A method and system for cross-chain management of warehouse receipts based on a notary mechanism and national cryptographic algorithms.

Abstract

This invention discloses a cross-chain management method and system for warehouse receipts based on a notary mechanism and national cryptographic algorithms in the field of computer technology. The method includes generating an initial warehouse receipt and performing preliminary verification. Upon successful preliminary verification, production-side information is added to the initial warehouse receipt to obtain a first warehouse receipt. The first warehouse receipt is then encrypted to obtain a second warehouse receipt. The data information recorded in the second warehouse receipt is verified. Upon successful verification, the second warehouse receipt is broadcast, and purchase request data is collected to obtain the purchase request data. This invention, by layering warehouse receipts and implementing differentiated national cryptographic algorithm encryption and fine-grained access control, and by using a notary mechanism to ensure the security, reliability, and efficiency of cross-chain information interaction, facilitates support for complex cross-chain business collaborations and effectively guarantees data security and high concurrency performance during warehouse receipt management.

Description

Technical Field

[0001] This invention relates to the field of computer technology, specifically to a cross-chain management method and system for warehouse receipts based on a notary mechanism and national cryptographic algorithms. Background Technology

[0002] Currently, in the field of port supply chain and warehouse receipt management, existing management systems are often isolated. The flow of warehouse receipt information between different entities is inefficient and security is difficult to guarantee, especially lacking effective layered protection and fine-grained control for data of varying sensitivity within warehouse receipts. Although blockchain has been applied to some aspects of warehouse receipt management, existing cross-chain or cross-system interaction mechanisms are still not mature enough to support the comprehensive management needs of port supply chains for the secure, reliable, and efficient flow of warehouse receipts.

[0003] For example, Chinese patent application number CN201910541967.3 discloses a blockchain-based warehouse receipt credit management platform. This platform constructs a layered platform architecture and implements smart contracts based on a consensus algorithm, and mentions a cross-chain service protocol, aiming to solve problems in the enterprise warehouse receipt credit management process. While it can achieve warehouse receipt management and credit services based on blockchain to a certain extent, it fails to construct a multi-chain collaborative architecture to meet the needs of diverse business scenarios in the port supply chain, such as production, port operations, and sales. Furthermore, existing warehouse receipt management technologies also have the following shortcomings:

[0004] (1) Due to the lack of layering and differentiated encryption of warehouse receipts, it is difficult to ensure the security, reliability and efficiency of cross-chain information interaction. At the same time, there are data silos among the participants in the port supply chain in the existing technology, making it difficult to achieve secure and reliable sharing and efficient circulation of warehouse receipt information.

[0005] (2) Existing technologies are difficult to provide effective layered protection and fine-grained access control for warehouse receipts of different sensitivity levels, and there are risks of data leakage and commercial privacy. Furthermore, due to the lack of a unified, secure, reliable and efficient cross-chain or cross-system information interaction mechanism, existing technologies have high trust costs, low efficiency and significant security risks.

[0006] (3) Existing blockchain or cross-chain solutions are difficult to adapt to complex port warehouse receipt management and high-load scenarios. Summary of the Invention

[0007] The purpose of this invention is to provide a cross-chain management method and system for warehouse receipts based on a notary mechanism and national cryptographic algorithms. By layering warehouse receipts and implementing differentiated national cryptographic algorithm encryption and fine-grained access control, and by using a notary mechanism to ensure the security, reliability and efficiency of cross-chain information interaction, this invention is conducive to supporting the collaborative effects of complex cross-chain businesses and can effectively guarantee data security and high concurrency performance in the warehouse receipt management process.

[0008] To achieve the above objectives, the present invention provides the following technical solution:

[0009] In a first aspect, this invention provides a cross-chain management method for warehouse receipts based on a notary mechanism and national cryptographic algorithms, including:

[0010] An initial warehouse receipt is generated and preliminarily verified. Once the preliminary verification is passed, production-side information is added to the initial warehouse receipt to obtain the first warehouse receipt. The data of the first warehouse receipt is then encrypted to obtain the second warehouse receipt.

[0011] The data information recorded in the second warehouse receipt is verified. After the verification is successful, the second warehouse receipt is broadcast and the purchase request data of the second warehouse receipt is collected. The purchase request data is obtained and the buyer's identity, authority and compliance are verified by a notary mechanism.

