that there are adjacent second path nodes, they are folded into a third path node, and the third path node is in a non-selectable state;

[0021] Connect and assemble the remaining first path nodes, third path nodes, and successor nodes in chronological order to obtain the first generation path.

[0022] Optionally, the if the third role nodes are all added with viewable information, the corresponding path node is marked as a first path node includes:

[0023] Extract the target information that exists in all the viewable information added to all the third role nodes;

[0024] Retrieve a preset viewing template, fill the target information into the target slot of the preset viewing template, and set the slots without target information in the preset viewing template to be empty;

[0025] Statistical analysis is performed on the target slots and the empty slots to obtain the information data encoding of the first path node.

[0026] Optionally, the information data encoding of the first path node obtained by counting the target slots and the empty slots includes:

[0027] Count the preset order and preset encoding corresponding to each slot;

[0028] Extract the character value of the target information, and merge the character value with the preset encoding to obtain the first sub-encoding of the corresponding target slot;

[0029] Determine the second sub-encoding corresponding to the empty slot, and obtain the information data encoding of the first path node based on the first sub-encoding and the second sub-encoding.

[0030] Optionally, the determining the second sub-encoding corresponding to the empty slot and obtaining the information data encoding of the first path node based on the first sub-encoding and the second sub-encoding includes:

[0031] Delete the target slot to obtain the empty order of all empty slots, assign empty characters to each empty slot according to the empty order, and merge the empty characters with the preset encoding to obtain the second sub-encoding of the empty slot;

[0032] Merge the first sub-encoding and the second sub-encoding in the preset order to obtain the information data encoding.

[0033] Optionally, after determining that any second role node has a transaction request with the first role node, updating the first generation path corresponding to the original asset or the successor asset of the transaction to obtain a second generation path includes:

[0034] Establish a fourth path node corresponding to this transaction;

[0035] Connect the fourth path node with the first generation path to update and obtain the second generation path, and determine the order of the newly added nodes and add sequence encodings.

[0036] Optionally, the determining the first distributed key of the newly added node of the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset includes:

[0037] Extract the role information of the first role node and the second role node to obtain the first role encoding and the second role encoding;

[0038] Determine the corresponding attribute encoding according to the attributes of the first carbon asset;

[0039] Sort the information data encoding, sequence encoding, first role encoding, second role encoding, and attribute encoding according to the generation time to obtain a fusion value, and perform a hash calculation on the fusion value to obtain the first distributed key.

[0040] Optionally, obtaining a key structure tree of a second generation path based on a first distributed key and a second distributed key, and after updating the key structure tree based on the role relationship, distributing it to corresponding role nodes, includes:

[0041] Regarding the keys of other path nodes in the second generation path except for the newly added nodes as the second distributed key;

[0042] Generating a parent node corresponding to the second generation path, and generating child nodes corresponding to the first distributed key and the second distributed key, and obtaining a key structure tree based on the parent node and the child nodes;

[0043] Determining a third role node corresponding to the upper dimension of the first role node and the second role node, and after updating the key structure tree based on the third role node, distributing it to the corresponding role nodes.

[0044] Optionally, the determining a third role node corresponding to the upper dimension of the first role node and the second role node, and after updating the key structure tree based on the third role node, distributing it to the corresponding role nodes, includes:

[0045] Retrieving the role structure trees corresponding to the first role node and the second role node respectively;

[0046] Determining a third role node located in the upper dimension of the first role node and the second role node in the role structure tree, and counting the third role nodes corresponding to each first role node and second role node to generate a role management form;

[0047] Filling the initial first distributed key or second distributed key into the role management form, and after updating the key structure tree based on the role management form, distributing it to the corresponding role nodes.

[0048] Optionally, the updating the key structure tree based on the role management form and then distributing it to the corresponding role nodes includes:

[0049] Determining the management right key of each third role node in the role management form, where the management right key is one and corresponds to all other role nodes to be managed;

[0050] Filling the management right key into the role management form and corresponding it to the first distributed key or the second distributed key, so as to call the first distributed key or the second distributed key based on the management right key;

[0051] Distributing the first distributed key or the second distributed key and the management right key to the corresponding role nodes.

