Blockchain traceability system and method for smart tea garden

Abstract

The application discloses a smart tea garden block chain traceability system and method, comprising the following steps: standardizing and aggregating data of each link, and generating an event set identifier; using an RSA accumulator to compactly commit the event set to generate a phased commitment value; introducing a BLS threshold signature mechanism to jointly sign the event set by multiple trusted nodes to generate an aggregated signature; binding the commitment value and the aggregated signature to write into a block chain; in traceability query, verifying event existence through the RSA accumulator, and verifying node consensus through the BLS threshold signature, so as to construct a safe, transparent and verifiable traceability system. The application covers whole-process information management of tea from planting, processing, storage, transportation to sales.

Description

Technical Field

[0001] This invention relates to the fields of information technology and agricultural Internet of Things (IoT) technology, and in particular to a smart tea garden blockchain traceability system and method. Background Technology

[0002] With the continuous development of smart agriculture and blockchain technology, the digitization and traceability of information throughout the entire tea planting and processing process has become an important means to ensure the quality and safety of agricultural products. Currently, tea traceability systems in the agricultural Internet of Things (IoT) mostly adopt traditional centralized databases or chain-based recording methods to achieve basic data recording of each stage from planting, processing, storage, transportation to sales, and provide a traceability query interface based on QR codes.

[0003] However, existing technologies still have significant shortcomings in terms of data credibility and multi-party consistency verification. On the one hand, traditional traceability systems rely on a central server to maintain data integrity, making it difficult to effectively prevent node forgery, data deletion, or tampering, and lacking non-repudiation mechanisms. On the other hand, most current systems can only provide static information backtracking, failing to support joint confirmation and verifiable endorsement of events across entities and multiple nodes in complex supply chains, resulting in a lack of credibility and transparency in traceability results.

[0004] Therefore, how to provide a smart tea garden blockchain traceability system and method is a problem that urgently needs to be solved by those skilled in the art. Summary of the Invention

[0005] One objective of this invention is to propose a smart tea garden blockchain traceability system and method. This invention comprehensively adopts standardized event modeling, RSA structure-isolated dual-domain accumulation, BLS threshold signature and multi-stage data registration mechanism, and describes in detail the method for generating, aggregating, verifying and registering credible data in the entire process of tea planting to sales. It has the advantages of data tamper-proof, node joint endorsement and verifiable traceability path.

[0006] The smart tea garden blockchain traceability system and method according to embodiments of the present invention includes the following steps:

[0007] The event data generation module is used to collect raw data from the entire tea production process, preprocess it, and generate standardized event data containing event identifiers, node identities, timestamps, and data summaries.

[0008] The event set construction module is used to receive standardized event data, aggregate the standardized event data into event sets according to the set period and node type, and generate event set identifiers.

[0009] The phase commitment generation module is used to hash each standardized event data in the event set, input all hash results into the RSA accumulator to generate phase commitment values, and establish the correspondence between event set identifiers and phase commitment values.

[0010] The multi-node signature module is used to coordinate multiple nodes to perform BLS threshold signature on the hash result of the event set based on the event set identifier, and output the aggregate signature after the threshold condition is met;

[0011] The data registration module is used to associate the phased commitment value with the aggregated signature according to the event set identifier and write it into the blockchain, thus forming a phased data registration unit;

[0012] The verification module is used to receive query requests, parse product identifiers and locate corresponding event set identifiers, retrieve phase data registration units from the blockchain, and complete the verification of event existence and node consistency based on phase commitment values ​​and aggregate signatures.

[0013] The path organization module is used to construct a complete product traceability path structure by splicing together stage data registration units based on the event set identifier order.

[0014] Optionally, modules can be integrated using the following methods:

[0015] Collect raw data from the entire process of tea planting, processing, storage, transportation to sales, preprocess it, and generate standardized event data containing event identifiers, node identities, timestamps and data summaries;

[0016] The standardized event data is aggregated according to a set time period and node classification to construct an event set, and an event set identifier is generated for each event set.

[0017] Hash all standardized event data in the event set, input the hash result into the RSA accumulator to generate the corresponding phase commitment value, and establish a mapping relationship between the event set identifier and the phase commitment value;

[0018] Based on the event set identifier, multiple nodes in the corresponding stage are invoked to perform BLS threshold signature operations on the hash result of the event set, and an aggregate signature is generated when the preset signature threshold is reached.

[0019] The phased commitment value is bound to the aggregated signature based on the event set identifier and registered in the blockchain to construct a phased data registration unit;

[0020] When an external traceability query request is received, the corresponding event set identifier is extracted based on the product identifier carried in the request. The stage data registration unit is retrieved from the blockchain. The stage commitment value is used to verify whether the target event is included in the event set. The aggregate signature is used to verify whether the event set has been jointly confirmed by trusted nodes.

[0021] Organize multiple stages of data registration units according to the order of event set identifiers to construct a complete traceability path structure for the product.

[0022] Optionally, the preprocessing includes timestamp calibration, field normalization, data denoising, missing data completion, event sorting, identity binding, unified encoding, and data digest generation.

