Data security encryption storage method and system for commodity supply chain platform

Abstract

The application relates to the technical field of data security, in particular to a data security encryption storage method and system for a commodity supply chain platform. The method comprises the following steps: collecting commodity supply chain data, and carrying out valueization and normalization on the commodity supply chain data; dividing a small class of the commodity supply chain data into dynamic data and static data; introducing dynamic changing static data and a supply chain characteristic coefficient of the commodity supply chain data by the statistical characteristics of the dynamic data; constructing a chain security coefficient based on the time of the commodity supply chain data, the supply chain characteristic coefficient and a chain security coefficient of a previous commodity supply chain data in the supply chain; and encrypting the commodity supply chain data based on the chain security coefficient. According to the application, users cannot perform unauthorized access through collusion attacks, and the security of the supply chain platform is improved.

Description

TECHNICAL FIELD

[0001] The application relates to the technical field of data security, in particular to a data security encryption storage method and system for a commodity supply chain platform. BACKGROUND

[0002] With the rapid development of digital economy, commodity supply chain platforms have become an important infrastructure connecting production, circulation and consumption. These platforms have accumulated a large amount of sensitive data in the process of operation, and therefore ensuring the secure storage of data has become a top priority. Common methods for ensuring the security of data storage include symmetric / asymmetric encryption algorithms, transparent data encryption (TDE), etc. Symmetric / asymmetric encryption is at the expense of query efficiency and is difficult to meet the needs of high-frequency retrieval and real-time response in supply chain systems. TDE is an encryption mechanism designed specifically for database security, but this technology cannot selectively encrypt specific fields and limits its use.

[0003] Among various encryption algorithms, searchable encryption algorithms have become one of the technologies suitable for data security encryption storage due to their support for efficient queries and good privacy protection capabilities. However, there are still significant technical bottlenecks in the practical application of searchable encryption. A large number of studies have shown that the searchable encryption scheme itself has certain forward and backward security problems. Existing technologies achieve control over forward and backward security by hashing the hash value of the random number for the keyword when generating the encrypted index and trapdoor. However, this method is more suitable for one-to-one data storage scenarios. When facing the many-to-many scenario of a supply chain platform, if the above method is used for the entire system, if information exchange occurs between different access users, data outside their access permissions can be obtained, i.e., a collusion attack occurs, and the forward and backward security of the supply chain platform is also greatly threatened. Therefore, there is an urgent need for a searchable encryption method that ensures forward and backward security in a many-to-many environment on a network platform. SUMMARY

[0004] To solve the technical problem of low security of searchable encryption for a supply chain platform, the application provides a data security encryption storage method and system for a commodity supply chain platform, and the technical solution adopted is as follows:

[0005] In a first aspect, the application provides a data security encryption storage method for a commodity supply chain platform, which includes the following steps:

[0006] Collecting commodity supply chain data and converting each small category of commodity supply chain data into a numerical type for normalization processing;

[0007] The small class of commodity supply chain data is divided into dynamic data and static data; the statistical characteristics of dynamic data are represented by the discrete degree of dynamic data; the timestamp is determined based on the first two transaction durations of each commodity supply chain data; the supply chain feature coefficient of commodity supply chain data is obtained based on the statistical characteristics of dynamic data, the timestamp corresponding to the commodity supply chain data, and the information amount of static data and the historical static data;

[0008] For each user, its private key and public key are given, and the public keys of the two parties of commodity supply chain data transaction are obtained as the initial chain security coefficient, and the chain security coefficient is constructed based on the timestamp of commodity supply chain data, the supply chain feature coefficient, and the chain security coefficient of the previous commodity supply chain data in the supply chain.

[0009] The commodity supply chain data is encrypted based on the chain security coefficient.