[0012] Once the verification is successful, the cross-chain management module is used to transfer the ownership of the second warehouse receipt from the seller to the buyer and update the ownership information of the second warehouse receipt. The ownership confirmation information data of the seller and the buyer is collected, the funds of the second warehouse receipt are settled, and the second warehouse receipt is stored to obtain the historical warehouse receipt.

[0013] The system collects request information data for querying historical warehouse receipts, verifies the request information data to be in a qualified state, retrieves the target warehouse receipt from the historical warehouse receipts, and sends it to the requester of the request information data.

[0014] As a further aspect of the present invention: the step of encrypting the data of the first warehouse receipt to obtain the second warehouse receipt includes:

[0015] The key is obtained by calling the Key Management System (KMS), and the first warehouse receipt is encrypted using a differentiated encryption method to obtain the encrypted warehouse receipt.

[0016] Calculate the hash value of the encrypted warehouse receipt to obtain the complete encrypted warehouse receipt, and use the complete encrypted warehouse receipt as the second warehouse receipt.

[0017] As a further aspect of the present invention: after the verification request information data reaches a qualified state, a decryption operation is performed on the target warehouse receipt in the historical warehouse receipts, including:

[0018] The first identity data of the first requester in the request information data is verified using a cross-chain communication protocol. It is determined whether the identity data exists in the preset identity database. When the determination result is yes, it is verified whether the access permissions corresponding to the identity data are consistent with the permissions in the request information data. When the verification result is consistent, the verification result is output.

[0019] The request information data is forwarded and stored through the first security channel, and the target warehouse receipt corresponding to the request information data is read from the historical warehouse receipts.

[0020] As a further aspect of the present invention: the target warehouse receipt corresponding to the request information data read from historical warehouse receipts includes:

[0021] When the target warehouse receipt is encrypted data, the password key management system is called to obtain the key corresponding to the encrypted data, and the decryption operation is performed on the target warehouse receipt to obtain the decrypted warehouse receipt. The encrypted data includes business layer data and / or core layer data.

[0022] Send the decrypted warehouse receipt as the target warehouse receipt to the requester of the requested information data;

[0023] When the target warehouse receipt is unencrypted data, the target warehouse receipt will be sent as the target warehouse receipt to the requester of the requested information data.

[0024] As a further aspect of the present invention: the cross-chain management method for warehouse receipts also includes:

[0025] The update request information of historical warehouse receipts is collected, and the second identity data of the second requester corresponding to the update request information is verified using a cross-chain communication protocol. Once the second identity data is verified, the modification permission of the historical warehouse receipt requested by the second requester is verified. The update request information includes warehouse receipt identifier update information and update content information.

[0026] Once the modification permission verification is successful, an update request is sent through the second secure channel. The warehouse receipt is modified according to the update request, the modified fields are re-encrypted and the hash value is recalculated, and the version data of the modified warehouse receipt is updated to obtain the updated warehouse receipt.

[0027] Send the updated warehouse receipt to the second requester.

[0028] As a further aspect of the present invention: the verification of the first identity data of the first requester in the request information data using a cross-chain communication protocol includes:

[0029] The request information data for cross-chain communication is constructed based on the source chain nodes and multiple notary nodes are set up. The request information data is sent using private key signing and attached digital certificates.

[0030] The pre-set contract data is verified using a notary node activation method, and the digital certificate is decrypted using the SM2 public key method to verify the validity of the first requester's first identity data, permissions, and signature.

[0031] Once the verification is successful, the request information data is broadcast to multiple notary nodes. The multiple notary nodes vote on the request information data based on the improved Byzantine Fault Tolerance (BFT+) consensus protocol. When the number of votes reaches the threshold, the cross-chain operation is triggered.

[0032] A temporary secure channel based on a notary node is established using an SM2 negotiated key, and the temporary secure channel is encrypted using SM2 negotiated key and SM4-ECB technology.

[0033] As a further aspect of the present invention: after the verification request information data reaches a qualified state, the decryption operation is performed on the target warehouse receipt in the historical warehouse receipts, which further includes:

[0034] Group keys and field keys are generated using a key management system;

[0035] The generated group key and field key are encrypted using the SM2 asymmetric encryption algorithm. The encrypted group key and field key are then sent to the authorized participant node in the notary node via a temporary secure channel.

