Block chain authentication algorithm model based on textile and clothing supply chain

Abstract

The invention belongs to the field of textile and clothing supply chains, and particularly relates to a textile and clothing supply chain-based block chain authentication algorithm model, which comprises the following steps of: establishing a block chain network, and distributing a unique digital identity for each participant of the supply chain; classifying the original data into public data and sensitive data by each participant; each participant performs data uplink, public data plaintext uplink and sensitive data encryption uplink through the corresponding digital identity; agreed verification is performed on the public data and the sensitive data on the block chain, and display fragments and key fragments are distributed to participants if agreed verification is satisfied; each operation on the block chain is signed through a digital identity, the authenticity of data is automatically verified in combination with an intelligent contract, full-process tamper-proof traceability and classified chaining of public data and sensitive data are realized, the transparency degree of the block chain is high, the public data can be verified and invisible through a zero-knowledge proof pool, and the sensitive data can be authorized to backtrack; sensitive data leakage is prevented, and the advantages of the block chain are fully utilized.

Description

Technical Field

[0001] The present invention relates to the field of textile and clothing supply chain, and in particular to a blockchain authentication algorithm model based on the textile and clothing supply chain. Background Art

[0002] The textile supply chain blockchain is an innovative model that applies blockchain technology to supply chain management in the textile industry, optimizing supply chain processes through distributed accounting and decentralized data management.

[0003] The textile supply chain blockchain is based on distributed data storage and consensus mechanism, storing transaction records of raw material procurement, production and processing, logistics and transportation, sales and other links in the supply chain in the form of blocks, and using encryption algorithms to ensure that the data cannot be tampered with.

[0004] Traditional supply chains suffer from severe information silos, with suppliers concealing material data and manufacturers concealing process data. This leads to information isolation between various supply chain participants and fails to fully utilize the encryption advantages of blockchain's decentralized distributed storage data.

[0005] Users need supply chain transparency, but companies want to protect cost information. For example, manufacturers want suppliers to disclose dye ingredient test reports, but suppliers are worried about process leaks, resulting in a conflict between supply chain transparency and sensitive data, which is insufficient. Summary of the Invention

[0006] (1) Purpose of the invention

[0007] In order to solve the technical problems existing in the background technology, the present invention proposes a blockchain authentication algorithm model based on the textile and apparel supply chain, which has the characteristics of data transparency of all supply chain participants on the blockchain and encryption protection of sensitive data.

[0008] (2) Technical solution

[0009] To solve the above technical problems, the present invention provides a blockchain authentication algorithm model based on the textile and apparel supply chain, including:

[0010] Establish a blockchain network to assign unique digital identities to each participant in the supply chain;

[0011] Each participant classifies the original data into public data and sensitive data;

[0012] Each participant uploads data to the chain through their corresponding digital identity, with public data uploaded to the chain in plain text and sensitive data uploaded to the chain in encryption;

[0013] Public data and sensitive data are verified on the blockchain, and display shards and key shards are allocated to participants if the agreement is met;

[0014] Demonstrate that sharding can be used to open a zero-knowledge proof pool for public data aggregation;

[0015] Key sharding is used to enable sensitive data verification pools.

[0016] Preferably, the supply chain participants include: raw material suppliers, manufacturers, logistics providers, retailers and consumers, and each participant is assigned a unique digital identity.

[0017] Preferably, an ID contract is deployed on the blockchain to manage identity. The contract ensures that each public key address is registered only once to ensure uniqueness.

[0018] Generate a key pair for each initial participant and associate participant type metadata to support the supply chain process. Each initial participant generates a public and private key pair on their own device using a standard algorithm, ECDSA or EdDSA.

[0019] Preferably, new participants, new consumers or logistics providers can join at any time, and the process is decentralized;

[0020] After authentication, the contract stores the unique identity and metadata corresponding to the public key address in the on-chain state database;

[0021] If the verification fails and the public key already exists, the contract rolls back the transaction and notifies the participants. If the verification succeeds, the participant's digital identity becomes the identifier of their on-chain operations.

[0022] Preferably, the classification of original data is performed locally. Each participant needs to ensure that the classified public data + sensitive data ≥ original data for the public data that can be displayed and the sensitive data that needs to be kept confidential. That is, when the total content of public data and sensitive data is the original data, data overlap is allowed but data loss is not allowed.

[0023] Preferably, each participant signs the data using the private key corresponding to their digital identity before submitting the data;

[0024] Public data is directly prepared for chain upload in plain text form. Sensitive data is first encrypted and then the ciphertext is uploaded to the chain. At the same time, the access control policy used for encryption needs to be recorded.

[0025] Preferably, public data is stored directly on the blockchain or hashes of large files are stored on-chain, with the files themselves stored off-chain;

[0026] Sensitive data ciphertext is stored off-chain, and only the ciphertext index and access policy are stored on-chain.