[0052] In the second aspect of the embodiments of the present invention, a blockchain-based carbon asset encryption platform is provided, including:

[0053] The first module is used to obtain the first generation path of each first carbon asset of the first role node in the blockchain, and divide the first carbon asset based on the first generation path to obtain the original asset or the successor asset;

[0054] The second module is used to update the first generation path corresponding to the original asset or the successor asset of the transaction to obtain the second generation path after determining that a transaction request occurs between any second role node and the first role node;

[0055] The key module is used to determine the first distributed key of the newly added node of the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset;

[0056] The distribution module is used to obtain the key structure tree of the second generation path based on the first distributed key and the second distributed key, and update and distribute the key structure tree to the corresponding role nodes based on the role relationship.

[0057] Beneficial effects

[0058] 1. Realize the traceable management of the whole process of carbon assets. Through the detailed recording and management of the generation path of the first carbon asset, the source and transfer process of both the original asset and the successor asset can be clearly presented. During the construction of the generation path, strict screening and coding processing of the path node information ensure the authenticity and integrity of the information. When a carbon asset is traded, the generation path is updated in a timely manner, making each transfer of the carbon asset traceable and improving the transparency of carbon trading.

[0059] 2. Ensure the security of carbon assets. The present invention constructs a complete key management system. By generating distributed keys based on role information, carbon asset attributes, etc., and establishing a key structure tree, hierarchical management of keys is carried out. During the key distribution process, the third role node in the upper dimension is determined in combination with the role structure tree, and a role management form is generated to accurately distribute and control the invocation of keys. This method effectively ensures the security and privacy of carbon assets during the trading process, prevents key leakage and illegal use, and reduces security risks.

[0060] 3. Improve the collaborative efficiency of carbon asset management. Each module of the carbon asset encryption management platform of the present invention works in coordination to realize the real-time sharing and processing of carbon asset information. During the carbon asset trading process, from the reception of the trading request to the update of the generation path, and then to the generation and distribution of keys, the entire process has a high degree of automation, improving work efficiency. At the same time, through the generation and use of the role management form, the management authorities and responsibilities of each role node are clarified, promoting the collaborative efficiency among the participating entities. Description of the drawings

[0061] Figure 1It is a schematic flowchart of a carbon asset encryption management method based on blockchain provided by an embodiment of the present invention;

[0062] Figure 2 It is a schematic diagram of a generation path provided by an embodiment of the present invention;

[0063] Figure 3 It is a schematic flowchart of a carbon asset encryption management platform based on blockchain provided by an embodiment of the present invention. Detailed implementation manners

[0064] The technical solutions of the present invention will be described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments.

[0065] Refer to Figure 1 , which is a schematic flowchart of a carbon asset encryption method based on blockchain provided by an embodiment of the present invention. The method includes:

[0066] S1. Obtain the first generation path of each first carbon asset of the first role node in the blockchain, and divide the first carbon asset into original assets or successive assets based on the first generation path.

[0067] Among them, the first role node is, for example, an enterprise, a thermal power station, a wind power station, etc., and the first carbon asset is held by each node. By analyzing the formation and transfer information of each first carbon asset, its first generation path is obtained, and according to the path characteristics, the first carbon asset is divided into original assets or successive assets, providing a data basis for the full life cycle management of carbon assets.

[0068] It can be understood that, assuming that an enterprise is the first role node and has a certain amount of carbon emission allowances. If the carbon emission allowances are original assets obtained by the enterprise itself through energy conservation and emission reduction, the system generates an original node and records its first generation path. If the enterprise purchases some carbon emission allowances from other thermal power stations, the system generates successive assets.

[0069] In some embodiments, the obtaining the first generation path of each first carbon asset of the first role node in the blockchain, and dividing the first carbon asset into original assets or successive assets based on the first generation path includes:

[0070] The first carbon asset includes at least one of carbon emission allowances, green power values, and green certificate values;

[0071] S11. If the first carbon asset is an original asset, generate an original node and the corresponding first generation path.

[0072] When the system identifies that the first carbon asset is an uncirculated original asset, the system immediately creates an original node, which is an uncirculated node. At the same time, around the original node, the system constructs a record link reflecting the asset from its generation, forming a corresponding first generation path, thereby clarifying the origin and initial information of the original asset.

[0073] S12. If the first carbon asset is a successor asset, a successor node is generated, and the original historical generation path corresponding to the successor asset is obtained. The first generation path is assembled based on the viewing permissions of the historical generation path and the successor node.

[0074] When the system determines that the first carbon asset is a successor asset, a successor node is generated to mark the act of asset transfer. Subsequently, the system traces the historical transfer information of the successor asset on the blockchain and obtains the corresponding original historical generation path. The system further evaluates the viewing permissions of each node in the historical generation path, and assembles the nodes that meet the permission requirements and the successor node according to specific rules to generate a first generation path including the whole process of asset transfer and permission information for subsequent tracing.

