Supply chain data sharing system based on block chain and multiple cryptography technology

Abstract

The invention relates to a supply chain data sharing system based on a block chain and multiple cryptography technologies. Comprising a block chain storage layer, a cryptography function layer, a business logic layer and a user interaction layer. The block chain storage layer is responsible for distributed storage and tracing of data; the cryptographic function layer integrates three cryptographic technologies of distributed attribute-based encryption, zero-knowledge proof and verifiable credentials, and optimizes the functional characteristics of DABE, so that the DABE supports the characteristics of outsourcing calculation, data layering, key responsibility and the like, and realizes data access control, privacy protection and identity authentication; the business logic layer processes a business process related to the supply chain; the user interaction layer adopts a front-end and back-end separation architecture to provide a friendly operation interface. The method is mainly characterized in that through cooperation of multiple cryptography technologies, access control, data privacy protection and identity authentication with finer granularity are achieved while data sharing convenience is guaranteed, full-cycle protection of data circulation is achieved, and the safety and availability of supply chain data sharing are improved.

Description

Technical Field

[0001] The present invention belongs to the technical fields of blockchain technology and cryptography technology, and particularly relates to a data sharing system applied to supply chain management. Background Art

[0002] With the deepening of the globalization process and the rapid development of digital technology, modern supply chains have evolved into an extremely complex multi-party collaboration network. This network includes many participants such as raw material suppliers, manufacturers, logistics service providers, distributors, retailers, etc. They need to frequently share various types of data such as order information, inventory data, logistics tracks, quality certifications, etc. to achieve the efficient collaborative operation of the supply chain. However, in the process of digital transformation, supply chain data sharing faces a series of severe challenges: 1. Data silos: In traditional supply chains, the data systems of each participant are independent of each other, forming information silos. This leads to phenomena such as information asymmetry between upstream and downstream enterprises, high costs for cross-organizational data sharing, lack of unified data standards and exchange mechanisms, and difficulty in achieving end-to-end visualization of the supply chain; 2. Data security risks: First, using traditional centralized databases is prone to being targeted by hackers, and the centralized setting makes data face leakage risks during transmission and storage. In the event of a data leak, it is difficult to trace and locate the source and responsible party of the data leak; 3. Data privacy protection: Supply chain participants often need to share data while protecting sensitive business secrets, and at the same time, the data needs to support fine-grained controlled shared access.

[0003] In recent years, the academic and industrial communities have developed a number of novel technologies, such as blockchain, attribute-based encryption, zero-knowledge proof, and verifiable credentials. Blockchain has characteristics such as being distributed, immutable, and traceable. Nodes in the blockchain network jointly maintain a distributed ledger and ensure data consistency and reliability through a consensus mechanism, providing a trusted infrastructure for data sharing. Attribute-based encryption technology provides a solution for achieving fine-grained access control of data. This technology originated from Shamir's identity-based encryption theory. After being formally proposed by Sahai and Waters in 2005, it has developed into two main branches: Ciphertext-Policy Attribute-Based Encryption (CP-ABE) and Key-Policy Attribute-Based Encryption (KP-ABE). Among them, in CP-ABE, the ciphertext is bound to the access policy, that is, when encrypting, the access policy is used to encrypt the data to obtain the ciphertext, while the key is bound to the attribute set. Only when the attributes in the attribute set can satisfy the access policy corresponding to the ciphertext can the key be used to decrypt the ciphertext. Under the subdivision research of CP-ABE, a branch called DABE was proposed by Lewko et al. in 2011. The birth of DABE solved the defect in traditional CP-ABE schemes that only supported a single attribute authority and can support multiple attribute authorities in charge of different attribute sets, greatly increasing the flexibility and practicality of CP-ABE.

[0004] Zero Knowledge Proof (ZKP) technology provides an ideal solution for the proof of private data. The concept of zero-knowledge proof was first proposed by a research team at the Massachusetts Institute of Technology in 1985. Its core idea is to enable the data prover to prove that the data it holds satisfies specific constraints without revealing the original data to the verifier, achieving a perfect balance between data verification and privacy protection. The initial form of zero-knowledge proof is an interactive protocol that requires multiple rounds of interaction between the prover and the verifier. Such protocols ensure security through a probabilistic verification mechanism, such as the classic Schnorr protocol. After the 1990s, researchers began to explore non-interactive zero-knowledge proofs to reduce communication overhead and improve practicality, such as the proposal of zk-SNARKs. In 2016, the Groth16 algorithm proposed by Jens Groth further optimized the proof generation efficiency and verification speed and became the mainstream protocol.