[0027] Preferably, automated verification of public data and sensitive data on the chain is performed through smart contracts. After the verification is passed, the participants are allocated display fragments corresponding to the public data fragments and key fragments corresponding to the access rights to sensitive data, thereby achieving the unity of data verifiability and privacy protection.

[0028] Preferably, key sharding uses a secret sharing algorithm: the symmetric key of sensitive data is split into n shards, and at least k shards are required to reconstruct the original key. Manufacturer cost data requires joint authorization from finance, audit, and supervision.

[0029] When the authorized party verifies the contract, it requests sensitive data with key shards, verifies the identity and authority of the requester, and returns the authority status. If the authority is valid, it retrieves other key shards and returns the number of missing shards. It combines the shards to reconstruct the symmetric key and decrypt the ciphertext data.

[0030] Preferably, when multiple public data are verified, the smart contract automatically aggregates the relevant data, marks the public data according to the timestamp, effectively displays the list of shard holders, and aggregates the public data on the chain of each participant to establish a zero-knowledge proof pool.

[0031] The above-mentioned technical solution of the present invention has the following beneficial technical effects: each operation on the blockchain is signed with a digital identity, and the authenticity of the data is automatically verified in combination with the smart contract, so that the whole process can be tamper-proof and traceable, public data and sensitive data are classified and uploaded to the chain, the blockchain has a high degree of transparency, public data can be verifiably invisible through the zero-knowledge proof pool, sensitive data can be authorized to be traced back, and the leakage of sensitive data is prevented, thereby making full use of the advantages of the blockchain. BRIEF DESCRIPTION OF THE DRAWINGS

[0032] Figure 1 Schematic diagram of the method of the present invention. DETAILED DESCRIPTION

[0033] To make the objectives, technical solutions, and advantages of the present invention more clearly understood, the present invention will be further described in detail below in conjunction with specific embodiments and with reference to the accompanying drawings. It should be understood that these descriptions are merely exemplary and are not intended to limit the scope of the present invention. In addition, in the following description, descriptions of well-known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present invention.

[0034] like Figure 1 As shown in the figure, the blockchain authentication algorithm model based on the textile and apparel supply chain proposed in the present invention includes:

[0035] S1. Establish a blockchain network to assign unique digital identities to each participant in the supply chain;

[0036] All supply chain participants include: raw material suppliers, manufacturers, logistics providers, retailers and consumers, and each participant is assigned a unique digital identity;

[0037] Deploy an ID contract on the blockchain to manage identity. The contract ensures that each public key address is registered only once to ensure uniqueness.

[0038] Generate a key pair for each initial participant and associate participant type metadata to support the supply chain process. Each initial participant generates a public and private key pair on their own device, using a standard algorithm, ECDSA or EdDSA, to ensure that the private key does not leave the device.

[0039] It should be added that new participants such as new consumers or logistics providers can join at any time. The process is decentralized. Each participant generates a public-private key pair locally on their own device. The participant calls the ID contract through the client, passes in the public key and metadata, and checks whether the public key is valid and unregistered to prevent duplication. After authentication, the contract stores the unique identity and metadata corresponding to the public key address in the on-chain status database. If the verification fails, such as the public key already exists, the contract rolls back the transaction and notifies the participant. After success, the participant's digital identity becomes the identifier of its on-chain operation.

[0040] S2. Each participant classifies the original data into public data and sensitive data;

[0041] Public data refers to basic information that can be shared within the supply chain, used to track status and verify process authenticity. For example, information such as logistics waybill numbers, product batch numbers, and production dates must be stored in plain text for all parties to review and cannot be tampered with once uploaded to the blockchain.

[0042] Sensitive data: Information involving commercial secrets, personal privacy, or compliance requirements, such as supplier raw material costs, retailer customer personal information, and manufacturer process details. This data must be encrypted and uploaded to the blockchain, with access limited to authorized parties under specific conditions.

[0043] The classification of original data is carried out locally. Each participant needs to ensure that the public data that can be displayed and the sensitive data that needs to be kept confidential are classified by themselves, and the classified public data + sensitive data ≥ the original data. That is, when the total content of public data and sensitive data is compounded with the original data, data overlap is allowed but data loss is not allowed.

[0044] Let the original dataset be D. After classification, the public dataset is stored in plain text in P and the sensitive dataset is stored in encrypted form in S.

[0045] Need to meet: ,Right now: (Data volume perspective), (content perspective);

[0046] Counterexample: If , then there is a data black hole:

[0047] The chemical composition of dyes in a batch of clothing (accounting for 5% of the original data) was not classified. This data could neither be publicly verified nor encrypted, becoming an audit blind spot.