[0023] Optionally, the generation of event sets and event set identifiers includes:

[0024] The data for the planting stage is set to a time period based on natural days; the data for the processing stage is set to a time period based on production batches; the data for the warehousing stage is set to a time period based on the date of entry into the warehouse; the data for the transportation stage is set to a time period based on the transportation distance range; and the data for the sales stage is set to a time period based on the transaction date.

[0025] Event nodes are divided into planting nodes, processing nodes, warehousing nodes, transportation nodes, and sales nodes according to their business functions;

[0026] Within each time period, standardized event data from nodes of the same category are extracted and sorted, duplicate events are removed, an ordered event sequence is established according to timestamps, the ordered event sequence is concatenated to generate a data string, forming an event set, and a unique event set identifier is generated based on the corresponding time period and node category information.

[0027] Optionally, the generation of interim commitment values ​​includes:

[0028] Extract the event identifier, event node identity, event timestamp, and event data summary from each standardized event data in the event set, and concatenate them according to the preset field order to form the corresponding data string;

[0029] Each data string is hashed using a predefined one-way hash function to generate a hash value corresponding to the standardized event data, forming a set of hash values.

[0030] Submit the hash value set as input to the RSA accumulator to generate a phase commitment value corresponding to the current event set;

[0031] Establish a key-value pair mapping relationship between the event set identifier of the current event set and the corresponding phase commitment value.

[0032] Optional, the RSA accumulator includes:

[0033] Extract the event identifier, event node identity, event timestamp, and event data summary from each standardized event data in the standardized event dataset, and concatenate them into a data string according to the preset field order;

[0034] Perform a one-way hash function operation on each data string to obtain the corresponding hash value, and form a hash value set.

[0035] Based on the organizational domain or responsibility domain corresponding to the event node identity of the standardized event data, the hash value set is classified into multiple sub-hash value sets, and each sub-hash value set corresponds to a structural isolation domain.

[0036] Each structural isolation domain is configured with an independent RSA accumulator environment, which includes RSA modulus parameters and RSA generator parameters specific to the structural isolation domain, and is used to perform local accumulation operations on its corresponding sub-hash value set within the structural isolation domain;

[0037] In the RSA accumulator environment corresponding to each structural isolation domain, each hash value in the sub-hash value set of the structural isolation domain is taken as input in turn, and an exponential multiplication operation is performed to generate a local commitment value for the structural isolation domain. The local commitment value satisfies the following definition:

[0038] ;

[0039] in, The local commitment value generated for the structural isolation domain. For the set of sub-hash values ​​corresponding to the structural isolation domain, and These are the RSA generator meta-parameters and RSA modulus parameters for the structural isolation domain, respectively. Indicates the sub-hash set For each hash value element in the array, mod represents the modulo operation on the result of the exponentiation, and the remainder is the final output value.

[0040] The local commitment values ​​corresponding to all structural isolation domains are taken as input and submitted to the global RSA accumulator environment. The global RSA accumulator environment includes global RSA modulus parameters and global RSA generator parameters. In the global RSA accumulator environment, a second-level exponential multiplication operation is performed on all local commitment values ​​to generate the final stage commitment value of the current event set. The final stage commitment value satisfies the following expression:

[0041] ;

[0042] in, The local commitment value generated for the structural isolation domain. and These are the generation meta-parameters and modulus parameters for the global RSA accumulator environment, respectively. This is the final interim commitment value. The total number of local commitment values. From arrive All local commitment values The product of.

[0043] Optionally, the execution of BLS threshold signatures includes:

[0044] The signed message is mapped to a signature curve point through a hash-to-curve function, which serves as the common input for all trusted signing nodes to calculate the local signature result;

[0045] The Shamir threshold secret sharing algorithm is used to divide the BLS master private key to generate multiple threshold signature private key shares, and each threshold signature private key share is allocated to each trusted signature node.

[0046] Each trusted signature node uses its corresponding threshold signature private key share to perform elliptic curve multiplication on the signature curve points to generate a local signature result.

[0047] After collecting multiple local signature results, the Lagrange interpolation coefficients are calculated based on the trusted signature node identifiers corresponding to each local signature result.

[0048] The local signature results are linearly combined according to the corresponding Lagrange interpolation coefficients to generate a unique aggregate signature.

[0049] Optionally, the construction of the stage data registration unit includes:

[0050] Extract the event set identifier, phase commitment value, and aggregate signature corresponding to the event set of the current phase;

[0051] A binding index structure is constructed based on the event set identifier, and the event set identifier is used as a unique identifier key to be structurally bound with the phased commitment value and the aggregate signature to form a registration binding record;

[0052] The registration and binding records are formatted and encapsulated to generate structured registration data containing event set identifiers, phased commitment values, aggregate signatures, and metadata fields;

[0053] Structured registration data is written as transaction data into the blockchain transaction call interface and submitted to the blockchain network relay node;

[0054] After the blockchain consensus mechanism is reached, the structured registration data is written into the on-chain ledger, generating a phase data registration unit that includes an event set identifier, a phase commitment value, and an aggregate signature.