[0005] The emergence of Verifiable Credential (VC) technology has created a new paradigm for decentralized identity authentication. A VC is a digital credential containing an encrypted signature, issued by an issuer (such as a government or an institution), containing statements about a subject (user, device, organization) (such as name, age, qualifications), and its authenticity is verified by a verifier. VC originated from the digital identity standardization work of the W3C and has been widely used in the fields of digital identity and qualification authentication due to its characteristics of decentralization, autonomy, controllability, verifiability, and selective disclosure.

[0006] Facing the complex challenges of supply chain data sharing, a single technology is difficult to provide a complete solution. Only by organically integrating technologies such as blockchain, DABE, ZKP, and VC can a truly secure, controllable, and efficient supply chain data sharing system be constructed. Among them, blockchain provides a trusted infrastructure to ensure the immutability and traceability of data; DABE realizes fine-grained access control to protect data security; ZKP supports data verification under privacy protection; and VC provides a trusted identity authentication mechanism. This idea of multi-technology collaboration is also the core innovation of this invention. Summary of the Invention

[0007] The purpose of this invention is to propose a supply chain data sharing system based on blockchain and multiple cryptographies for the problems existing in the current supply chain data sharing. Through a hierarchical design, this system organically combines blockchain, multiple cryptographic functions, and business logic to achieve secure, controllable, and trusted supply chain data sharing. The core of this invention lies in the collaboration of multiple cryptographic technologies and the optimization of the DABE scheme among them to support features such as outsourced computing and hierarchical encryption, providing more flexible and fine-grained access control, lower computational overhead, as well as privacy protection and identity authentication mechanisms while ensuring the security of data sharing.

[0008] A supply chain data sharing system based on blockchain and multiple cryptographic technologies proposed by this invention includes a blockchain storage layer, a cryptographic function layer, a business logic layer, and a user interaction layer, where:

[0009] Blockchain storage layer: As the underlying layer for managing and storing information, the storage layer uses blockchain as its underlying support. Blockchain is used for distributed data storage; it uses distributed ledger technology to store encrypted data and transaction records, uses a consensus mechanism to ensure data consistency, and provides an integrity verification mechanism for data storage, supporting the whole-process traceability of data operations, and ensuring the openness and transparency of the data circulation link;

[0010] Cryptography function layer: It adopts the DABE module, ZKP module and VC module, provides corresponding interfaces to the business logic layer for on-demand invocation, and realizes functions such as data outsourcing and hierarchical encryption and decryption, data conditional verification, identity authentication, attribute key generation and accountability;

[0011] Business logic layer: This layer is implemented by writing smart contracts, responsible for coordinating the invocation of cryptography function modules, realizing the specific data circulation business processes and business hard rule coding of the supply chain; relying on the automatic execution of smart contracts and the immutable characteristics of the blockchain ledger, ensuring that every invocation is traceable; the steps of the business logic layer are as follows:

[0012] (1) Initialization of system public parameters;

[0013] (2) Login registration and corresponding identity verification of supply chain participants, involving the invocation of credential generation and credential verification algorithms in the VC module here;

[0014] (3) Data permission management of supply chain participants, involving the invocation of attribute key generation algorithms in the DABE module here;

[0015] (4) Encryption, decryption, uploading and downloading of supply chain-related data, involving the invocation of data pre-encryption and decryption algorithms, data hierarchical encryption and decryption algorithms, conversion key generation algorithms, and search trapdoor generation and matching algorithms in the DABE module here;

[0016] (5) Privacy verification of supply chain-related data, involving the invocation of commitment generation, construction and verification proof algorithms in the ZKP module here;

[0017] (6) Audit of supply chain data circulation records, involving the invocation of key confirmation algorithms in the DABE module here;

[0018] User interaction layer: Each participant is a registered user in the system, including the attribute authority AA, the certification center RC, the audit center AC, the outsourcing computing node NODE, and the supply chain participants SU. Among them, SU can be further divided into two types: data holder SDO and data accessor SDU. It is implemented by building a front-end and back-end separated system using the SpringBoot+Vue framework. SpringBoot provides RESTFul interfaces to interact with smart contracts, and needs to store default information according to user levels. At the same time, it is also necessary to further screen for users' incorrect inputs, malicious attack operations, etc., to ensure the robustness and security of its own system; while Vue provides a simple and easy-to-use front-end interaction interface, communicates with the back-end through RESTFul interfaces, and users can log in to the system through the web page or mobile terminal to perform data circulation operations;

[0019] The operation process of the supply chain data sharing system is as follows:

[0020] (1) After the blockchain network uses the initialization algorithm of the DABE module, the attribute authority AA, the certification center RC, the outsourcing computing node NODE, and the supply chain participant SU register entity information on the chain and perform corresponding initializations;

[0021] (2) The supply chain participant SDU submits an identity authentication application for holding the attribute Attr to the certification center RC, and relevant certification materials need to be attached; after receiving the request, RC verifies the materials, and after passing, uses the credential generation algorithm of the VC module to generate a certification credential VC for Attr for SDU;