[0010] In the above scheme, the present application first performs statistical analysis on commodity supply chain data, calculates the supply chain feature coefficient according to the characteristics of static data and dynamic data in commodity supply chain data, which measures the privacy protection of static data characteristics and the chain statistical characteristics of dynamic data, and helps the subsequent construction of chain structure; then the chain security coefficient is constructed by using the supply chain feature coefficient, and through the chain security coefficient, the searchable encryption access control can be realized through the chain structure, so as to enhance the forward and backward security of searchable encryption, and prevent the collusion attack between users in the many-to-many environment of supply chain platform. In this way, when enhancing the forward and backward security of searchable encryption, the chain control is combined with the characteristics of supply chain data itself, which not only effectively guarantees the forward and backward security, but also makes it impossible to access by collusion attack, so as to realize a more secure supply chain platform data security storage method.

[0011] In one embodiment, the small class of commodity supply chain data includes transaction party name, number, contact information, transaction category, commodity category, commodity name, transaction volume, transaction amount, transaction time, bank card number, and ID number.

[0012] In one embodiment, the static data includes transaction party name, number, contact information, bank card number, and ID number; and the dynamic data includes transaction category, commodity category, commodity name, transaction volume, transaction amount, and transaction time.

[0013] In one embodiment, the statistical characteristics are the mean of the coefficients of variation of all dynamic data.

[0014] In one embodiment, the timestamp is the absolute value of the difference between the time of the first transaction and the time of the last transaction converted into binary data.

[0015] In one embodiment, the method for obtaining the supply chain feature coefficient of the commodity supply chain data based on the statistical feature of the dynamic data, the timestamp corresponding to the commodity supply chain data, and the static data and the information amount of the introduced historical static data is:

[0016] , denotes the timestamp corresponding to the i-th commodity supply chain data, denotes the information entropy of the j-th static data in the first i commodity supply chain data, denotes the number of types of static data, denotes the XOR operation, denotes the statistical feature of the dynamic data of the i-th commodity supply chain data, denotes the binary of , denotes the hash function, denotes the supply chain feature coefficient of the i-th commodity supply chain data.

[0017] In one embodiment, the method for assigning each user with a private key and a public key is:

[0018] Each user in the supply chain platform selects a preset number as a private key for himself, and then generates a public key for each user using a random number by using the Diffie-Hellman key exchange protocol.

[0019] In one embodiment, the method for constructing the chain security coefficient based on the timestamp of the commodity supply chain data, the supply chain feature coefficient, and the chain security coefficient of the previous commodity supply chain data in the supply chain is:

[0020] : , denote the chain security coefficients of the i-th and the j-th commodity supply chain data, denote the chain security coefficients of the i-th and the j-th commodity supply chain data, denotes the supply chain feature coefficient of the i-th commodity supply chain data, denotes the timestamp corresponding to the i-th commodity supply chain data, denotes the hash function, and the chain security coefficient of the first commodity supply chain data is constituted by the initial chain security coefficient. In one embodiment, the method for encrypting the commodity supply chain data based on the chain security coefficient is:

[0021] In one embodiment, the method for encrypting the commodity supply chain data based on the chain security coefficient is:

[0022] The category name of each subcategory is used as a keyword, and the keyword and the data corresponding to the keyword are encrypted by using a searchable encryption algorithm based on the chain security coefficient.​​

[0023] In a second aspect, the embodiments of the present application further provide a data security encryption storage system for a commodity supply chain platform, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, and the processor implements the steps of the data security encryption storage method for the commodity supply chain platform according to any one of the above embodiments when executing the computer program.

[0024] The beneficial effects of the present application are as follows:

[0025] The present application first performs statistical analysis on commodity supply chain data, calculates a supply chain characteristic coefficient according to the characteristics of static data and dynamic data in the commodity supply chain data, and the coefficient measures the privacy protection of static data characteristics and the chain statistical characteristics of dynamic data at the same time, which is helpful for the subsequent construction of chain structure; then the chain security coefficient is constructed by using the supply chain characteristic coefficient, and through the chain security coefficient, the searchable encryption access control can be realized through the chain structure, so as to enhance the forward and backward security of searchable encryption, and prevent collusion attacks between users in the many-to-many environment of the supply chain platform. In this way, when enhancing the forward and backward security of searchable encryption, the chain control is combined with the characteristics of the supply chain data itself, which not only effectively guarantees the forward and backward security, but also makes it impossible to access by force through collusion attacks due to the construction of chain control according to the characteristics of the supply chain data itself, thereby realizing a more secure supply chain platform data security storage method. BRIEF DESCRIPTION OF DRAWINGS

[0026] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, and the advantages thereof, the drawings needed to be used in the embodiments or the prior art description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor.