[0036] Secondly, this invention provides a warehouse receipt cross-chain management system based on a notary mechanism and national cryptographic algorithms, applied to the warehouse receipt cross-chain management method based on a notary mechanism and national cryptographic algorithms as described above. The warehouse receipt cross-chain management system includes a cross-chain management module, a production chain module, a port chain module, a sales chain module, and a storage module. The cross-chain management module coordinates cross-chain interaction information, unifies authentication identities, operation permissions, and manages encryption keys. The production chain module communicates bidirectionally with the cross-chain management module, storing traceability information, receiving initial warehouse receipt requests, supplementary warehouse receipt information requests, initial warehouse receipt issuance and verification data, and sharing warehouse receipts with the cross-chain management module. The port chain module communicates bidirectionally with the cross-chain management module, mapping electronic warehouse receipts to physical goods and tracking inventory status in real time. The sales chain module communicates bidirectionally with the cross-chain management module, transferring transaction warehouse receipts, settling and clearing funds, and allocating logistics resources. The storage module stores the information data received from the cross-chain management module, production chain module, port chain module, and sales chain module.

[0037] As a further aspect of the present invention: the port chain module includes a warehouse receipt generation unit, which is used to generate an initial warehouse receipt and send the generated initial warehouse receipt to the cross-chain management module for preliminary verification, wherein the initial warehouse receipt is used to record the initial information of the goods.

[0038] As a further aspect of the present invention: the production chain module includes an information supplementation unit and an encryption unit. The input end of the information supplementation unit is connected to the cross-chain management module, and the output end of the information supplementation unit is connected to the input end of the encryption unit. The information supplementation unit is used to supplement the initial warehouse receipt with production-end information, and the encryption unit is used to encrypt the warehouse receipt and calculate the hash value.

[0039] Compared with the prior art, the beneficial effects of the present invention are:

[0040] 1. This invention, by layering warehouse receipts and implementing differentiated national cryptographic algorithms for encryption and fine-grained access control, as well as by using a notary mechanism to ensure the security, reliability, and efficiency of cross-chain information interaction, is conducive to supporting complex cross-chain business collaboration and can effectively guarantee data security and high concurrency performance in the warehouse receipt management process.

[0041] 2. This invention is applied to multi-party collaboration scenarios in port supply chains. By constructing a combined multi-chain architecture that includes business chains and cross-chain management modules, adopting a cross-chain communication protocol based on a notary mechanism, utilizing a layered data structure for warehouse receipts, and a differentiated encryption strategy and key management system based on national cryptographic algorithms, it can achieve business isolation, trusted flow, and efficient management of warehouse receipt information in port supply chains, while also improving data security.

[0042] 3. By adopting a multi-chain architecture adapted to business scenarios, a business process based on smart contracts, and a performance optimization method that enables batch processing, incremental synchronization, and parallel processing, this invention can enhance the high performance and stability of the system in a high-concurrency environment, thereby meeting the port supply chain's requirements for efficiency and real-time performance. Attached Figure Description

[0043] Figure 1 This is a flowchart illustrating the method steps of the present invention;

[0044] Figure 2 This is a block diagram of the module structure of the present invention;

[0045] Figure 3 This is a connection diagram of the cross-beam management platform according to an embodiment of the present invention;

[0046] Figure 4 This is a business process diagram of an embodiment of the present invention;

[0047] Figure 5 This is a communication flowchart of an embodiment of the present invention;

[0048] Figure 6 This is a diagram of the notary mechanism of the present invention.

[0049] In the diagram: 1. Cross-chain management module; 2. Production chain module; 3. Port chain module; 4. Sales chain module; 5. Storage module. Detailed Implementation

[0050] The technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0051] Example:

[0052] Please see Figure 1 This embodiment provides a cross-chain management method for warehouse receipts based on a notary mechanism and national cryptographic algorithms, including the following steps:

[0053] S1: Generate an initial warehouse receipt and perform preliminary verification on the initial warehouse receipt. After the preliminary verification is passed, supplement the initial warehouse receipt with production-side information to obtain the first warehouse receipt. Then, encrypt the data of the first warehouse receipt to obtain the second warehouse receipt.

[0054] S2: Verify the data information recorded in the second warehouse receipt. After the verification is successful, broadcast the second warehouse receipt, collect the purchase request data of the second warehouse receipt, obtain the purchase request data, and use a notary mechanism to verify the buyer's identity, authority and compliance of the purchase request data.