[0055] Optionally, the verification of the target event includes the following steps:

[0056] Receive external traceability query requests containing product identifiers, match the target stage in the traceability path structure using the product identifiers, and extract the corresponding event set identifiers;

[0057] Based on the event set identifier, retrieve the phase data registration unit corresponding to the target phase from the blockchain ledger, and extract the registered phase commitment value and aggregate signature;

[0058] Extract the event identifier, event node identity, event timestamp, and event data summary from the target event data to be verified, and concatenate them according to the preset field order to generate the target data string;

[0059] Input the target data string into a predefined one-way hash function to generate a hash value for the target event data;

[0060] The hash value of the target event data is used as the query input, and the existence verification operation of the RSA accumulator is performed in combination with the phase commitment value to verify whether the target event data is included in the event set of the corresponding phase.

[0061] Based on the set of trusted signature node identifiers and aggregate signatures recorded in the stage data registration unit, a threshold signature verification operation is performed on the aggregate signature to determine whether the signature is jointly generated by the corresponding nodes and meets the signature threshold.

[0062] If both existence verification and threshold signature verification pass, the target event data is determined to be a valid and trustworthy event.

[0063] The beneficial effects of this invention are:

[0064] (1) This invention constructs a standardized event data model to structure and encode the original data of tea from planting, processing, storage, transportation to sales, and achieves event aggregation by setting time periods and node categories, providing a unified data foundation for subsequent reliable registration, and effectively improving data consistency and processing efficiency.

[0065] (2) This invention introduces a structure-isolated dual-domain RSA accumulator to realize the two-stage commitment calculation of all event hash values ​​in the event set. Through the subdomain local accumulation and main domain aggregation mapping mechanism, the security and structural verifiability of the event set commitment are significantly enhanced, and the conflict and scalability bottleneck of traditional single-domain accumulation in high-concurrency scenarios are solved.

[0066] (3) The present invention adopts the BLS threshold signature mechanism, which distributes the signature private key to multiple trusted nodes through the Shamir threshold secret sharing algorithm. Each node independently generates a local signature and completes the aggregate signature through Lagrange interpolation, thereby realizing joint authentication between nodes and enhancing the trusted endorsement capability and non-repudiation performance of the event set.

[0067] (4) This invention constructs a binding index structure based on event set identifiers, combines phased commitment values ​​and aggregate signatures to generate structured registration data, and writes it into the blockchain ledger to form a phased data registration unit, thereby realizing the consistency verification and integrity guarantee of data on the chain.

[0068] (5) In the traceability verification process, the present invention locates the event set identifier through product identifier, performs the existence verification of the target event using the phased commitment value, and completes the trusted node confirmation verification by combining aggregate signature, thus ensuring the integrity and verifiability of the traceability chain and realizing a multi-stage, multi-node traceable trusted closed loop. Attached Figure Description

[0069] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used in conjunction with embodiments of the invention to explain the invention and do not constitute a limitation thereof. In the drawings:

[0070] Figure 1 This is a flowchart of the smart tea garden blockchain traceability system and method proposed in this invention. Detailed Implementation

[0071] The present invention will now be described in further detail with reference to the accompanying drawings. These drawings are simplified schematic diagrams, illustrating only the basic structure of the invention, and therefore only show the components relevant to the invention.

[0072] refer to Figure 1 The smart tea garden blockchain traceability system and method include the following steps:

[0073] The event data generation module is used to collect raw data from the entire tea production process, preprocess it, and generate standardized event data containing event identifiers, node identities, timestamps, and data summaries.

[0074] The event set construction module is used to receive standardized event data, aggregate the standardized event data into event sets according to the set period and node type, and generate event set identifiers.

[0075] The phase commitment generation module is used to hash each standardized event data in the event set, input all hash results into the RSA accumulator to generate phase commitment values, and establish the correspondence between event set identifiers and phase commitment values.

[0076] The multi-node signature module is used to coordinate multiple nodes to perform BLS threshold signature on the hash result of the event set based on the event set identifier, and output the aggregate signature after the threshold condition is met;

[0077] The data registration module is used to associate the phased commitment value with the aggregated signature according to the event set identifier and write it into the blockchain, thus forming a phased data registration unit;

[0078] The verification module is used to receive query requests, parse product identifiers and locate corresponding event set identifiers, retrieve phase data registration units from the blockchain, and complete the verification of event existence and node consistency based on phase commitment values ​​and aggregate signatures.

[0079] The path organization module is used to construct a complete product traceability path structure by splicing together stage data registration units based on the event set identifier order.

[0080] In this embodiment, the modules are interconnected using the following method:

[0081] Collect raw data from the entire process of tea planting, processing, storage, transportation to sales, preprocess it, and generate standardized event data containing event identifiers, node identities, timestamps and data summaries;

[0082] The standardized event data is aggregated according to a set time period and node classification to construct an event set, and an event set identifier is generated for each event set.

[0083] Hash all standardized event data in the event set, input the hash result into the RSA accumulator to generate the corresponding phase commitment value, and establish a mapping relationship between the event set identifier and the phase commitment value;

[0084] Based on the event set identifier, multiple nodes in the corresponding stage are invoked to perform BLS threshold signature operations on the hash result of the event set, and an aggregate signature is generated when the preset signature threshold is reached.