[0075] Among them, assembling the first generation path based on the viewing permissions of the historical generation path and the successor node includes:

[0076] S121. Obtain multiple third role nodes corresponding to other identities of each path node in the historical generation path.

[0077] After obtaining the original historical generation path corresponding to the successor asset, the system analyzes each path node in the historical generation path. Each path node may be associated with multiple third role nodes with different identities. The system comprehensively collects information on all third role nodes associated with each path node through the distributed ledger feature of the blockchain. These third role nodes are other entities participating in the carbon asset transfer process, such as different enterprises, etc. By obtaining this information, the system can fully understand the relationships and relevant information of all parties involved in the historical transfer process of carbon assets, providing a comprehensive data basis for subsequent permission evaluation and path assembly.

[0078] S122. If the third role nodes corresponding to the same path node are all added with viewable information, mark the corresponding path node as the first path node.

[0079] The system analyzes multiple third - role nodes corresponding to each path node. If all the third - role nodes corresponding to a certain path node have added viewable information, it means that the information contained in this path node is viewable in the eyes of these relevant third - role nodes. Based on this, the system marks this path node as a first - path node. Such marking and permission settings help to clearly distinguish different types of path nodes when assembling the first - generation path later and display and use information according to permission rules.

[0080] Among them, the step of marking the corresponding path node as a first - path node when all the third - role nodes corresponding to the same path node have added viewable information includes:

[0081] S1221, extract the target information that exists in all the viewable information added by all third - role nodes.

[0082] After the system determines that a certain path node is a first - path node, it deeply analyzes the viewable information added by all the third - role nodes corresponding to this path node. The system carefully compares this viewable information and extracts the information that all third - role nodes have in common. This information is defined as target information. The target information can be various types of data, such as the amount and quantity of carbon - asset transactions, the identity labels of participating entities, etc. By extracting the target information, the system can focus on the key data that all relevant parties recognize and can share.

[0083] S1222, retrieve the preset viewing template, fill the target information into the target slots of the preset viewing template, and set the slots in the preset viewing template without target information to be empty.

[0084] The system calls the preset viewing template that has been set in advance. This preset viewing template is designed according to the requirements and specifications of carbon - asset information management and contains a series of slots for filling information. The system accurately fills the previously extracted target information into the corresponding target slots in the preset viewing template. For the slots in the preset viewing template that do not match the target information, the system sets them to be empty. Such an operation makes the information presented in a standardized and structured manner, facilitating subsequent information management, query, and sharing.

[0085] S1223, count the target slots and the empty slots to obtain the information - data encoding of the first - path node.

[0086] The target slot represents the part of the information that can be viewed, while the empty slot represents the part of the information that cannot be viewed. Based on the status, position, and relevant rules of these slots, the system performs statistical processing on them and finally obtains the information data encoding of the third node corresponding to the first path node. This information data encoding contains key information about the viewability and specific content of the node information, providing an effective means for subsequent information storage, transmission, and security management.

[0087] Among them, the statistical process of obtaining the information data encoding of the first path node for the target slot and the empty slot includes:

[0088] S12231, statistically calculate the preset order and preset encoding corresponding to each slot.

[0089] For each slot in the preset view template, the system obtains its pre-set order number, such as 1, 2, 3, 4, etc., and the corresponding preset encoding, such as A, B, C, D, etc. These preset information provide standards and bases for subsequent generation of information data encoding, enabling each slot to have a clear identifier during the encoding process, ensuring the standardization and consistency of the encoding.

[0090] S12232, extract the character value of the target information, and combine the character value with the preset encoding to obtain the first sub-encoding of the corresponding target slot.

[0091] The system extracts the character value of the target information from the target slot of the preset view template. These character values represent the specific content of the target information. For example, information such as carbon emission allowances can be plaintext information. The system combines the extracted character values with the preset encoding corresponding to the target slot to obtain the first sub-encoding corresponding to each target slot. In this way, the content of the target information is combined with the preset encoding system to realize the digital representation of the target slot information, facilitating subsequent information integration and management.

[0092] S12233, determine the second sub-encoding corresponding to the empty slot, and obtain the information data encoding of the first path node based on the first sub-encoding and the second sub-encoding.

[0093] The system processes the empty slots in the preset view template. Determine the corresponding second sub-encoding for each empty slot. The second sub-encoding consists of preset characters or preset encodings, such as A, B, C, D, etc.