[0055] S3: Once the verification is successful, the cross-chain management module is used to transfer the ownership of the second warehouse receipt from the seller to the buyer and update the ownership information of the second warehouse receipt. The ownership confirmation information data of the seller and the buyer is collected, the funds of the second warehouse receipt are settled, and the second warehouse receipt is stored to obtain the historical warehouse receipt.

[0056] S4: Collect the request information data for querying historical warehouse receipts, verify the request information data to be in a qualified state, retrieve the target warehouse receipt from the historical warehouse receipts and send it to the requester of the request information data.

[0057] like Figure 2 As shown, this embodiment also provides a warehouse receipt cross-chain management system based on a notary mechanism and national cryptographic algorithms, applied to the warehouse receipt cross-chain management method based on the notary mechanism and national cryptographic algorithms described above. The warehouse receipt cross-chain management system based on the notary mechanism and national cryptographic algorithms includes a cross-chain management module 1, a production chain module 2, a port chain module 3, a sales chain module 4, and a storage module 5. The cross-chain management module 1 is used to coordinate cross-chain interaction information, unify authentication identity, operation permissions, and manage encryption keys; the production chain module 2 communicates bidirectionally with the cross-chain management module 1. The production chain module 2 uses... The system is used for storing traceability information, receiving initial warehouse receipt requests, supplementary warehouse receipt information requests, issuing and verifying initial warehouse receipt data, and sharing warehouse receipts with the cross-chain management module; the port chain module 3 communicates bidirectionally with the cross-chain management module, and is used to map electronic warehouse receipts to physical goods and track inventory status in real time; the sales chain module 4 communicates bidirectionally with the cross-chain management module, and is used to transfer transaction warehouse receipts, settle and clear funds, and allocate logistics resources; the storage module 5 is used to store the information data received from the cross-chain management module, the production chain module, the port chain module 3, and the sales chain module 4.

[0058] In this embodiment, as Figure 3-6As shown, the cross-chain management module 1 is the cross-chain management platform, the production chain module 2 is the production chain, the port chain module 3 is the port chain, the sales chain module 4 is the sales chain, and the storage module 5 is the hard drive.

[0059] In this embodiment, port enterprises on the port chain generate initial warehouse receipts based on cargo information. The initial warehouse receipts contain data from the basic information layer. The port enterprises submit the initial warehouse receipts to the cross-chain management platform for preliminary verification. After the cross-chain management platform verifies the receipts, it forwards the request to the production enterprises on the production chain. The production enterprises supplement and improve the warehouse receipt information, call KMS to obtain the key, encrypt the data according to the differentiated encryption scheme, calculate the overall hash value, and form a complete encrypted warehouse receipt. The production enterprises submit the complete warehouse receipts back to the cross-chain management platform for final verification. After the cross-chain management platform verifies the receipts, it broadcasts the complete warehouse receipts to all relevant business chains for authorized parties to access.

[0060] Preferably, step S1 further includes generating a group key for the business information layer and a field key for the core information layer using KMS. The generated group key and field key are then encrypted using the SM2 asymmetric encryption algorithm via KMS, and distributed to authorized participant nodes with corresponding permissions through a secure channel. When business group members change or a preset security period is reached, KMS automatically or manually triggers a key update. The process includes generating a new key, re-encrypting relevant business or core layer data using the new key, and re-securely distributing the new key to the updated authorized participants using the SM2 algorithm. Changes in business group members include adding or removing participants. KMS strictly controls access and usage requests for the key based on the participant's role and access permission policy, ensuring that only authorized entities can obtain the key required for decryption. All generated and managed keys are securely stored in the Hardware Security Module (HSM), providing physical-level security protection.

[0061] Preferably, step S2 further includes the source chain node constructing a cross-chain request, signing it with its private key and attaching a digital certificate, and sending it to the cross-chain management platform. The notary node on the cross-chain management platform activates the on-chain verification smart contract, decrypts the certificate using the SM2 public key, and verifies the requester's identity, permissions, and the validity of the signature. After successful verification, the request is broadcast to other notary nodes, which vote based on the improved Byzantine Fault Tolerance (BFT+) consensus protocol. Once a threshold is reached, the cross-chain operation is triggered. Secure channel establishment and data transmission: After consensus is reached, the notary node is responsible for establishing a temporary secure channel between the cross-chain management platform and the target chain, using the SM2 negotiation key and SM4-ECB encryption to transmit data. The source chain node transmits data and interacts with the target chain node through the secure channel, and the target chain processes the results and then feeds them back through the secure channel.