[0085] The phased commitment value is bound to the aggregated signature based on the event set identifier and registered in the blockchain to construct a phased data registration unit;

[0086] When an external traceability query request is received, the corresponding event set identifier is extracted based on the product identifier carried in the request. The stage data registration unit is retrieved from the blockchain. The stage commitment value is used to verify whether the target event is included in the event set. The aggregate signature is used to verify whether the event set has been jointly confirmed by trusted nodes.

[0087] Organize multiple stages of data registration units according to the order of event set identifiers to construct a complete traceability path structure for the product.

[0088] In this embodiment, the preprocessing includes timestamp calibration, field normalization, data denoising, missing data completion, event sorting, identity binding, unified encoding, and data digest generation.

[0089] In this embodiment, the generation of the event set and the event set identifier includes:

[0090] The data for the planting stage is set to a time period based on natural days; the data for the processing stage is set to a time period based on production batches; the data for the warehousing stage is set to a time period based on the date of entry into the warehouse; the data for the transportation stage is set to a time period based on the transportation distance range; and the data for the sales stage is set to a time period based on the transaction date.

[0091] Event nodes are divided into planting nodes, processing nodes, warehousing nodes, transportation nodes, and sales nodes according to their business functions;

[0092] Within each time period, standardized event data from nodes of the same category are extracted and sorted, duplicate events are removed, an ordered event sequence is established according to timestamps, the ordered event sequence is concatenated to generate a data string, forming an event set, and a unique event set identifier is generated based on the corresponding time period and node category information.

[0093] In this embodiment, the generation of the phased commitment value includes:

[0094] Extract the event identifier, event node identity, event timestamp, and event data summary from each standardized event data in the event set, and concatenate them according to the preset field order to form the corresponding data string;

[0095] Each data string is hashed using a predefined one-way hash function to generate a hash value corresponding to the standardized event data, forming a set of hash values.

[0096] Submit the hash value set as input to the RSA accumulator to generate a phase commitment value corresponding to the current event set;

[0097] Establish a key-value pair mapping relationship between the event set identifier of the current event set and the corresponding phase commitment value.

[0098] A predefined one-way hash function refers to a hash function that is pre-defined and invoked, satisfying the requirements of cryptographic one-wayness, collision resistance, and determinism. It is used to generate a fixed-length digest value for standardized event data, preferably the secure hash algorithm SHA-256. Its input is the concatenated event data string, and its output is a 256-bit binary hash value. Its formal definition is: Where m is a data string obtained by concatenating the event identifier, event node identity, event timestamp, and event data digest in a predetermined order, and h is the corresponding output hash value; the hash function structure includes message filling, message grouping, initial vector setting, compression function, and output permutation module.

[0099] In this embodiment, the RSA accumulator includes:

[0100] Extract the event identifier, event node identity, event timestamp, and event data summary from each standardized event data in the standardized event dataset, and concatenate them into a data string according to the preset field order;

[0101] Perform a one-way hash function operation on each data string to obtain the corresponding hash value, and form a hash value set.

[0102] Based on the organizational domain or responsibility domain corresponding to the event node identity of the standardized event data, the hash value set is classified into multiple sub-hash value sets, and each sub-hash value set corresponds to a structural isolation domain.

[0103] Each structural isolation domain is configured with an independent RSA accumulator environment, which includes RSA modulus parameters and RSA generator parameters specific to the structural isolation domain, and is used to perform local accumulation operations on its corresponding sub-hash value set within the structural isolation domain;

[0104] In the RSA accumulator environment corresponding to each structural isolation domain, each hash value in the sub-hash value set of the structural isolation domain is taken as input in turn, and an exponential multiplication operation is performed to generate a local commitment value for the structural isolation domain. The local commitment value satisfies the following definition:

[0105] ;

[0106] in, The local commitment value generated for the structural isolation domain. For the set of sub-hash values ​​corresponding to the structural isolation domain, and These are the RSA generator meta-parameters and RSA modulus parameters for the structural isolation domain, respectively. Indicates the sub-hash set For each hash value element in the array, mod represents the modulo operation on the result of the exponentiation, and the remainder is the final output value.

[0107] The local commitment values ​​corresponding to all structural isolation domains are taken as input and submitted to the global RSA accumulator environment. The global RSA accumulator environment includes global RSA modulus parameters and global RSA generator parameters. In the global RSA accumulator environment, a second-level exponential multiplication operation is performed on all local commitment values ​​to generate the final stage commitment value of the current event set. The final stage commitment value satisfies the following expression:

[0108] ;

[0109] in, The local commitment value generated for the structural isolation domain. and These are the generation meta-parameters and modulus parameters for the global RSA accumulator environment, respectively. This is the final interim commitment value. The total number of local commitment values. From arrive All local commitment values The product;

[0110] This formula originates from the modular exponent commitment mechanism in mathematical number theory and the RSA accumulator structure, and its basic form is: This is used to generate compact, irreversible cryptographic commitment values ​​from the input set. Based on this, the proposed dual-domain extended structure first performs independent local RSA accumulation within each structural isolation domain to form a local commitment value. Then all The RSA exponent is incremented again as input to construct the final interim commitment value. This structure essentially introduces a two-level nested exponent model, supporting verifiable aggregation of isolated data from multiple organizations or responsibility domains, thus improving the system's capabilities in terms of structural controllability and security consistency. Both sides of the formula are modulo operations. Integer elements within the group maintain consistent dimensions, conforming to the mathematical closure and cryptographic security principles of the RSA encryption system.