[0094] Among them, the process of determining the second sub-encoding corresponding to the empty slot and obtaining the information data encoding of the first path node based on the first sub-encoding and the second sub-encoding includes:

[0095] S122331. Delete the target slot to obtain the vacant order of all empty slots. Assign vacant characters to each empty slot according to the vacant order, and merge the vacant characters with the preset encoding to obtain the second sub-encoding of the empty slot.

[0096] The system first deletes the target slot from the preset viewing template to obtain the vacant order of all empty slots. Taking a template with 5 slots as an example, if the 2nd and 4th slots contain target information, after deleting these two slots, the order of the originally empty 1st, 3rd, and 5th slots will be rearranged as 1, 2, 3. The system assigns preset vacant characters, such as A, B, C, etc., to each empty slot according to this new vacant order, and merges these vacant characters with the corresponding preset encoding to obtain the second sub-encoding of each empty slot. This method not only encodes the empty slots but also increases the randomness of the encoding and improves the security of information by rearranging and assigning characters.

[0097] S122332. Merge the first sub-encoding and the second sub-encoding in a preset order to obtain the information data encoding.

[0098] The system merges the previously generated first sub-encoding and second sub-encoding in a preset order. The preset order can be determined according to the original number of the slot, the encoding rule, or other specific requirements. Through this merging operation, the encoding information of the target slot and the empty slot is integrated together to form a complete information data encoding. This information data encoding comprehensively reflects the information content and viewability of the third node of the first path node, providing a unified digital format for subsequent information storage, transmission, and analysis.

[0099] S123. If there is added unviewable information in the third role nodes corresponding to the same path node, mark the corresponding path node as the second path node.

[0100] When the system checks the information of the third role nodes corresponding to each path node in the historical generation path, once it finds that there is added unviewable information in the third role nodes corresponding to the same path node, it will mark this path node as the second path node. This operation helps to distinguish path nodes with different security levels and information visibility, providing a judgment basis for the refined assembly of the generation path of the successor assets, avoiding randomly including unviewable information in the publicly visible generation path, and ensuring the security of the carbon asset transfer information during sharing.

[0101] S124. Assemble the first path node and / or the second path node with the successor node according to the assembly strategy to generate the first generation path.

[0102] Based on the previously marked first path node and second path node, the system integrates with the successor node according to the established assembly strategy to generate a complete first generation path of the successor asset, presenting the complete transfer context of the asset.

[0103] Among them, the assembly of the first path node and / or the second path node with the successor node according to the assembly strategy to generate the first generation path includes:

[0104] S1241, if it is determined that there are adjacent second path nodes, they are folded into a third path node, and the third path node is in a non-selectable state.

[0105] The system traverses all second path nodes to determine whether there are adjacent second path nodes. If so, in order to optimize the path structure and improve the clarity of information display, the system folds these adjacent second path nodes into a third path node. Since the second path node contains non-searchable information, the folded third path node is set to a non-selectable state to prevent users from accidentally obtaining non-searchable information and further ensuring information security.

[0106] S1242, connect and assemble the remaining first path nodes, third path nodes, and successor nodes in chronological order to obtain the first generation path.

[0107] The system connects and assembles the processed remaining first path nodes, newly generated third path nodes, and successor nodes in chronological order during the carbon asset transfer process. The chronological order can accurately reflect the state changes of the asset at different stages, ensuring that the generated first generation path truly restores the transfer trajectory of the successor asset and providing reliable data for subsequent tracing of carbon assets.

[0108] S2, after determining that a transaction request occurs between any second role node and the first role node, update the first generation path corresponding to the original asset or successor asset of the transaction to obtain the second generation path.

[0109] See Figure 2 , when the system detects a transaction request between any second role node and the first role node, it means that the carbon asset has undergone a transfer. In order to accurately record this transaction behavior and the latest state of the asset, the system needs to update the first generation path corresponding to the original asset or successor asset involved in the transaction, so as to obtain the second generation path reflecting the latest transfer situation of the asset and ensure the real-time and traceability of carbon asset information.

[0110] In some embodiments, the updating of the first generation path corresponding to the original asset or successor asset of the transaction to obtain the second generation path after determining that a transaction request occurs between any second role node and the first role node includes:

[0111] S21, establish a fourth path node corresponding to the current transaction.

[0112] After the system confirms the transaction request, it will create a new path node, namely the fourth path node. This node is specifically generated for the current transaction and carries key information related to the current transaction, such as the identities of the two trading parties, the transaction time, the type and quantity of carbon assets traded, etc. The fourth path node serves as a recording point for the current transaction in the carbon asset generation path, providing a clear identifier for subsequent information query and traceability.