[0062] Preferably, in step S3, the buyer company initiates a warehouse receipt purchase request on the sales chain. The transaction request is submitted to the cross-chain management platform, and the identity, permissions, and compliance are verified through a notary mechanism. After the verification is passed, the cross-chain management platform coordinates the relevant on-chain smart contracts to execute the transfer of warehouse receipt ownership and updates the ownership status record synchronously on all relevant chains. After the ownership change is completed, both parties to the transaction receive confirmation information, and the predefined smart contract on the sales chain automatically executes the subsequent fund settlement.

[0063] Preferably, step S4 further includes an authorized user or their representative node initiating a warehouse receipt query request with their identity authentication information and signature, which is sent to the cross-chain management platform. Upon receiving the request, the cross-chain management platform verifies the requester's identity and access rights to the requested warehouse receipt using the cross-chain communication protocol described in this invention. After successful verification, the cross-chain management platform forwards the query request through a secure channel to the business chain storing the relevant information of the warehouse receipt. Upon receiving the request, the business chain holding the data reads the corresponding warehouse receipt according to the request content and permissions. If the read data is encrypted (e.g., business layer or core layer data), the system will call the cryptographic key management system (KMS) described in this invention to obtain the corresponding key and perform a decryption operation. The business chain then returns the query result to the requester through the cross-chain communication protocol.

[0064] Preferably, in step S4, the authorized user or their representative node initiates a warehouse receipt update request with their identity authentication information and signature, which is sent to the cross-chain management platform. The request includes the warehouse receipt identifier to be updated and the update content. After receiving the request, the cross-chain management platform verifies the identity of the requester and their permission to modify the requested warehouse receipt through the cross-chain communication protocol described in this invention. After successful verification, the cross-chain management platform forwards the update request to the business chain storing the relevant information of the warehouse receipt through a secure channel. After receiving the request, the business chain holding the data modifies the warehouse receipt. The modified warehouse receipt will re-execute the security processing flow described in this invention, including re-encrypting the modified fields as needed, recalculating the hash values ​​of all levels of data, and updating the version information of the warehouse receipt. The business chain returns the updated execution status to the requester through the cross-chain communication protocol.