[0111] In this embodiment, the execution of BLS threshold signature includes:

[0112] The signed message is mapped to a signature curve point through a hash-to-curve function, which serves as the common input for all trusted signing nodes to calculate the local signature result;

[0113] The Shamir threshold secret sharing algorithm is used to divide the BLS master private key to generate multiple threshold signature private key shares, and each threshold signature private key share is allocated to each trusted signature node.

[0114] Each trusted signature node uses its corresponding threshold signature private key share to perform elliptic curve multiplication on the signature curve points to generate a local signature result.

[0115] After collecting multiple local signature results, the Lagrange interpolation coefficients are calculated based on the trusted signature node identifiers corresponding to each local signature result.

[0116] The local signature results are linearly combined according to their corresponding Lagrange interpolation coefficients to generate a unique aggregate signature;

[0117] The Shamir threshold secret sharing algorithm is an encrypted segmentation method based on polynomial interpolation. Its basic principle is: select a finite field A random (t-1) degree polynomial f(x) is given on the x-axis, such that the secret value is the value of the polynomial at its zero point, i.e., f(0) = s, where s is the secret to be distributed. Subsequently, each participant is assigned a unique non-zero x-coordinate. And calculate the corresponding point value. Soon This serves as the secret share for each participant. When at least t participants jointly provide their point values, the original polynomial f(x) can be recovered via Lagrange interpolation, thus restoring the secret s; when there are fewer than t shares, the secret cannot be derived, ensuring threshold security. The correctness of this algorithm is based on the mathematical property that a polynomial over a finite field is uniquely determined at t points.

[0118] Elliptic curve multiplication refers to the operation of multiplying a point P on a given elliptic curve group E by a scalar k, denoted as: The operation involves adding point P to itself k times under the elliptic curve addition rule. Based on the addition and doubling rules on elliptic curves, this operation is recursively calculated within a finite field using point addition (adding two points) and point doubling (adding a single point). It typically employs binary expansion combined with a "fast exponentiation algorithm" for efficient computation. In cryptography, this operation is used to generate public keys or signatures and is a core operator constituting the security of elliptic curve cryptography systems. Due to the computational difficulty of the elliptic curve discrete logarithm problem, deriving k from Q in reverse is computationally infeasible, thus ensuring the one-way nature and security of this operation.

[0119] In this embodiment, the construction of the stage data registration unit includes:

[0120] Extract the event set identifier, phase commitment value, and aggregate signature corresponding to the event set of the current phase;

[0121] A binding index structure is constructed based on the event set identifier, and the event set identifier is used as a unique identifier key to be structurally bound with the phased commitment value and the aggregate signature to form a registration binding record;

[0122] The registration and binding records are formatted and encapsulated to generate structured registration data containing event set identifiers, phased commitment values, aggregate signatures, and metadata fields;

[0123] Structured registration data is written as transaction data into the blockchain transaction call interface and submitted to the blockchain network relay node;

[0124] After the blockchain consensus mechanism is reached, the structured registration data is written into the on-chain ledger, generating a phase data registration unit that includes an event set identifier, a phase commitment value, and an aggregate signature.

[0125] In this embodiment, the verification of the target event includes the following steps:

[0126] Receive external traceability query requests containing product identifiers, match the target stage in the traceability path structure using the product identifiers, and extract the corresponding event set identifiers;

[0127] Based on the event set identifier, retrieve the phase data registration unit corresponding to the target phase from the blockchain ledger, and extract the registered phase commitment value and aggregate signature;

[0128] Extract the event identifier, event node identity, event timestamp, and event data summary from the target event data to be verified, and concatenate them according to the preset field order to generate the target data string;

[0129] Input the target data string into a predefined one-way hash function to generate a hash value for the target event data;

[0130] The hash value of the target event data is used as the query input, and the existence verification operation of the RSA accumulator is performed in combination with the phase commitment value to verify whether the target event data is included in the event set of the corresponding phase.

[0131] Based on the set of trusted signature node identifiers and aggregate signatures recorded in the stage data registration unit, a threshold signature verification operation is performed on the aggregate signature to determine whether the signature is jointly generated by the corresponding nodes and meets the signature threshold.

[0132] If both existence verification and threshold signature verification pass, the target event data is determined to be a valid and trustworthy event;

[0133] Existence verification refers to using the RSA accumulator, a cryptographic commitment structure, to determine whether a hash value of a target event data belongs to the committed event set by combining it with previously generated and registered phase commitment values ​​on the blockchain and constructing a proof and verification algorithm. The verification process does not require revealing other members of the set. It is based on the theory of set member verifiability and is widely found in the fields of mathematical set commitments and zero-knowledge proofs.