[0113] S22, connect the fourth path node with the first generation path and update to obtain a second generation path, determine the order of the newly added nodes and add sequence codes.

[0114] The system connects the newly established fourth path node with the original first generation path. Through this connection operation, the current transaction information is incorporated into the historical transfer path of carbon assets to form a complete second generation path. At the same time, the system will determine the order of the fourth path node in the new path according to the transaction time and the order of each node in the first generation path, and add corresponding sequence codes to it. The sequence codes help to clearly display the transfer order of carbon assets, facilitate the tracking and analysis of the asset transfer process, and ensure that the second generation path can accurately reflect the latest transfer status of carbon assets.

[0115] S3, determine the first distributed key of the newly added nodes in the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset.

[0116] To ensure the security of the newly added nodes in the second generation path and the integrity of the data, the system needs to generate a corresponding first distributed key based on the characteristics of the first role node, the second role node, and the attributes of the first carbon asset. This key will be used to encrypt and verify the data of the newly added nodes, ensuring that only authorized nodes can access and process relevant information, enhancing the security and credibility of carbon asset transactions on the blockchain.

[0117] In some embodiments, the determining the first distributed key of the newly added nodes in the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset includes:

[0118] S31, extract the role information of the first role node and the second role node to obtain a first role code and a second role code.

[0119] The system extracts the role information of the first role node and the second role node from the blockchain. This role information may include the type of the node (such as enterprise, thermal power station, wind power station, etc.), relevant identifiers in the carbon trading market, etc. These encodings are the digital representations of the role information, facilitating subsequent calculations and combinations during the key generation process.

[0120] S32. Determine the corresponding attribute encoding according to the attributes of the first carbon asset.

[0121] The system determines the corresponding attribute encoding according to the attributes of the first carbon asset. The attributes of the first carbon asset include its type (such as carbon emission allowance, green power value, green certificate value, etc.), validity period, etc. For different attributes, the system has pre-set corresponding encodings. For example, a green certificate may correspond to a specific pre-set encoding. The system converts the attributes of the first carbon asset into attribute encodings, providing key asset characteristic information for subsequent key generation.

[0122] S33. Sort the information data encoding, sequence encoding, first role encoding, second role encoding, and attribute encoding according to their generation times to obtain a fusion value, and perform a hash calculation on the fusion value to obtain the first distributed key.

[0123] The system sorts the previously obtained information data encoding (generated during the path node marking and assembly process), sequence encoding (determined when updating the generated path), first role encoding, second role encoding, and attribute encoding according to their generation times.

[0124] The purpose of sorting is to ensure the sequential consistency of these encodings during the fusion process, making the key generated each time deterministic. Combine the sorted encodings into a fusion value. The system performs a hash calculation on this fusion value. Hash calculation is an encryption algorithm of the prior art, which converts input data of any length into a hash value of a fixed length. The obtained hash value is the first distributed key of the newly added node of the second generation path. Each path node has its corresponding first distributed key, which is used to encrypt and protect the data of that node, ensuring the secure storage and transmission of data on the blockchain.

[0125] S4. Obtain the key structure tree of the second generation path based on the first distributed key and the second distributed key, and update and distribute the key structure tree to the corresponding role nodes based on the role relationship.

[0126] To achieve effective management and secure access control of the data of each node on the second generation path, the system needs to construct a key structure tree based on the generated first distributed key and second distributed key, and update and distribute it according to the role relationship, enabling each role node to operate on the relevant data according to its own permissions, and ensuring the security and accessibility of carbon asset trading information.

[0127] In some embodiments, obtaining a key structure tree of a second generation path based on a first distributed key and a second distributed key, and after updating the key structure tree based on the role relationship, distributing it to corresponding role nodes, includes:

[0128] S41. Using the keys of other path nodes in the second generation path except for the newly added nodes as the second distributed key.

[0129] The system traverses the second generation path, and determines the keys owned by other path nodes except for the newly added nodes as the second distributed key. These second distributed keys represent the security identifiers of other nodes on the second generation path, and are used to reflect the relationships and permission hierarchies among nodes when constructing the key structure tree later, ensuring that the keys of each node can be reasonably arranged in the key structure tree.

[0130] S42. Generating a parent node corresponding to the second generation path, and generating child nodes corresponding to the first distributed key and the second distributed key, and obtaining a key structure tree based on the parent node and the child nodes.