[0065] The above are merely preferred embodiments of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A cross-chain management method for warehouse receipts based on a notary mechanism and national cryptographic algorithms, characterized in that, A cross-chain warehouse receipt management system based on a notary mechanism and national cryptographic algorithms is adopted. The system includes a cross-chain management module, a production chain module, a port chain module, a sales chain module, and a storage module. The cross-chain management module coordinates cross-chain interaction information, unifies authentication identities, operation permissions, and manages encryption keys. The production chain module communicates bidirectionally with the cross-chain management module, storing cargo information, receiving initial warehouse receipt requests, supplementary warehouse receipt information requests, issuing and verifying initial warehouse receipt data, and sharing warehouse receipts with the cross-chain management module. The production chain module includes an information supplementation unit and an encryption unit. The input end of the information supplementation unit is connected to the cross-chain management module. The output of the information replenishment unit is connected to the input of the encryption unit. The information replenishment unit is used to supplement the initial warehouse receipt with production-end information, and the encryption unit is used to encrypt the warehouse receipt and calculate its hash value. The port chain module communicates bidirectionally with the cross-chain management module to map electronic warehouse receipts to physical goods and track inventory status in real time. The port chain module includes a warehouse receipt generation unit for generating the initial warehouse receipt. The sales chain module communicates bidirectionally with the cross-chain management module and is used to transfer transaction warehouse receipts, settle and clear funds, and allocate logistics resources. The storage module is used to store the information data received from the cross-chain management module, production chain module, port chain module, and sales chain module. The method includes: Step 1: Generate an initial warehouse receipt based on the warehouse receipt generation unit, and send the initial warehouse receipt to the cross-chain management module for preliminary verification. After the preliminary verification is passed, supplement the initial warehouse receipt with production-end information based on the information supplementation unit to obtain the first warehouse receipt. Then, encrypt the data of the first warehouse receipt based on the encryption unit to obtain the second warehouse receipt. The step of encrypting the data of the first warehouse receipt based on the encryption unit to obtain the second warehouse receipt includes: calling the key management system to obtain a key; using the key management system to generate a group key and a field key; encrypting the generated group key and field key using the SM2 asymmetric encryption algorithm; sending the encrypted group key and field key to the authorized participant node in the notary node through a temporary secure channel; encrypting the first warehouse receipt using a differentiated encryption method to obtain an encrypted warehouse receipt; calculating the hash value of the encrypted warehouse receipt to obtain a complete encrypted warehouse receipt; and using the complete encrypted warehouse receipt as the second warehouse receipt. Step 2: Verify the data information recorded in the second warehouse receipt. After successful verification, broadcast the second warehouse receipt and collect the purchase request data of the second warehouse receipt. Obtain the purchase request data and use a notary mechanism to verify the buyer's identity, authority, and compliance of the purchase request data. Step 3: Once the verification is successful, the cross-chain management module is used to transfer the ownership of the second warehouse receipt from the seller to the buyer and update the ownership information of the second warehouse receipt. The ownership confirmation information data of the seller and the buyer is collected, the funds of the second warehouse receipt are settled, and the second warehouse receipt is stored to obtain the historical warehouse receipt. Step 4: Collect the request information data for querying historical warehouse receipts. After verifying the request information data to a qualified state, perform a decryption operation on the target warehouse receipt in the historical warehouse receipts. Use the cross-chain communication protocol to verify the first identity data of the first requester in the request information data, and determine whether the identity data exists in the preset identity database. When the determination result is yes, verify whether the access permissions corresponding to the identity data are consistent with the permissions in the request information data. When the verification result is consistent, output the verification pass result, forward and store the request information data based on the first secure channel, read the target warehouse receipt corresponding to the request information data from the historical warehouse receipts, and send it to the requester of the request information data.

2. The cross-chain management method for warehouse receipts based on a notary mechanism and national cryptographic algorithms as described in claim 1, characterized in that: The target warehouse receipt corresponding to the request information data read from historical warehouse receipts includes: When the target warehouse receipt is encrypted data, the key management system is called to obtain the key corresponding to the encrypted data, and the decryption operation is performed on the target warehouse receipt to obtain the decrypted warehouse receipt. The encrypted data includes business layer data and / or core layer data. The decrypted warehouse receipt is sent as the target warehouse receipt to the requester of the requested information data. When the target warehouse receipt is unencrypted data, the target warehouse receipt will be sent as the target warehouse receipt to the requester of the requested information data.

3. The cross-chain management method for warehouse receipts based on a notary mechanism and national cryptographic algorithms as described in claim 2, characterized in that: The cross-chain management method for warehouse receipts also includes: The update request information of historical warehouse receipts is collected, and the second identity data of the second requester corresponding to the update request information is verified using a cross-chain communication protocol. Once the second identity data is verified, the modification permission of the historical warehouse receipt requested by the second requester is verified. The update request information includes warehouse receipt identifier update information and update content information. Once the modification permission verification is successful, an update request is sent through the second secure channel. The warehouse receipt is modified according to the update request, the modified fields are re-encrypted and the hash value is recalculated, and the version data of the modified warehouse receipt is updated to obtain the updated warehouse receipt. Send the updated warehouse receipt to the second requester.

4. The cross-chain management method for warehouse receipts based on a notary mechanism and national cryptographic algorithms as described in claim 3, characterized in that: The first identity data of the first requester in the cross-chain communication protocol verification request information data includes: The request information data for cross-chain communication is constructed based on the source chain nodes and multiple notary nodes are set up. The request information data is sent using private key signing and attached digital certificates. The pre-set contract data is verified using a notary node activation method, and the digital certificate is decrypted using the SM2 public key method to verify the validity of the first requester's first identity data, permissions, and signature. Once the verification is successful, the request information data is broadcast to multiple notary nodes. The multiple notary nodes vote on the request information data based on the improved Byzantine fault-tolerant consensus protocol. When the number of votes reaches the threshold, the cross-chain operation is triggered. A temporary secure channel based on a notary node is established using an SM2 negotiated key, and the temporary secure channel is encrypted using SM2 negotiated key and SM4-ECB technology.

Images