[0134] Threshold signature verification refers to the process of verifying the aggregate signature using the BLS threshold signature system, by utilizing the aggregate signature and the corresponding trusted signature node identifier, and by performing public key verification according to the BLS signature verification algorithm. This verifies whether the aggregate signature was jointly generated by a group of trusted signature nodes that have reached at least a set threshold. This method is based on the cryptographic foundation of Shamir threshold secret sharing and bilinear pairing operations, ensuring that the signature is only valid under the consistent endorsement of multiple nodes.

[0135] Example 1:

[0136] To verify the feasibility of this invention in practice, it was applied to a smart agriculture scenario. Addressing issues such as inconsistent data collection, difficulty in detecting tampering of traceability information, and challenges in establishing trust among nodes throughout the entire tea-growing process from planting to sales, the smart tea garden blockchain traceability method described in this invention was deployed and applied. This method combines blockchain technology, a predefined one-way hash function, a structured, isolated dual-domain RSA accumulator, BLS threshold signatures, and a trusted node joint verification mechanism to achieve structured management and reliable traceability of events throughout the entire tea lifecycle.

[0137] In practical applications, the traceability system integrates data from five business nodes: planting, processing, warehousing, transportation, and sales. This includes multiple data channels such as agricultural sensors, production equipment interfaces, logistics systems, and trading platforms. When an event occurs, each data channel automatically extracts the event identifier, event node identity, event timestamp, and event data summary, forming standardized event data with a unified structure. To ensure data consistency and facilitate subsequent verification, all standardized event data undergoes noise removal, time alignment, and redundancy elimination through a preprocessing module, forming a reliable original data foundation.

[0138] The traceability system sets corresponding time periods according to different node categories. For example, planting nodes are aggregated by natural days, processing nodes by batches, warehousing nodes by entry date, transportation nodes by transportation segment, and sales nodes by transaction day period. The system extracts and sorts the standardized event data within each period, forms an ordered event sequence based on timestamps, concatenates them into an event set, and generates a unique event set identifier for labeling.

[0139] After generating the event set, the system concatenates the key fields in each standardized event data and inputs them into a predefined one-way hash function to generate a hash value set. This hash value set is then sent to a structure-isolated two-domain RSA accumulator for processing. During the initialization phase, the accumulator assigns an independent subdomain to each type of node and establishes a local accumulation state. Each subdomain performs independent hash accumulation on its own node's event set. Subsequently, in the structure aggregation phase, the accumulated values ​​from multiple subdomains are combined into a global phased commitment value, achieving cross-node secure isolation and unified mapping.

[0140] After generating the phased commitment value, the system uses the hash result of the event set as the message to be signed, maps it to the signature curve point using a hash-to-curve function, and initiates the BLS threshold signature process. This process is based on the Shamir threshold secret sharing algorithm, dividing the BLS master private key into multiple threshold signature private key shares and distributing them to trusted signature nodes. Each trusted signature node performs elliptic curve multiplication on the signature curve point to generate a local signature result. After collecting a preset threshold number of local signatures, the system calculates Lagrange interpolation coefficients based on the node identifier, linearly combines the local signatures, and generates a unique aggregate signature.

[0141] The system constructs an index structure based on event set identifiers, structurally binding event set identifiers, phased commitment values, and aggregate signatures, encapsulating them into registration binding records, and formatting them as structured registration data. This structured registration data is submitted to the blockchain network via a blockchain transaction call interface, and after consensus is reached, it is formally written into the ledger, forming an immutable phased data registration unit.

[0142] When an external user or platform initiates a traceability query request, the system parses the product identifier carried in the request, maps it to the corresponding event set identifier, and calls the blockchain evidence storage interface to retrieve the stage data registration unit corresponding to the event set identifier. The system first extracts the event identifier and data digest of the target event, calculates its hash value, and uses the registered stage commitment value to verify whether the event is included in the event set using the RSA existence verification method. After successful verification, the system further uses the registered list of trusted signature nodes and aggregate signatures to perform BLS threshold signature verification on the event set hash result, ensuring that the proof result is jointly confirmed by multiple nodes and has not been tampered with.

[0143] In actual testing, the system sampled and analyzed the traceability data coverage, performance of generating phased commitment values, BLS signature latency, and user response time before and after deployment, obtaining the following data:

[0144] Table 1. Performance Evaluation of Trusted Coverage for Source Traceability

[0145] project Before deployment After deployment Average data coverage 51.3% 95.2% Verifiability of stage events 65.4% 99.1% User response time (ms) 1720 654 Forged event interception rate 37.8% 98.6%

[0146] Table 2. Phased Commitment and Signature Performance Evaluation

[0147] Node categories Average number of events Commitment value generation time (ms) Threshold signature generation time (ms) Planting nodes 120 85 73 Processing nodes 76 69 66 Sales Node 98 92 78