[0131] The system first generates a parent node corresponding to the second generation path. This parent node serves as the root node of the entire key structure tree, playing a leading and integrating role. The system respectively generates child nodes corresponding to the first distributed key and the second distributed key. These child nodes are connected to the parent node, forming a hierarchical structure. The child node corresponding to the first distributed key represents the key information of the newly added node, and the child node corresponding to the second distributed key represents the key information of other path nodes. By combining the parent node and the child nodes, the system constructs a complete key structure tree. This key structure tree clearly shows the relationships among the keys of each node on the second generation path, providing an intuitive model for subsequent key management and access control.

[0132] S43. Determining third role nodes corresponding to the first role node and the second role node in the upper dimension, and after updating the key structure tree based on the third role nodes, distributing it to corresponding role nodes.

[0133] The system determines the third role nodes in the upper dimension of the first role node and the second role node in the role structure. These third role nodes usually have higher management authorities or broader scope of responsibilities. The system updates the constructed key structure tree according to the authorities and role relationships of the third role nodes. The updated content may include adjusting the authority relationships between nodes, adding or deleting access authorities for certain nodes, etc. The system distributes the updated key structure tree to the corresponding role nodes. After receiving the key structure tree, each role node can perform corresponding operations on the data on the second generation path, such as decryption, reading, or modification, so as to achieve the secure management and effective utilization of carbon asset trading information.

[0134] Among them, the determination of the third role nodes corresponding to the upper dimension of the first role node and the second role node, and the distribution to the corresponding role nodes after updating the key structure tree based on the third role nodes, includes:

[0135] S431, retrieve the role structure trees corresponding to the first role node and the second role node respectively.

[0136] The system retrieves the role structure trees corresponding to the first role node and the second role node respectively from the storage system of the blockchain. The role structure tree is a hierarchical data structure that describes the positions and mutual relationships of each role node in the entire role system, including information such as the superior-subordinate and subordinate relationships between different roles, and it is preset by the user.

[0137] S432, determine the third role nodes in the upper dimension of the first role node and the second role node in the role structure tree, and count the role management forms generated by the third role nodes corresponding to each first role node and second role node.

[0138] In the retrieved role structure tree, the system locates the positions of the first role node and the second role node. Then, according to the hierarchical relationship of the role structure tree, it searches upward for the third role nodes in its upper dimension. These third role nodes usually have higher-level authorities. The system counts the third role nodes corresponding to each first role node and second role node, and organizes the relevant information into a role management form. The role management form can be a table or a document, which mainly records the corresponding relationships between each first role node and second role node and the third role nodes, and clarifies the authorities of different role nodes in key management and data access.

[0139] S433, fill the initial first distributed key or second distributed key into the role management form, and distribute it to the corresponding role nodes after updating the key structure tree based on the role management form.

[0140] The system fills the initial first distributed key or second distributed key into the role management form. The role management form records the correspondence between different role nodes and keys. Through the filling operation, each role node can be associated with the corresponding key.

[0141] Based on the information in the role management form, the system updates the previously constructed key structure tree. The update operation may include adjusting the access rights of key nodes, modifying the association relationships between nodes, etc., to ensure that the key structure tree can accurately reflect the rights and responsibilities of different role nodes in carbon asset transactions. The system distributes the updated key structure tree to the corresponding role nodes. After each role node receives the key structure tree, it can securely access and operate on the relevant data on the second generation path according to its own permissions in the role management form, thereby realizing the effective management and protection of carbon asset transaction information.

[0142] In some embodiments, distributing the updated key structure tree to the corresponding role nodes based on the role management form includes:

[0143] Determine the management right key of each third role node in the role management form. The management right key is one and corresponds to all other managed role nodes.

[0144] The system generates a unique management right key for each third role node in the role management form. This management right key is specifically set for the third role node and is used to control the permissions of all other role nodes under its management. Its uniqueness lies in that a third role node has only one management right key, and this key has a corresponding relationship with all other role nodes managed by the third role node. In this way, the unified management of multiple managed role nodes is realized, and the permission management process is simplified.

[0145] Fill the management right key into the role management form and correspond it to the first distributed key or second distributed key, so as to call the first distributed key or second distributed key based on the management right key.

[0146] The system fills the generated management right key into the role management form and establishes a corresponding relationship between it and the first distributed key or second distributed key. This corresponding relationship enables the management right key to call the first distributed key or second distributed key corresponding to the managed role node, realizing flexible control of key usage and permission grading.

[0147] Distribute the first distributed key or second distributed key and the management right key to the corresponding role nodes.