[0027] Figure 1 The flowchart of the data security encryption storage method for the commodity supply chain platform provided by an embodiment of the present application. DETAILED DESCRIPTION

[0028] In order to further illustrate the technical means and effects adopted by the present application to achieve the predetermined invention purpose, the data security encryption storage method and system for the commodity supply chain platform according to the present application, its specific implementation, structure, features and effects are described in detail as follows by combining with the drawings and preferred embodiments. In the following description, different "one embodiment" or "another embodiment" do not necessarily refer to the same embodiment. In addition, the specific features, structures or characteristics in one or more embodiments can be combined in any suitable form.

[0029] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs.

[0030] Data security encryption storage method and system for commodity supply chain platform

[0031] The specific scheme of the data security encryption storage method and system for commodity supply chain platform provided by the application will be specifically described below with reference to the accompanying drawings.

[0032] Please refer to Figure 1 , which shows the flow chart of the data security encryption storage method for commodity supply chain platform provided by an embodiment of the application, which comprises the following steps:

[0033] Step S001, collect commodity supply chain data, and convert each small category of commodity supply chain data into a numerical type for normalization processing.

[0034] Commodity supply chain data is obtained from a commodity supply chain platform, and the commodity supply chain data contains basic information, transaction records, and sensitive information. The basic information is the basic information of the transaction personnel; the transaction records include the transaction information of the two parties; the sensitive information is the private information of the transaction personnel. The basic information, transaction records and sensitive information are regarded as a large category, and the information under the large category is regarded as a small category. The commodity supply chain data is the data of a period of time when two parties trade.

[0035] In this embodiment, the basic information includes the names, numbers and contact information of the transaction parties; the transaction records include the transaction category, commodity category, commodity name, transaction volume, transaction amount, transaction time; the sensitive information includes the bank card number and ID number.

[0036] Because the data types of different small categories are different, they cannot be quantified uniformly, so the data type of each small category is converted into a numerical type, and each small category is normalized respectively.

[0037] At this point, the normalized numerical value of each small category is obtained.

[0038] Step S002, divide the small categories of commodity supply chain data into dynamic data and static data; determine the supply chain characteristic coefficient of commodity supply chain data through the statistical characteristics of dynamic data, the dynamic changing static data and the time of commodity supply chain data.

[0039] Privacy protection of data is essential for commodity supply chain platform, but for commodity supply chain platform, in addition to the need to achieve the protection of data privacy, it is necessary to ensure the queryability of data. In the existing privacy scheme, searchable encryption has privacy and high efficiency query ability, and is expected to become one of the effective solutions for secure storage of supply chain platform data. But searchable encryption has certain forward security and backward security risk, which affects the application of searchable encryption in practice.

[0040] At present, there have been related researches to solve the forward security and backward security of searchable encryption, but the results of the related researches are still difficult to be directly grafted into the multi-to-multi environment of commodity supply chain platform, and even in the multi-to-multi environment, collusion attacks may occur, which leads to unauthorized access. Therefore, it is necessary to find a more secure searchable encryption method in the multi-to-multi environment.

[0041] Because commodity transactions have time sequence characteristics, commodity supply chain data also has time sequence characteristics, which can be converted into a chain structure feature, and this chain structure feature helps to enhance the security of subsequent searchable encryption. For commodity supply chain data, different parameters represent different meanings, showing static or dynamic characteristics, and different small classes have different privacy contents and different influences on the chain structure. In order to be used for the construction of chain structure, the supply chain platform data is divided into two categories, one is static data, these small classes mainly contain entity information and product information in the supply chain, which remain unchanged for a long time, have unique identification and high consistency, but these small classes often contain more privacy information, and because these static data are long-term unchanged or difficult to change, once they are leaked, they will have a greater impact; the other is dynamic data, which is used to record the dynamic interaction information of the supply chain business process, has the characteristics of high-frequency generation and short-term value, such as order quantity, price, the dynamic nature of these small classes can effectively distinguish the differences between commodity supply chain data, that is, it is more meaningful for the chain structure. For commodity supply chain data, there is only one value for each small class of static data, and there are multiple values for each small class of dynamic data.