[0148] Analysis of the data in Tables 1 and 2 shows that the smart tea garden blockchain traceability method of this invention has achieved significant optimization in several key performance indicators. First, the data coverage rate increased from 51.3% before deployment to 95.2% after deployment, indicating that the standardized event data model effectively integrated the original data from each stage, greatly enhancing data integrity. The verifiability rate of stage events increased from 65.4% to 99.1%, demonstrating that the structured isolated dual-domain RSA accumulator and existence verification mechanism can efficiently support integrity proof at the event set level. User response time decreased from 1720ms to 654ms, verifying that the optimized stage data registration unit structure and on-chain call design significantly improved system response efficiency. Simultaneously, the forgery event interception rate jumped from 37.8% to 98.6%, fully demonstrating the strong inhibitory ability of the stage commitment value and BLS threshold signature joint mechanism against data tampering. Further analysis of Table 2 shows that, under various node environments, the average generation time of the phased commitment value is controlled within 100ms, and the generation time of the aggregated signature is also between 70-80ms. This indicates that the present invention maintains good real-time performance even in concurrent node environments, meeting the dual requirements of security and performance in industrial applications. Overall, this method not only solves the problems of data dispersion, unverifiable nature, and low performance in traditional traceability schemes, but also constructs a stable, secure, and scalable blockchain trusted traceability framework.

[0149] This embodiment fully demonstrates that the present invention has strong engineering applicability and data security support capabilities in actual smart agriculture scenarios, and can be widely promoted to various high-value chain scenarios of agricultural products.

[0150] The above description is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any equivalent substitutions or modifications made by those skilled in the art within the scope of the technology disclosed in the present invention, based on the technical solution and inventive concept of the present invention, should be covered within the scope of protection of the present invention.

Claims

1. A smart tea garden blockchain traceability system, characterized in that, include: The event data generation module is used to collect raw data from the entire tea production process, preprocess it, and generate standardized event data containing event identifiers, node identities, timestamps, and data summaries. The event set construction module is used to receive standardized event data, aggregate the standardized event data into event sets according to the set period and node type, and generate event set identifiers. The phase commitment generation module is used to hash each standardized event data in the event set, input all hash results into the RSA accumulator to generate phase commitment values, and establish the correspondence between event set identifiers and phase commitment values. The multi-node signature module is used to coordinate multiple nodes to perform BLS threshold signature on the hash result of the event set based on the event set identifier, and output the aggregate signature after the threshold condition is met; The data registration module is used to associate the phased commitment value with the aggregated signature according to the event set identifier and write it into the blockchain, thus forming a phased data registration unit; The verification module is used to receive query requests, parse product identifiers and locate corresponding event set identifiers, retrieve phase data registration units from the blockchain, and complete the verification of event existence and node consistency based on phase commitment values ​​and aggregate signatures. The path organization module is used to construct a complete product traceability path structure by splicing together stage data registration units based on the event set identifier order.

2. A smart tea garden blockchain traceability method, characterized in that, The modules are connected in the following way: Collect raw data from the entire process of tea planting, processing, storage, transportation to sales, preprocess it, and generate standardized event data containing event identifiers, node identities, timestamps and data summaries; The standardized event data is aggregated according to a set time period and node classification to construct an event set, and an event set identifier is generated for each event set. Hash all standardized event data in the event set, input the hash result into the RSA accumulator to generate the corresponding phase commitment value, and establish a mapping relationship between the event set identifier and the phase commitment value; Based on the event set identifier, multiple nodes in the corresponding stage are invoked to perform BLS threshold signature operations on the hash result of the event set, and an aggregate signature is generated when the preset signature threshold is reached. The phased commitment value is bound to the aggregated signature based on the event set identifier and registered in the blockchain to construct a phased data registration unit; When an external traceability query request is received, the corresponding event set identifier is extracted based on the product identifier carried in the request. The stage data registration unit is retrieved from the blockchain. The stage commitment value is used to verify whether the target event is included in the event set. The aggregate signature is used to verify whether the event set has been jointly confirmed by trusted nodes. Organize multiple stages of data registration units according to the order of event set identifiers to construct a complete traceability path structure for the product.

3. The smart tea garden blockchain traceability method according to claim 2, characterized in that, The preprocessing includes timestamp calibration, field normalization, data denoising, missing data completion, event sorting, identity binding, unified encoding, and data digest generation.

4. The smart tea garden blockchain traceability method according to claim 2, characterized in that, The generation of event sets and event set identifiers includes: The data for the planting stage is set to a time period based on natural days; the data for the processing stage is set to a time period based on production batches; the data for the warehousing stage is set to a time period based on the date of entry into the warehouse; the data for the transportation stage is set to a time period based on the transportation distance range; and the data for the sales stage is set to a time period based on the transaction date. Event nodes are divided into planting nodes, processing nodes, warehousing nodes, transportation nodes, and sales nodes according to their business functions; Within each time period, standardized event data from nodes of the same category are extracted and sorted, duplicate events are removed, an ordered event sequence is established according to timestamps, the ordered event sequence is concatenated to generate a data string, forming an event set, and a unique event set identifier is generated based on the corresponding time period and node category information.