[0022] (3) The supply chain participant SDU submits the certification credential VC of the attribute Attr to the attribute authority AA, and AA uses the credential verification algorithm of the VC module to verify the validity and legality of VC. After passing, it uses the key generation algorithm of the DABE module to generate an attribute key USK of the attribute Attr for SDU;

[0023] (4) The supply chain participant SDO selects an access policy W, uses the policy hiding algorithm of the DABE module to generate a corresponding LSSS access control matrix A, and hides it by calculating the hash value of the attribute values in W; then hands the access control matrix A to the outsourcing computing node NODE to use the pre-encryption algorithm of the DABE module to obtain the pre-encrypted ciphertext CT * Then continue to encrypt the hierarchical data M using the data hierarchical encryption algorithm of the DABE module locally 1 ,...,M n to obtain the complete ciphertext CT; finally, it is necessary to select the search keyword SKW of the ciphertext and generate a corresponding search keyword index IND, and save the ciphertext CT and the keyword index IND on the chain, and the blockchain ensures the integrity of the data;

[0024] (5) The supply chain participant SDU uses the attribute key USK and the search keyword SKW, uses the search trapdoor generation algorithm of the DABE module to generate a search trapdoor TD, and submits it to the blockchain to use the trapdoor verification algorithm of the DABE module to perform search matching of the ciphertext; when the ciphertext CT that matches the keyword on the chain is found, it is returned to SDU;

[0025] (6) The supply chain participant SDU uses the conversion key generation algorithm of the DABE module, generates a conversion key pair TPK and TSK using the attribute key USK, and gives TPK and the ciphertext CT to the outsourcing computing node NODE. The NODE uses the pre-decryption algorithm of the DABE module to obtain the intermediate decrypted ciphertext X. Then, SDU uses the data hierarchical decryption algorithm of the DABE module and performs the first-level decryption locally using TSK. If SDU needs to access higher-level data, it directly applies to the SDO for the decryption key K n , combines it with X to decrypt and obtain the hierarchical data M n ;

[0026] (7) When the supply chain participant SDU wants to verify the remaining commercially sensitive data N that is not included in M after viewing the plaintext data M, it can request the data holder SDO corresponding to the data to generate a zero-knowledge proof for the data N. The SDO uses the commitment generation algorithm of the ZKP module to first generate a commitment C for the data N, and then uses the proof construction algorithm of the ZKP module to generate a proof π for the commitment C and submit it to SDU. SDU can verify π through the verification proof algorithm of the ZKP module, thereby realizing the verification of the data N;

[0027] (8) When there is improper use of USK, such as privately distributing keys or stealing others' keys, the audit center AC can use the key confirmation algorithm of the DABE module to confirm whether the USK is correctly generated and the true ownership of the USK, thereby auditing and holding accountable the supply chain participants who misuse the USK.

[0028] In the present invention, the initialization algorithm of the DABE module adopted in the cryptographic function layer in step (1) is specifically that the system will generate a bilinear group of prime order and two collision-resistant hash functions as global parameters GP. In addition, the attribute authority will also be initialized to generate the public and private key pairs APK and ASK of the authority, as well as the declared set of attributes it manages.

[0029] In the present invention, the credential generation algorithm of the VC module in step (2) is specifically that the certification authority checks the materials provided by the supply chain participant. If the materials are true, it will generate a certification credential VC, which includes relevant materials, the user unique identifier GID, and a time stamp t, used to represent the validity period of VC. After expiration, it needs to be re-verified.

[0030] In the present invention, the credential verification algorithm of the VC module in step (3) is specifically that the supply chain participant applies to the attribute authority for the attribute key with the VC. The attribute authority will verify the legality of the VC. The attribute key generation algorithm of the DABE module is specifically that after the attribute authority verifies the VC, it will generate the attribute key USK for the participant.

[0031] In the present invention, for the policy hiding algorithm of the DABE module in step (4), specifically, the supply chain participant selects the access policy W required for encryption, generates the corresponding LSSS access matrix A, and calculates the hash value of the involved attributes Attr for hiding; for the pre-encryption algorithm, specifically, the supply chain participant provides the LSSS access matrix A after attribute hiding, and through the use of the public key APK of the attribute authority, the outsourcing computing node will perform partial encryption to obtain the intermediate ciphertext CT. * ; for the data hierarchical encryption algorithm, specifically, the supply chain participant uses the intermediate ciphertext CT * to continue encrypting the hierarchical data M 1 ,..., M n to obtain the complete ciphertext CT, and selects the search keyword SKW of the ciphertext and generates the corresponding search keyword index IND.