[0042] In the embodiment, the static data includes transaction party name, number, contact information, bank card number, ID number; the dynamic data includes transaction category, commodity category, commodity name, transaction volume, transaction amount, transaction time.

[0043] The construction of the supply chain characteristic coefficient according to the statistical characteristics of the commodity supply chain data dynamic data helps to realize the forward and backward security according to the chain structure of the supply chain characteristic coefficient, and the statistical characteristics of the dynamic data are represented by the dispersion degree of the dynamic data. In this embodiment, the coefficient of variation of each dynamic data in the commodity supply chain data is calculated, and the mean of the coefficients of variation of all kinds of dynamic data is taken as the statistical characteristic of the dynamic data.

[0044] For each commodity supply chain data, the time of the first transaction and the last transaction is counted, and the absolute value of the difference between the two times is converted into binary data as a timestamp.

[0045] If the static data of each transaction does not change, there is a greater security risk, so for the static data of each commodity supply chain data, the static data of the current commodity supply chain data is mapped based on all previous commodity supply chains by a hash function to enhance security, and each time a new supply chain data is mapped based on all previous commodity supply chain data, so that the mapping of the static data of the commodity supply chain data will change each time, introducing dynamic characteristics.

[0046] The supply chain characteristic coefficient is determined according to the static data with dynamic characteristics and the statistical characteristics of its dynamic data.

[0047] Preferably, the expression of the supply chain characteristic coefficient is:

[0048] , denotes the timestamp corresponding to the i-th commodity supply chain data, denotes the information entropy of the j-th static data in the first i commodity supply chain data, denotes the number of types of static data, denotes the XOR operation, denotes the statistical characteristics of the dynamic data of the i-th commodity supply chain data, denotes the binary of denotes a hash function, denotes the supply chain characteristic coefficient of the i-th commodity supply chain data.

[0049] ​It can be understood that the static data in the commodity supply chain data has high consistency, but at the same time, the requirement for privacy is also high, so the hash function can blur the static data features, and in order to avoid the invariability of static data to cause a part of information to be fixed, the time stamp is introduced to increase the dynamic characteristics of static data. As for dynamic data, its statistical characteristics itself has high variability and correlation characteristics, so it can be analyzed by simple statistical analysis. Thus, the supply chain feature coefficient not only considers the static and dynamic data changes in the commodity supply chain data, but also enhances the privacy protection and confusion of the static data features.

[0050] At this point, the supply chain feature coefficient of each commodity supply chain data is obtained.

[0051] In step S003, the chain security coefficient is constructed based on the time of the commodity supply chain data, the supply chain feature coefficient, and the chain security coefficient of the previous commodity supply chain data in the supply chain.

[0052] In the above steps, the supply chain feature coefficient measures the statistical characteristics of each commodity supply chain data and all previous commodity supply chain data. Since the commodity supply chain data has a time sequence of front and back dependence, it also leads to the front and back dependence of the supply chain feature coefficient, and this front and back dependence can be transformed into a chain structure, so the supply chain feature coefficient of the commodity supply chain data has a chain structure characteristic. If access control is performed through this chain structure characteristic, the forward security of the entire scheme can be ensured. At the same time, if one commodity supply chain data is deleted, since one supply chain data only corresponds to one ring in the chain structure, only this ring needs to be controlled, so that all users cannot access the supply chain data, without affecting other data, which realizes the backward security of the entire scheme.

[0053] For example, there are 10 commodity supply chain data with chain structure, and the attacker obtains the information of one commodity supply chain data through attack, but since the hash of static data is based on all previous commodity supply chain data, the hash value will change after obtaining one commodity supply chain data, and the attacker cannot infer the next data from the obtained commodity supply chain data. If the hash of static data does not change, the attacker can obtain the hash value of the static data of the entire chain structure through one attack, which greatly reduces the security.