[0048] It is understandable that the classification of original data into public data and encrypted data enables blockchain evidence to cover all business facts, eliminates selective disclosure by participants, and any data can be traced and verified by authorized parties to meet regulatory requirements. In judicial scenarios, the complete chain of evidence can be restored to protect the legitimate rights and interests of participants. This design enables the supply chain to be open and transparent through public data, and to protect confidentiality through encryption of sensitive data, avoiding the collapse of trust due to data loss and building a trusted supply chain.

[0049] S3. Each participant uploads data to the blockchain using their corresponding digital identity. Public data is uploaded to the blockchain in plain text, while sensitive data is uploaded to the blockchain in encrypted form.

[0050] Among them, each participant signs the data using the private key corresponding to his or her digital identity before submitting the data;

[0051] According to the classification results of step S2, public data is directly uploaded to the blockchain in plain text, while sensitive data is encrypted first and then uploaded to the blockchain. At the same time, the access control policy used for encryption needs to be recorded.

[0052] Use attribute-based encryption or national secret algorithm for encryption. The specific steps are as follows: For sensitive data, first generate a symmetric key, use the symmetric key to encrypt the sensitive data to obtain the ciphertext, use asymmetric encryption to encrypt the symmetric key, store the symmetric encrypted ciphertext and the encrypted symmetric key together in decentralized storage, obtain the content identifier or directly store it off-chain, and only store the hash of the access control policy on-chain;

[0053] Public data transactions include plaintext data, data classification labels, and signatures, while sensitive data transactions include the hash of the access control policy for encrypted data, encryption algorithm identifier, and signatures;

[0054] Submit the constructed transaction to the blockchain network. The blockchain node will verify: whether the digital signature of the transaction is valid, whether the transaction format meets the requirements, and whether the submitter's digital identity has the authority to submit this type of data;

[0055] After reaching consensus, the transaction is packaged into the blockchain, and the transaction content is permanently recorded on the blockchain. Public data can be queried by anyone, while sensitive data can only be obtained and decrypted by authorized parties who have passed access policy control.

[0056] It should be added that: public data is stored directly on the blockchain or the hash of large files is stored on the chain, and the files themselves are stored off-chain;

[0057] Sensitive data ciphertext is stored off-chain, and only the ciphertext index and access policy are stored on-chain.

[0058] When the authorized party needs to access sensitive data: obtain the ciphertext index and access policy from the chain, obtain the encrypted data based on the ciphertext from the decentralized storage, and if the visitor meets the access policy, use their own private key to decrypt the symmetric key, and then use the symmetric key to decrypt the ciphertext.

[0059] It is understandable that the data on the chain can be used by smart contracts. In the subsequent authentication process, smart contracts can verify the authenticity of public data or trigger access control processes for sensitive data.

[0060] S4. Verify the public and sensitive data agreements on the blockchain, and allocate display shards and key shards to participants if the agreements are met;

[0061] Smart contracts are used to automatically verify public data and sensitive data on the chain. After verification, participants are allocated display shards corresponding to public data segments and key shards corresponding to sensitive data access rights, achieving the unity of data verifiability and privacy protection.

[0062] Among them, the smart contract verification rules are to deploy the verification contract on the chain, and preset three types of rules:

[0063] Existence rule: Checks whether the data hash is consistent with the on-chain record, based on the index stored in S3;

[0064] Authenticity rule: Verify that the data signature matches the submitter’s digital identity and call S1’s ID contract;

[0065] Business rules: Check whether metadata complies with supply chain standards, such as production date ≤ logistics date;

[0066] When a participant submits a new transaction: for example, a logistics provider updates the status of a shipment

[0067] If public data is included: trigger the verification contract to perform real-time checks (e.g., whether the batch number is valid);

[0068] If it contains sensitive data: only verify the access policy hash and signature, do not decrypt the content;

[0069] After verification, the smart contract automatically generates two types of shards:

[0070] Display sharding: a summary of key data fields is made public, broadcast to supply chain stakeholders, and stored in plain text on the chain;

[0071] Key Sharding: Sharding of symmetric keys of sensitive data, distribution to authorized parties according to access policies, and encrypted storage off-chain.

[0072] It should be added that: The key sharding adopts the secret sharing algorithm: the symmetric key of the sensitive data is split into n shards, and at least k shards (k < n) are required to reconstruct the original key. The manufacturer's cost data requires the joint authorization of the finance, audit, and supervision parties (n = 5, k = 3);

[0073] When the authorizing party verifies the contract, it requests the sensitive data attached with the key shards, verifies the identity and permissions of the requester, returns the permission status. If the permissions are valid, it retrieves other key shards. The number of missing shards returned needs to be ≥ k. The combined shards are used to reconstruct the symmetric key to decrypt the ciphertext data.