[0032] In the present invention, for the search trapdoor generation algorithm of the DABE module in step (5), specifically, the supply chain participant uses the attribute key USK and the desired search keyword SKW to generate the search trapdoor TD; for the trapdoor verification algorithm, specifically, the submitted trapdoor TD is used for search matching of the ciphertext, and when it matches successfully with the ciphertext CT, it is returned to the supply chain participant.

[0033] In the present invention, for the conversion key generation algorithm in step (6), specifically, the supply chain participant can locally generate an outsourcing key pair TPK and TSK using the attribute key USK and provide them to the outsourcing computing node for decryption; for the pre-decryption algorithm, specifically, the outsourcing computing node uses TPK to perform pre-decryption to obtain the intermediate decrypted ciphertext X; for the data hierarchical decryption algorithm, specifically, the supply chain participant uses the intermediate decrypted ciphertext X and TSK to perform decryption locally to obtain the first-level data M 1 , and then requests the corresponding decryption key K n from the data holder at the corresponding level, and uses it for decryption to obtain the corresponding data M n .

[0034] In the present invention, for the commitment generation algorithm in step (7), specifically, the data holder in the supply chain is the prover, and generates a commitment C based on the original data M, which is used to hide the information of the data M and perform binding; for the construction proof algorithm, specifically, based on the commitment C and the constraint conditions to be proved, an arithmetic circuit is constructed to represent the data relationship to be proved, and a proof π for the commitment C is generated; for the verification proof algorithm, specifically, the verifier in the supply chain verifies the validity of the proof π without knowing the original data.

[0035] In the present invention, for the key confirmation algorithm in step (8), specifically, the user provides the attribute key USK, and the system auditor can perform validity verification on the USK, and when the verification passes, the unique user identifier GID bound to the USK can be obtained.

[0036] The beneficial effects of the present invention are as follows:

[0037] The technological innovation of the present invention is reflected in two aspects: Firstly, in the system design, through hierarchical design, the blockchain storage layer, cryptographic function layer, business logic layer, and user interaction layer are organically combined, and a complete supply chain data sharing system framework is realized for the complex data circulation scenarios in the supply chain; Secondly, in the core technology, the present invention not only expands the functions of DABE, adding features such as outsourcing computing, data layering, policy hiding, searchability, and key accountability, but also innovatively integrates with cryptographic technologies such as ZKP and VC to form a composite cryptographic tool layer, providing multiple functions such as data encryption, identity authentication, privacy verification, and data auditing, thus forming a complete supply chain data sharing solution. This innovative design of multi-technology collaboration breaks through the limitations of single technology and provides systematic technical support for complex supply chain data sharing scenarios.

[0038] The present invention has important practical significance in the field of supply chain data sharing. In modern supply chains, multiple participants such as raw material suppliers, manufacturers, logistics service providers, and distributors need to frequently exchange sensitive data. The system of the present invention provides a secure and controllable data sharing solution for them: through DABE, fine-grained access control of supply chain data such as purchase orders and inventory data is realized; by using ZKP, suppliers can prove that indicators such as inventory levels and production capacities meet requirements without exposing specific data; with the help of VC, trusted identity authentication of supply chain participants is achieved; at the same time, the blockchain ensures that the entire process of data flow is traceable. This can not only effectively prevent the risk of data leakage, protect business secrets, but also significantly improve the supply chain collaboration efficiency, reduce the trust cost, and provide strong support for the digital transformation of the supply chain. Brief Description of the Drawings

[0039] Figure 1 It is a schematic diagram of the system architecture of the present invention.

[0040] Figure 2 It is a schematic diagram of the interaction of each entity of the system of the present invention.

[0041] Figure 3 It is a schematic diagram of the working process of the system of the present invention in the medical supply chain scenario. Detailed Embodiments

[0042] The present invention will be further described below with reference to the accompanying drawings through embodiments.

[0043] Embodiment 1: As Figure 1As shown in the figure, the system of the present invention includes four layers: the blockchain storage layer, the cryptography function layer, the business logic layer, and the user interaction layer. The blockchain storage layer can be implemented using a consortium blockchain architecture; the cryptographic function layer includes three modules: DABE, ZKP, and VC. The business logic layer includes logics such as data sharing and data privacy verification; in the user interaction layer, Vue framework is used for the front end, and Spring Boot framework is used for the back end. The outsourced computing node can adopt the Intel SGX trusted execution environment to ensure the confidentiality of the computing process.