[0054] Therefore, the chain security coefficient can be constructed by the chain structure characteristics of the supply chain characteristic coefficient, and the chain control can be realized according to the chain security coefficient, and the forward and backward security of the searchable encryption can be ensured by using the chain control. Meanwhile, since the chain structure and the construction of the chain security coefficient are based on the data characteristics of the supply chain data, the supply chain data is public for the two parties of the supply chain transaction, and is secret for the rest of the users, so the possibility of user collusion attack to expand the authority range and perform unauthorized access to the data is avoided.

[0055] In the searchable encryption of the supply chain data, each user in the supply chain platform selects a random number as a private key, then generates a public key of each user by using the random number through the Diffie-Hellman key exchange protocol, and the public key is disclosed on the chain. After the transaction between two users generates the supply chain data, in order to ensure the security of the supply chain data, the supply chain data needs to be encrypted and uploaded to the supply chain platform.

[0056] After the transaction between the two users is completed, the public key of the other party is obtained as an initial chain security coefficient, and the chain security coefficient is constructed for the commodity supply chain data, and the chain security coefficient is constructed based on the timestamp of the commodity supply chain data, the supply chain characteristic coefficient and the chain security coefficient of the previous commodity supply chain data in the supply chain.

[0057] Preferably, in the embodiment, the construction method of the chain security coefficient is:

[0058] , respectively represent the chain security coefficients of the first , the second commodity supply chain data, represents the supply chain characteristic coefficient of the first commodity supply chain data, represents the timestamp corresponding to the first commodity supply chain data, represents a hash function. When the chain security coefficient of the first commodity supply chain data is calculated , the chain security coefficient of the last commodity supply chain data is represented by the initial chain security coefficient .

[0059] ​It can be understood that, by the above structure, when the commodity supply chain data of both parties of the supply chain is securely stored, the searchable encryption security control is performed by using the chain security factor of the above structure, ensuring the forward security of the searchable encryption; at the same time, when a supply chain data needs to be deleted on the supply chain platform, only the chain security factor corresponding to the supply chain data needs to be modified, and after the modification is completed, all users cannot access the data by using the chain security factor in their own hands, and when each user still holds the chain security factor of other supply chain data, it does not affect the use of other chain security factors.

[0060] At this point, the chain security factor of each commodity supply chain data is obtained.

[0061] Step S004, encrypting the commodity supply chain data based on the chain security factor.

[0062] In order to ensure that the data can still be queried after being uploaded to the supply chain platform, the corresponding keywords need to be generated for the commodity supply chain data, and the generation of the keywords can be set as needed. In this embodiment, the categories of various data are used as keywords.

[0063] After obtaining the chain security factor, the searchable encryption algorithm is used to encrypt the keywords and the data corresponding to the keywords by using the chain security factor. The encrypted ciphertext data is uploaded to the supply chain platform, wherein is the ciphertext of a keyword, is the ciphertext of the data corresponding to the keyword. In the subsequent transaction process of two users, the chain security factor corresponding to the supply chain data is obtained, and the generated supply chain data is encrypted by using the chain security factor and then uploaded to the supply chain platform. When a user needs to query data from the supply chain platform, the ciphertext of the keyword can be generated by using the chain security factor corresponding to the supply chain data, which is called a trapdoor; the trapdoor is uploaded to the supply chain platform, the supply chain platform queries the encrypted data matching the keyword according to the trapdoor, and returns the encrypted data to the user; the user can obtain the original data by using the chain security factor, and the user can only obtain the data related to the chain security factor and cannot access the data beyond the authority.

[0064] When two users try to expand their own authority through collusion attack, since the chain security factors owned by the two users are different, and the chain security factors of other nodes in the chain structure cannot be derived by the chain security factors of each other, the two users can only share the data known by themselves, and cannot obtain the data unknown to both, thereby avoiding the occurrence of collusion attack.

[0065] At this point, the data security encryption of the commodity supply chain platform is completed.