[0074] S5. The display shard is used to open the zero-knowledge proof pool for public data aggregation;

[0075] When multiple pieces of public data pass the verification, the smart contract automatically aggregates the relevant data, marks the public data according to the timestamp, effectively displays the list of shard holders, aggregates the public data uploaded by each participating party to establish a zero-knowledge proof pool. The participating party holding the display shard发起 a request to the verification contract. Through the obtained display shard and verification conditions, it calls the public data of the corresponding participating party in the zero-knowledge proof pool for traceability.

[0076] S6. The key shard is used to open the sensitive data verification pool.

[0077] Among them, the decryption-free verification mechanism for sensitive data is implemented through the multi-signed key shards, ensuring that the original data is never exposed.

[0078] As an example: When the sensitive data passes the verification and is aggregated to establish a sensitive data verification pool, when it is necessary to consult the sensitive data on the blockchain, the permissions of the verification and supervision parties are verified and a shard signature is requested. Other shard holders return the encrypted shard signature after verifying the contract, and retrieve the ciphertext verification result. The double isolation mechanism ensures that the original data is not decrypted.

[0079] It should be understood that the above specific embodiments of the present invention are only used for exemplary illustration or explanation of the principles of the present invention, and do not constitute a limitation to the present invention. Therefore, any modifications, equivalent replacements, improvements, etc. made without departing from the spirit and scope of the present invention shall be included within the protection scope of the present invention. In addition, the appended claims of the present invention are intended to cover all changes and modification examples that fall within the scope and boundary of the appended claims, or such scope and boundary of equivalent forms.

Claims

1. The blockchain authentication algorithm model based on the textile and apparel supply chain is characterized by: include: Establish a blockchain network to assign unique digital identities to each participant in the supply chain; Each participant classifies the original data into public data and sensitive data; Each participant uploads data to the chain through their corresponding digital identity, with public data uploaded to the chain in plain text and sensitive data uploaded to the chain in encryption; Public data and sensitive data are verified on the blockchain, and display shards and key shards are allocated to participants if the agreement is met; Demonstrate that sharding can be used to open a zero-knowledge proof pool for public data aggregation; Key sharding is used to enable sensitive data verification pools.

2. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: The supply chain participants include: raw material suppliers, manufacturers, logistics providers, retailers and consumers, and each participant is assigned a unique digital identity.

3. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: Deploy an ID contract on the blockchain to manage identity. The contract ensures that each public key address is registered only once to ensure uniqueness. Generate a key pair for each initial participant and associate participant type metadata to support the supply chain process. Each initial participant generates a public and private key pair on their own device using a standard algorithm, ECDSA or EdDSA.

4. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: New participants, new consumers or logistics providers can join at any time, and the process is decentralized; After authentication, the contract stores the unique identity and metadata corresponding to the public key address in the on-chain state database; If the verification fails and the public key already exists, the contract rolls back the transaction and notifies the participants. If the verification succeeds, the participant's digital identity becomes the identifier of their on-chain operations.

5. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: The classification of original data is carried out locally. Each participant needs to ensure that the public data that can be displayed and the sensitive data that needs to be kept confidential are classified by themselves, and the classified public data + sensitive data ≥ the original data. That is, when the total content of public data and sensitive data is compounded with the original data, data overlap is allowed but data loss is not allowed.

6. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: Before submitting data, each participant signs the data using the private key corresponding to their digital identity; Public data is directly prepared for chain upload in plain text form. Sensitive data is first encrypted and then the ciphertext is uploaded to the chain. At the same time, the access control policy used for encryption needs to be recorded.

7. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: Public data is stored directly on the blockchain or the hash of large files is stored on the chain, and the files themselves are stored off-chain; Sensitive data ciphertext is stored off-chain, and only the ciphertext index and access policy are stored on-chain.

8. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: Smart contracts are used to automatically verify public data and sensitive data on the chain. After verification, participants are allocated display shards corresponding to public data segments and key shards corresponding to sensitive data access rights, achieving the unity of data verifiability and privacy protection.

9. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: Key sharding uses a secret sharing algorithm: the symmetric key of sensitive data is split into n shards. At least k shards are required to reconstruct the original key. Manufacturer cost data requires joint authorization from finance, audit, and supervision. When the authorized party verifies the contract, it requests sensitive data with key shards, verifies the identity and authority of the requester, and returns the authority status. If the authority is valid, it retrieves other key shards and returns the number of missing shards. It combines the shards to reconstruct the symmetric key and decrypt the ciphertext data.

10. The blockchain authentication algorithm model based on the textile and apparel supply chain according to claim 1 is characterized in that: When multiple public data are verified, the smart contract automatically aggregates the relevant data, marks the public data according to the timestamp, effectively displays the list of shard holders, and aggregates the public data uploaded by each participant to establish a zero-knowledge proof pool.

Images