[0044] The interaction process framework of the system of the present invention is as follows:

[0045] (1) Each participating party uses the initialization algorithm of the DABE module for corresponding initialization;

[0046] (2) The certification center RC uses the credential generation algorithm of the VC module to generate a certification credential VC for the supply chain participating party SDU;

[0047] (3) The attribute authority AA uses the key generation algorithm of the DABE module to generate an attribute key USK for the supply chain participating party SDU;

[0048] (4) The supply chain participating party SDO hands it over to the outsourced computing node NODE to use the pre-encryption algorithm of the DABE module to obtain the pre-encrypted ciphertext CT * and then uses the data hierarchical encryption algorithm of the DABE module locally to obtain the complete ciphertext CT and the keyword index IND;

[0049] (5) The supply chain participating party SDU uses the search trapdoor generation algorithm of the DABE module to generate a search trapdoor TD, and the blockchain uses the trapdoor verification algorithm of the DABE module to perform search matching on the ciphertext CT;

[0050] (6) The supply chain participating party SDU hands it over to the outsourced computing node NODE to use the pre-decryption algorithm of the DABE module to obtain the intermediate decrypted ciphertext X, and then the SDU uses the data hierarchical decryption algorithm of the DABE module to decrypt;

[0051] (7) The supply chain participating party SDO uses the commitment generation algorithm of the ZKP module to generate a commitment C to the data N, and then uses the construction proof algorithm of the ZKP module to generate a proof π and submit it to the SDU. The SDU can verify π by using the verification proof algorithm of the ZKP module, thereby realizing a verification of the data N;

[0052] (8) The audit center AC can use the key confirmation algorithm of the DABE module to confirm whether the USK is correctly generated and the true ownership of the USK, thereby auditing and holding accountable the supply chain participating parties that misuse the USK.

[0053] AsFigure 3 As shown in the figure, the pharmaceutical supply chain is selected as a typical implementation scenario. Through the full-process traceability of a certain batch of drugs, the specific working process of the system of the present invention is demonstrated, which is described in detail as follows:

[0054] The main participants in this implementation scenario include:

[0055] (1) Raw material supplier (SDO): Responsible for providing upstream materials such as drug raw materials and packaging materials, and providing data such as raw material purchase orders and quality inspection reports. It is necessary to ensure that the data is only visible to authorized drug manufacturers.

[0056] (2) Drug manufacturer (SDO / SDU): As the production entity, responsible for drug production and quality control, it is necessary to share production plans and inventory data, and at the same time verify the qualifications and quality inspection reports of raw material suppliers.

[0057] (3) Logistics service provider (SDO): Responsible for drug warehousing and transportation, and providing data such as logistics tracks, transportation status data, storage temperature records, and delivery status.

[0058] (4) Drug distributor (SDO / SDU): Responsible for drug wholesale and regional distribution, it is necessary to access logistics data to track goods, and at the same time provide retailers with sales records, inventory information, expiration date management data, etc.

[0059] (5) Medical institution (SDO / SDU): As the terminal participant, it purchases and uses drugs, and needs to record data such as purchase orders, medication records, and adverse reaction reports.

[0060] (6) Medical supply chain certification center (RC): Responsible for verifying the identities and qualifications of each participant in the supply chain, and issuing verifiable credentials (VC), such as ISO certification, enterprise qualification certificates, business licenses, etc.

[0061] (7) Supply chain attribute institution (AA): Responsible for verifying the verifiable credential VC and issuing attribute keys to SDU participants.

[0062] (8) Outsourced computing node (NODE): Responsible for performing pre-encryption and pre-decryption algorithms for SDO and SDU in the supply chain.

[0063] (9) Audit center (AC): Responsible for monitoring the compliance of the use of attribute keys USK in the system and tracing the responsible party for data leakage. The specific working process of the full-process traceability of a certain batch of drugs is as follows:

[0064] (1) Participant Registration and Authentication: Raw material suppliers, pharmaceutical manufacturers, logistics service providers, pharmaceutical distributors, and medical institutions submit relevant enterprise qualification materials such as business licenses, drug production / operation licenses, GMP certificates, and ISO certifications to the Certification Center RC. After verification, RC uses the VC module to generate VCs for the corresponding participants.

[0065] (2) Participants Obtain Attribute Keys: Each participant uses its own VC to apply to the Attribute Authority AA for an attribute key USK. The attribute keys that a pharmaceutical manufacturer can apply for include "Drug X Production License", "Pharmaceutical Business License", "GMP Certification", "Batch No. 2023 - BATCH - 00X Participant", etc. The attribute keys that a logistics service provider can apply for include "Road Transportation License", "GSP Certification", "GDP Certification", "Batch No. 2023 - BATCH - 00X Participant", etc. The attribute keys that pharmaceutical distributors and medical institutions can apply for include "Drug X Distribution License", "Medical Institution Practice License", "Medication License", "Batch No. 2023 - BATCH - 00X Participant", etc.