[0148] The system distributes the first distributed key or the second distributed key and the corresponding management right key to the corresponding role nodes. The first distributed key or the second distributed key ensures that each role node can encrypt and decrypt the data of the path nodes it is responsible for, guaranteeing the security of the data. Through this key distribution method, each role node can securely access and operate on the data on the second generation path according to its own permissions, realizing the secure sharing and effective management of carbon asset trading information among different role nodes.

[0149] See Figure 3 , which is a schematic structural diagram of a blockchain-based carbon asset encryption platform provided by an embodiment of the present invention. The platform includes:

[0150] The first module is used to obtain the first generation path of each first carbon asset of the first role node in the blockchain, and divide the first carbon asset into original assets or successor assets based on the first generation path;

[0151] The second module is used to update the first generation path corresponding to the original asset or successor asset of the transaction to obtain a second generation path after determining that a transaction request occurs between any second role node and the first role node;

[0152] The key module is used to determine the first distributed key of the newly added node of the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset;

[0153] The distribution module is used to obtain the key structure tree of the second generation path based on the first distributed key and the second distributed key, and update and distribute the key structure tree to the corresponding role nodes based on the role relationship.

[0154] The present invention also provides a storage medium, in which a computer program is stored. When the computer program is executed by a processor, it is used to implement the methods provided by the above various embodiments.

[0155] Among them, the storage medium can be a computer storage medium or a communication medium. The communication medium includes any medium that facilitates the transmission of a computer program from one place to another. The computer storage medium can be any available medium that can be accessed by a general or special-purpose computer. For example, the storage medium is coupled to the processor so that the processor can read information from the storage medium and write information to the storage medium. Of course, the storage medium can also be a component of the processor. The processor and the storage medium can be located in an Application Specific Integrated Circuit (ASIC). In addition, the ASIC can be located in the user equipment. Of course, the processor and the storage medium can also exist as discrete components in the communication device. The storage medium can be a read-only memory (ROM), a random access memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, etc.

[0156] The present invention also provides a program product, which includes execution instructions stored in a storage medium. At least one processor of the device can read the execution instructions from the storage medium, and the execution of the execution instructions by at least one processor enables the device to implement the methods provided by the above various embodiments.

[0157] In the above embodiments of the terminal or the server, it should be understood that the processor can be a Central Processing Unit (CPU), and can also be other general-purpose processors, Digital Signal Processors (DSPs), Application Specific Integrated Circuits (ASICs), etc. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in combination with the present invention can be directly embodied as being executed and completed by a hardware processor, or can be executed and completed by a combination of hardware and software modules in the processor.

[0158] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention and are not intended to limit them. Although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that they can still modify the technical solutions described in the foregoing embodiments, or perform equivalent replacements for some or all of the technical features; and these modifications or replacements do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the various embodiments of the present invention.

Claims

1. A carbon asset encryption method based on blockchain, characterized in that, Including: Obtain the first generation path of each first carbon asset of the first role node in the blockchain, and divide the first carbon asset based on the first generation path to obtain original assets or successor assets, including: The first carbon asset includes at least one of carbon emission allowances, green electricity values, and green certificate values; If the first carbon asset is an original asset, generate an original node and the corresponding first generation path; If the first carbon asset is a successor asset, generate a successor node, obtain the original historical generation path corresponding to the successor asset, and assemble the first generation path based on the viewing permission of the historical generation path and the successor node, including: Obtain multiple third role nodes corresponding to other identities of each path node in the historical generation path; If the third role nodes corresponding to the same path node all add viewable information, mark the corresponding path node as the first path node; If there is non-viewable information added among the third role nodes corresponding to the same path node, mark the corresponding path node as the second path node; Assemble the first path node and / or the second path node with the successor node according to the assembly strategy to generate the first generation path; After determining that a transaction request occurs between any second role node and the first role node, update the first generation path corresponding to the original asset or successor asset of the transaction to obtain the second generation path; Determine the first distributed key of the new node of the second generation path based on the first role node, the second role node, and the attributes of the first carbon asset; Obtain the key structure tree of the second generation path based on the first distributed key and the second distributed key, and update and distribute the key structure tree to the corresponding role nodes based on the role relationship.

2. The method according to claim 1, wherein The assembling the first path node and / or the second path node with the successor node according to the assembly strategy to generate the first generation path includes: If it is determined that there are adjacent second path nodes, fold them into one third path node, and the third path node is in a non-selectable state; Connect and assemble the remaining first path nodes, third path nodes, and successor nodes in chronological order to obtain the first generation path.