[0066] Based on the same inventive concept as the above method, the embodiments of the present application also provide a data security encryption storage system for a commodity supply chain platform, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, wherein the processor implements the steps of any one of the above-mentioned data security encryption storage methods for a commodity supply chain platform when executing the computer program.

[0067] It should be noted that the above-mentioned embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that they can still modify the technical solutions recorded in the foregoing embodiments, or make equivalent replacements for some technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the scope of the technical solutions of the embodiments of the present application, and should be included in the protection scope of the present application.

[0068] Each of the embodiments in the specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other. Each embodiment mainly describes the difference from other embodiments.

Claims

1. A data security encryption storage method for a commodity supply chain platform, characterized in that, The method comprises the following steps: Collect commodity supply chain data, and convert each small category of commodity supply chain data into a numerical type for normalization processing; Divide the small categories of commodity supply chain data into dynamic data and static data; represent the statistical characteristics of dynamic data through the discrete degree of dynamic data; determine a timestamp based on the first two transaction durations of each commodity supply chain data; obtain a supply chain characteristic coefficient of commodity supply chain data based on the statistical characteristics of dynamic data, the timestamp corresponding to the commodity supply chain data, and the static data and the information amount of the introduced historical static data; Assign a private key and a public key to each user, obtain the public keys of both parties of commodity supply chain data transaction as an initial chain security coefficient, and construct a chain security coefficient based on the timestamp, the supply chain characteristic coefficient of commodity supply chain data, and the chain security coefficient of the previous commodity supply chain data in the supply chain; Encrypt commodity supply chain data based on the chain security coefficient; The method for obtaining the supply chain characteristic coefficient is: , denotes the timestamp corresponding to the ith commodity supply chain data, denotes the information entropy of the jth static data in the first i commodity supply chain data, denotes the number of types of static data, denotes the exclusive or operation, denotes the statistical characteristics of the dynamic data of the ith commodity supply chain data, denotes the binary of denotes the hash function, denotes the supply chain characteristic coefficient of the ith commodity supply chain data;​ The method for constructing the chain security coefficient is: : , respectively represent the chain security coefficient of the first , the second commodity supply chain data, represent the supply chain characteristic coefficient of the first commodity supply chain data, represent the time stamp corresponding to the first commodity supply chain data, represent the hash function, wherein the chain security coefficient of the first supply chain data is composed by the initial chain security coefficient.

2. The method for data security encryption storage of the commodity supply chain platform according to claim 1, wherein, The small categories of commodity supply chain data include transaction party name, number, contact information, transaction category, commodity category, commodity name, transaction volume, transaction amount, transaction time, bank card number, and ID number.

3. The method for data security encryption storage of the commodity supply chain platform according to claim 2, wherein, The static data includes transaction party name, number, contact information, bank card number, and ID number; and the dynamic data includes transaction category, commodity category, commodity name, transaction volume, transaction amount, and transaction time.

4. The method for data security encryption storage of the commodity supply chain platform according to claim 1, wherein, The statistical characteristics are the mean value of the coefficients of variation of all kinds of dynamic data.

5. The method for data security encryption storage of the commodity supply chain platform according to claim 1, wherein, The timestamp is the absolute value of the difference between the time of the first transaction and the time of the last transaction converted into binary data.

6. The method for data security encryption storage of the commodity supply chain platform according to claim 1, wherein, The method for assigning a private key and a public key to each user is: Each user in the supply chain platform selects a preset number as a private key, and then generates a public key of each user using a random number by adopting a Diffie-Hellman key exchange protocol.

7. The method for data security encryption storage of the commodity supply chain platform according to claim 1, wherein, The method for encrypting commodity supply chain data based on the chain security coefficient is: Use a searchable encryption algorithm to encrypt the keywords and the data corresponding to the keywords based on the chain security coefficient, with the category name of each small category as the keyword.

8. A data security encryption storage system for a commodity supply chain platform, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, characterized in that, The processor executes the computer program to realize the steps of the data security encryption storage method for a commodity supply chain platform according to any one of claims 1-7.

Images