[0066] (3) Encrypt and Upload the Raw Material Quality Report to the Chain: The raw material supplier uses the DABE module to encrypt the raw material quality inspection report M of Batch No. 2023 - BATCH - 00X and upload it to the chain: The supplier selects the access policy "(Batch No. 2023 - BATCH - 00X Participant OR (GMP Certification AND Drug X Production License AND Pharmaceutical Business License))" and uses the hierarchical encryption method. The first - level data includes: product batch number, inspection date. Higher - level data includes: specific inspection values, specific ingredient ratios, production processes, and other confidential information, which requires dynamic authorization from the supplier (such as the pharmaceutical manufacturer submitting a matching proof of the order number for the corresponding batch). The supplier can choose to hide the attribute values in the access policy and then hand them over to the outsourced computing node NODE for pre - encryption to reduce the local computing burden, and finally encrypt locally to obtain the final ciphertext CT. Finally, generate a keyword index IND with the search keyword "Batch No. 2023 - BATCH - 00X" and upload it to the chain for storage.

[0067] (4) Obtaining Raw Material Quality Reports: The drug manufacturer uses the attribute key USK to search for and decrypt the raw material quality inspection report of batch number No. 2023 - BATCH - 00X through the DABE module. The manufacturer uses USK and the search keyword "batch number No. 2023 - BATCH - 00X" to generate a search trapdoor TD to search for the corresponding ciphertext CT on the chain. Then, USK is used for decryption. Decryption is successful only when the key held by the drug manufacturer meets the conditions of the access policy. The manufacturer can also choose to generate a transformation key TK and hand over part of the decryption process to the outsourced computing node NODE for execution, and finally obtain the report M through local hierarchical decryption.

[0068] (5) Verifying Raw Material Sensitive Data: The raw material supplier uses the ZKP module to generate a quality certificate π for the raw materials of batch number No. 2023 - BATCH - 00X and provides it to the drug manufacturer for verification and uploading to the chain. For sensitive data not included in the quality inspection report, if the drug manufacturer has a verification requirement, the raw material supplier can use the ZKP module to generate a certificate π for the sensitive data and provide it to the drug manufacturer for verification, and at the same time upload and save it on the chain.

[0069] (6) Encrypting and Uploading Drug Production Data to the Chain: The drug manufacturer uses the DABE module to encrypt the drug quality inspection report N of batch number No. 2023 - BATCH - 00X and upload it to the chain. The manufacturer selects the access policy "(participants of batch number No. 2023 - BATCH - 00X OR drug X distribution license OR (road transportation license AND GSP certification GDP certification) OR (medical institution practice license AND drug use license))" and uses a hierarchical encryption method. The first - level data includes: drug batch number, production date, and higher - level data includes: specific test values, specific ingredient ratios, production processes, and other confidential information, which requires dynamic authorization from the manufacturer (such as submitting a proof of order number matching for the corresponding batch). The subsequent steps are the same as step (3).

[0070] (7) Encrypting and Uploading Logistics Track Data to the Chain: The logistics service provider uses the DABE module to encrypt the drug transportation report R of batch number No. 2023 - BATCH - 00X and upload it to the chain. The service provider selects the access policy "(participants of batch number No. 2023 - BATCH - 00X AND (drug X distribution license OR (medical institution practice license AND drug use license)))" and uses a hierarchical encryption method. The first - level data includes: drug batch number, transportation status, and higher - level data includes: temperature and humidity monitoring data, specific transportation records, handover records, and other confidential information, which requires dynamic authorization from the service provider (such as submitting a proof of order number matching for the corresponding batch). The subsequent steps are the same as step (3).

[0071] (8) Drug production and logistics track tracing: Both drug distributors and medical institutions can use their respective attribute keys USK to search for and use the DABE module to decrypt the drug quality inspection report N and transportation report R of batch number No. 2023 - BATCH - 00X. The subsequent specific steps are the same as those in (4).

[0072] (9) Drug distribution and usage record on - chain: Drug distributors and medical institutions use the DABE module to encrypt the drug distribution report S and the corresponding medication report U of batch number No. 2023 - BATCH - 00X and upload them to the chain. Access policies can be set, such as "(participants of batch number No. 2023 - BATCH - 00X OR users of batch number No. 2023 - BATCH - 00X OR drug regulatory authority)" and the hierarchical encryption method is used. The first - level data and higher - level data are set according to specific needs. The subsequent steps are the same as those in step (3).

[0073] (10) Supply chain data verification: When a distributor needs to verify the private inventory quantity, the pharmaceutical company can use the ZKP module to generate a proof π, and the distributor can verify the sufficiency of the inventory without knowing the specific quantity.

[0074] (11) Data abuse auditing: If unauthorized data access or illegal key use is found on the chain, the auditing center AC can use the key confirmation algorithm in the DABE module to trace the actual holder of the key, query the relevant operation records through the blockchain, generate an audit report and handle it according to the degree of violation.