3. The method according to claim 1, wherein The marking the corresponding path node as the first path node if the third role nodes all add viewable information includes: Extract the target information that exists in all the viewable information added by all the third role nodes; Invoke the preset viewing template, fill the target information into the target slot of the preset viewing template, and set the slots without target information in the preset viewing template to be empty; Statistically obtain the information data encoding of the first path node for the target slot and the empty slots.

4. The method according to claim 3, wherein The statistically obtaining the information data encoding of the first path node for the target slot and the empty slots includes: Statistically obtain the preset order and preset encoding corresponding to each slot; Extract the character value of the target information, and combine the character value with the preset encoding to obtain the first sub-encoding of the corresponding target slot; Determine a second sub - code corresponding to an empty slot, and obtain the information data code of the first path node based on the first sub - code and the second sub - code.

5. The method according to claim 4, wherein the step of determining a second sub - code corresponding to an empty slot and obtaining the information data code of the first path node based on the first sub - code and the second sub - code includes: Delete the target slot to obtain the vacancy order of all empty slots, assign vacancy characters to each empty slot according to the vacancy order, and merge the vacancy characters with a preset code to obtain the second sub - code of the empty slot; Merge the first sub - code and the second sub - code in a preset order to obtain the information data code.

6. The method according to claim 1, wherein after determining that a transaction request occurs between any second role node and the first role node, the step of updating the first generation path corresponding to the original asset or the successor asset of the transaction to obtain a second generation path includes: Establish a fourth path node corresponding to this transaction; Connect the fourth path node with the first generation path and update to obtain a second generation path, determine the order of the new nodes and add order codes.

7. The method according to claim 6, wherein the step of determining the first distributed key of the new node in the second generation path based on the first role node, the second role node and the attributes of the first carbon asset includes: Extract the role information of the first role node and the second role node to obtain a first role code and a second role code; Determine the corresponding attribute code according to the attributes of the first carbon asset; Sort the information data code, the order code, the first role code, the second role code, and the attribute code according to the generation time to obtain a fusion value, and perform a hash calculation on the fusion value to obtain the first distributed key.

8. The method according to claim 6, wherein the step of obtaining the key structure tree of the second generation path based on the first distributed key and the second distributed key, and updating and distributing the key structure tree to the corresponding role nodes based on the role relationship includes: Use the keys of the other path nodes in the second generation path except the new nodes as the second distributed key; Generate a parent node corresponding to the second generation path, and generate child nodes corresponding to the first distributed key and the second distributed key, and obtain the key structure tree based on the parent node and the child nodes; Determine the third role node corresponding to the upper dimension of the first role node and the second role node, update the key structure tree based on the third role node and distribute it to the corresponding role nodes.

9. The method according to claim 8, wherein the step of determining the third role node corresponding to the upper dimension of the first role node and the second role node, updating the key structure tree based on the third role node and distributing it to the corresponding role nodes includes: Retrieve the role structure trees corresponding to the first role node and the second role node respectively; Determine the third role node located in the upper dimension of the first role node and the second role node in the role structure tree, and count the role management forms generated by the third role nodes corresponding to each first role node and second role node; Fill the initial first distributed key or second distributed key into the role management form, and distribute it to the corresponding role nodes after updating the key structure tree based on the role management form.

10. The method according to claim 9, wherein the distributing to the corresponding role nodes after updating the key structure tree based on the role management form includes: Determine the management right key of each third role node in the role management form, and there is 1 management right key corresponding to all other managed role nodes; Fill the management right key into the role management form and correspond it to the first distributed key or the second distributed key, so as to call the first distributed key or the second distributed key based on the management right key; Distribute the first distributed key or the second distributed key and the management right key to the corresponding role nodes.

11. A platform for the blockchain-based carbon asset encryption method according to claim 1, characterized in that, including: The first module is used to obtain the first generation path of each first carbon asset of the first role node in the blockchain, and divide the first carbon asset into original assets or successor assets based on the first generation path; The second module is used to update the first generation path corresponding to the original asset or successor asset of the transaction to obtain the second generation path after determining that a transaction request occurs between any second role node and the first role node; The key module is used to determine the first distributed key of the newly added node of the second generation path based on the first role node, the second role node and the attributes of the first carbon asset; The distribution module is used to obtain the key structure tree of the second generation path based on the first distributed key and the second distributed key, and distribute it to the corresponding role nodes after updating the key structure tree based on the role relationship.

Images