5. The smart tea garden blockchain traceability method according to claim 2, characterized in that, The generation of interim commitment values ​​includes: Extract the event identifier, event node identity, event timestamp, and event data summary from each standardized event data in the event set, and concatenate them according to the preset field order to form the corresponding data string; Each data string is hashed using a predefined one-way hash function to generate a hash value corresponding to the standardized event data, forming a set of hash values. Submit the hash value set as input to the RSA accumulator to generate a phase commitment value corresponding to the current event set; Establish a key-value pair mapping relationship between the event set identifier of the current event set and the corresponding phase commitment value.

6. The smart tea garden blockchain traceability method according to claim 5, characterized in that, The RSA accumulator includes: Extract the event identifier, event node identity, event timestamp, and event data summary from each standardized event data in the standardized event dataset, and concatenate them into a data string according to the preset field order; Perform a one-way hash function operation on each data string to obtain the corresponding hash value, and form a hash value set. Based on the organizational domain or responsibility domain corresponding to the event node identity of the standardized event data, the hash value set is classified into multiple sub-hash value sets, and each sub-hash value set corresponds to a structural isolation domain. Each structural isolation domain is configured with an independent RSA accumulator environment, which includes RSA modulus parameters and RSA generator parameters specific to the structural isolation domain, and is used to perform local accumulation operations on its corresponding sub-hash value set within the structural isolation domain; In the RSA accumulator environment corresponding to each structural isolation domain, each hash value in the sub-hash value set of the structural isolation domain is taken as input in turn, and an exponential multiplication operation is performed to generate a local commitment value for the structural isolation domain. The local commitment value satisfies the following definition: ； in, The local commitment value generated for the structural isolation domain. For the set of sub-hash values ​​corresponding to the structural isolation domain, and These are the RSA generator meta-parameters and RSA modulus parameters for the structural isolation domain, respectively. Indicates the sub-hash set For each hash value element in the array, mod represents the modulo operation on the result of the exponentiation, and the remainder is the final output value. The local commitment values ​​corresponding to all structural isolation domains are taken as input and submitted to the global RSA accumulator environment. The global RSA accumulator environment includes global RSA modulus parameters and global RSA generator parameters. In the global RSA accumulator environment, a second-level exponential multiplication operation is performed on all local commitment values ​​to generate the final stage commitment value of the current event set. The final stage commitment value satisfies the following expression: ； in, The local commitment value generated for the structural isolation domain. and These are the generation meta-parameters and modulus parameters for the global RSA accumulator environment, respectively. This is the final interim commitment value. The total number of local commitment values. From arrive All local commitment values The product of.

7. The smart tea garden blockchain traceability method according to claim 2, characterized in that, The execution of BLS threshold signatures includes: The signed message is mapped to a signature curve point through a hash-to-curve function, which serves as the common input for all trusted signing nodes to calculate the local signature result; The Shamir threshold secret sharing algorithm is used to divide the BLS master private key to generate multiple threshold signature private key shares, and each threshold signature private key share is allocated to each trusted signature node. Each trusted signature node uses its corresponding threshold signature private key share to perform elliptic curve multiplication on the signature curve points to generate a local signature result. After collecting multiple local signature results, the Lagrange interpolation coefficients are calculated based on the trusted signature node identifiers corresponding to each local signature result. The local signature results are linearly combined according to the corresponding Lagrange interpolation coefficients to generate a unique aggregate signature.

8. The smart tea garden blockchain traceability method according to claim 2, characterized in that, The construction of the phased data registration unit includes: Extract the event set identifier, phase commitment value, and aggregate signature corresponding to the event set of the current phase; A binding index structure is constructed based on the event set identifier, and the event set identifier is used as a unique identifier key to be structurally bound with the phased commitment value and the aggregate signature to form a registration binding record; The registration and binding records are formatted and encapsulated to generate structured registration data containing event set identifiers, phased commitment values, aggregate signatures, and metadata fields; Structured registration data is written as transaction data into the blockchain transaction call interface and submitted to the blockchain network relay node; After the blockchain consensus mechanism is reached, the structured registration data is written into the on-chain ledger, generating a phase data registration unit that includes an event set identifier, a phase commitment value, and an aggregate signature.

9. The smart tea garden blockchain traceability method according to claim 2, characterized in that, Verification of the target event includes the following steps: Receive external traceability query requests containing product identifiers, match the target stage in the traceability path structure using the product identifiers, and extract the corresponding event set identifiers; Based on the event set identifier, retrieve the phase data registration unit corresponding to the target phase from the blockchain ledger, and extract the registered phase commitment value and aggregate signature; Extract the event identifier, event node identity, event timestamp, and event data summary from the target event data to be verified, and concatenate them according to the preset field order to generate the target data string; Input the target data string into a predefined one-way hash function to generate a hash value for the target event data; The hash value of the target event data is used as the query input, and the existence verification operation of the RSA accumulator is performed in combination with the phase commitment value to verify whether the target event data is included in the event set of the corresponding phase. Based on the set of trusted signature node identifiers and aggregate signatures recorded in the stage data registration unit, a threshold signature verification operation is performed on the aggregate signature to determine whether the signature is jointly generated by the corresponding nodes and meets the signature threshold. If both existence verification and threshold signature verification pass, the target event data is determined to be a valid and trustworthy event.

Images