Claims

1. A supply chain data sharing system based on blockchain and multiple cryptography technologies, characterized by The system, from bottom to top, includes a blockchain storage layer, a cryptographic function layer, a business logic layer, and a user interaction layer, among which: Blockchain storage layer: The storage layer is the bottom layer for managing and storing information. It uses blockchain as its bottom layer support. Blockchain is used for distributed storage of data. It uses distributed ledger technology to store encrypted data and transaction records, uses consensus mechanism to ensure data consistency, and provides data storage integrity verification mechanism to support full traceability of data operations and ensure openness and transparency of data circulation links. Cryptography function layer: DABE module, ZKP module and VC module are used to provide corresponding interfaces to the business logic layer for on-demand calling, so as to realize data outsourcing and hierarchical encryption and decryption, data condition verification, identity authentication, attribute key generation and accountability; Business logic layer: This layer is implemented through smart contracts and is responsible for coordinating the call of cryptographic function modules to realize the supply chain-specific data circulation business process and business hard rule coding; with the help of the automatic execution of smart contracts and the tamper-proof characteristics of blockchain ledgers, it is ensured that every call has a basis to follow; the business logic layer operations are as follows: (A) Initialization of system common parameters; (B) Using the credential generation and credential verification algorithms in the VC module to implement login registration and corresponding identity verification for supply chain participants; (C) Using the attribute key generation algorithm in the DABE module to manage data rights of supply chain participants; (D) Using the data pre-encryption and decryption algorithm, data layered encryption and decryption algorithm, conversion key generation algorithm, and search trap generation and matching algorithm in the DABE module to achieve encryption, decryption, upload and download of supply chain related data; (E) Use the commitment generation, construction and verification proof algorithm in the ZKP module to complete the privacy verification of supply chain related data; (F) Use the key confirmation algorithm in the DABE module to audit the supply chain data circulation records; User interaction layer: includes six participants: attribute agency AA, certification center RC, audit center AC, outsourced computing node NODE and supply chain participant SU. SU can be divided into data holder SDO and data accessor SDU. Each participant is a registered user in the system. The front-end and back-end separation system is implemented by using the SpringBoot+Vue framework. SpringBoot provides a RESTFul interface to interact with smart contracts, and needs to store default information at the user level. At the same time, it also needs to further screen the user's mis-input and malicious attack operations to ensure the robustness and security of the system itself; Vue provides a simple and easy-to-use front-end interactive interface, communicates with the back-end through the RESTFul interface, and registered users log in to the system through the web or mobile terminal to perform data flow operations; The operation process of the supply chain data sharing system is as follows: (1) After the blockchain network uses the initialization algorithm of the DABE module, the attribute agency AA, the certification center RC, the outsourced computing node NODE and the supply chain participant SU register the entity information on the blockchain and perform corresponding initialization; (2) The data accessor SDU submits an identity authentication application for the attribute Attr to the authentication center RC, and needs to attach relevant authentication materials; after receiving the request, the authentication center RC verifies the materials, and after passing the verification, uses the credential generation algorithm of the VC module to generate an authentication credential VC for Attr for the data accessor SDU; (3) The data accessor SDU submits the authentication credential VC of the attribute Attr to the attribute agency AA. The attribute agency AA uses the credential verification algorithm of the VC module to verify the validity and legality of the authentication credential VC. If it passes, it uses the key generation algorithm of the DABE module to generate the attribute key USK of the attribute Attr for the supply chain participant SDU; (4) The data accessor SDU selects an access policy W, uses the policy hiding algorithm of the DABE module to generate the corresponding LSSS access control matrix A, and hides it by calculating the hash value of the attribute value in the access policy W; then the access control matrix A is handed over to the outsourced computing node NODE to use the pre-encryption algorithm of the DABE module to obtain the pre-encrypted ciphertext CT * After that, the data layered encryption algorithm of the DABE module is used locally to continue to encrypt the layered data M1,...,M n Encryption is performed to obtain the complete ciphertext CT; finally, the search keyword SKW of the ciphertext needs to be selected, and the corresponding search keyword index IND needs to be generated. The ciphertext CT and the keyword index IND are saved on the blockchain, and the blockchain ensures the integrity of the data; (5) The data accessor SDU uses the attribute key USK and the search keyword SKW to generate a search trapdoor TD using the search trapdoor generation algorithm of the DABE module, and submits it to the blockchain to use the trapdoor verification algorithm of the DABE module to search and match the ciphertext; when the ciphertext CT that matches the keyword is found on the chain, it is returned to the data accessor SDU; (6) The data accessor SDU uses the conversion key generation algorithm of the DABE module and the attribute key USK to generate a conversion key pair TPK and TSK, and then sends the TPK and the ciphertext CT to the outsourced computing node NODE to use the pre-decryption algorithm of the DABE module to obtain the intermediate decrypted ciphertext X. Then the data accessor SDU uses the data layered decryption algorithm of the DABE module and uses TSK to perform the first-level decryption locally. If the data accessor SDU needs to access higher-level data, it directly applies to the data holder SDO for the decryption key K. n , combined with X to decrypt and get the hierarchical data M n ; (7) After the data accessor SDU has read the plaintext data M, if he wants to verify the remaining commercially sensitive data N that is not included in the plaintext data M, he requires the corresponding data holder SDO to generate a zero-knowledge proof for the data N; the data holder SDO uses the commitment generation algorithm of the ZKP module to first generate a commitment C for the data N, and then uses the construction proof algorithm of the ZKP module to generate a proof π for the commitment C and submit it to the data accessor SDU; the data accessor SDU verifies π by using the verification proof algorithm of the ZKP module, thereby verifying the data N; (8) When improper use of USK occurs, i.e., private distribution of keys or theft of other people's keys, the Audit Center AC uses the key confirmation algorithm of the DABE module to confirm whether the USK is correctly generated and the true ownership of the USK, thereby auditing and holding accountable the supply chain participants who use the USK in violation of regulations.

2. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that The initialization algorithm of the DABE module in the cryptographic function layer described in step (1) is that the system will generate a prime-order bilinear group and two collision-resistant hash functions as global parameters GP. In addition, the attribute organization will also be initialized to generate the organization's public and private key pairs APK and ASK, as well as declare the attribute set managed.

3. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that The credential generation algorithm of the VC module in step (2) is specifically that the certification body verifies the materials provided by the supply chain participants. If the materials are authentic, a certification credential VC will be generated, which contains the relevant materials, the user's unique identifier GID and a timestamp t, which is used to indicate the validity period of the VC. Re-verification is required after expiration.

4. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that The credential verification algorithm of the VC module in step (3) is that the supply chain participant applies for an attribute key from the attribute agency based on the VC, and the attribute agency will verify the legitimacy of the VC. The attribute key generation algorithm of the DABE module is that after the attribute agency verifies the VC, it will generate an attribute key USK for the participant.

5. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that The policy hiding algorithm of the DABE module in step (4) is specifically that the supply chain participants select the access policy W required for encryption, generate the corresponding LSSS access matrix A, and hide the hash value of the attribute Attr involved; the pre-encryption algorithm is specifically that the supply chain participants provide the LSSS access matrix A after attribute hiding, and by using the public key APK of the attribute agency, the outsourced computing node will perform partial encryption to obtain the intermediate ciphertext CT * ; Data layered encryption algorithm, specifically the supply chain participants use the intermediate ciphertext CT * Continue to perform the layered data M1,...,M n Encryption is performed to obtain a complete ciphertext CT, and a search keyword SKW of the ciphertext is selected and a corresponding search keyword index IND is generated.

6. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that In step (5), the search trapdoor generation algorithm of the DABE module is specifically that the supply chain participant uses the attribute key USK and the expected search keyword SKW to generate the search trapdoor TD; the trapdoor verification algorithm is specifically that the trapdoor TD is submitted for ciphertext search and matching, and when it successfully matches the ciphertext CT, it is returned to the supply chain participant.

7. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that In step (6), the key generation algorithm is converted, specifically, the supply chain participant uses the attribute key USK to locally generate an outsourced key pair TPK and TSK to provide to the outsourced computing node for decryption; the pre-decryption algorithm is specifically that the outsourced computing node uses TPK for pre-decryption to obtain the intermediate decrypted ciphertext X; the data layered decryption algorithm is specifically that the supply chain participant uses the intermediate decrypted ciphertext X and TSK to locally decrypt to obtain the first-level data M1, and then requests the corresponding decryption key K from the data holder of the corresponding layer. n , using it to decrypt, we can get the corresponding data M n .

8. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that In step (7), the commitment generation algorithm is specifically that the data holder in the supply chain, i.e., the prover, generates a commitment C based on the original data M to hide the information of the data M and bind it; the proof algorithm is constructed, specifically, based on the commitment C and the constraints to be proved, an arithmetic circuit is constructed to represent the data relationship to be proved, and a proof π for the commitment C is generated; the proof algorithm is verified, specifically, the verifier in the supply chain verifies the validity of the proof π without knowing the original data.

9. A supply chain data sharing system based on blockchain and multiple cryptography technologies according to claim 1, characterized in that In step (8), the key authentication algorithm specifically requires the user to provide the attribute key USK, and the system auditor to verify the validity of the USK. When the verification passes, the user's unique identifier GID bound to the USK is obtained.

Images