Two-dimensional code full life cycle tracking management system based on dynamic encryption

Abstract

The application discloses a two-dimensional code full life cycle tracking management system based on dynamic encryption, relates to the technical field of two-dimensional code tracking management, and achieves dynamic generation and security binding of two-dimensional code content by constructing a target object life cycle state sequence diagram, dynamically generating a two-dimensional code coding index based on a current state, a device environment and time factors, and combining a multi-factor asymmetric encryption mode; meanwhile, legality verification of two-dimensional code access behavior is carried out through path consistency verification and state chain continuity judgment, and two-dimensional code effectiveness is judged in combination with an environment deviation detection mechanism; compared with the prior art, the application can effectively prevent two-dimensional code forgery, replay and unauthorized access, improve the uniqueness, verifiability and security of two-dimensional codes in the full life cycle, and is suitable for high-security product tracking, anti-fake authentication and multi-stage identity recognition scenes.

Description

Technical Field

[0001] This invention relates to the field of QR code tracking and management technology, specifically to a dynamic encryption-based QR code full lifecycle tracking and management system. Background Technology

[0002] With the rapid development of applications such as supply chain management, product traceability, logistics tracking, and anti-counterfeiting authentication, QR codes, as a convenient tool for information identification and transmission, have been widely used in various product labels, logistics packaging, and invoices. However, current technologies rely on static encoding for QR code generation and recognition. Once generated, the content cannot be changed, lacking dynamic updates and access control capabilities, making it easy to copy and counterfeit, and compromising data security and controllability.

[0003] Furthermore, QR codes face multi-entity operational needs at different stages throughout the product lifecycle, such as production, transportation, warehousing, sales, and after-sales service. Traditional QR code management systems lack lifecycle status recognition and multi-stage permission control mechanisms, making it impossible to track QR codes from generation, distribution, use, and update to expiration. This leads to data gaps, unclear responsibilities, and increased risks of tampering, limiting their deep application in high-security fields such as medical devices, high-value consumer goods, and important ticketing scenarios.

[0004] Therefore, there is an urgent need to propose a QR code tracking and management system with dynamic encryption capabilities, full lifecycle status management, and cross-role access control to solve the problems of weak information security, incomplete traceability, and poor data consistency of traditional technologies. Summary of the Invention

[0005] The purpose of this invention is to provide a QR code full lifecycle tracking and management system based on dynamic encryption to address the shortcomings of the prior art.

[0006] To achieve the above objectives, the present invention provides the following technical solution: a dynamic encryption-based QR code lifecycle tracking and management system, comprising:

[0007] The state modeling module is used to construct state sequence diagrams based on the lifecycle flow of the target object;

[0008] The index generation module is used to generate a state hash index based on the state identifier of the current life cycle state node of the target object when generating the QR code, and combine it with a random perturbation factor to form an encoding index for embedding the QR code.

[0009] The dynamic encryption module is used to generate a one-to-one dynamic key based on several encryption factors and to perform asymmetric encryption on the QR code content.

[0010] The path verification module is used to extract the current state information submitted by the accessing party when the QR code is accessed, and compare it with the legal state transition path recorded in the state sequence diagram. If they match, the decryption operation is allowed; otherwise, the decoding request is rejected.

[0011] The state chain recording module is used to generate a state transition summary for each legitimate access or state change event of the QR code and to construct the state chain structure.

[0012] The failure control module is used to determine the validity status of the QR code based on the continuity judgment result of the state chain, the consistency verification result of the current state and the path, and the degree of deviation of the access environment. If there is an anomaly, the QR code is marked as invalid and subsequent recognition is rejected.

[0013] Preferably, the state modeling module specifically includes:

[0014] Obtain the lifecycle metadata of the target object, including processing nodes, stage tags, and operation subject information, and establish an initial state list;

[0015] Based on the operational dependencies between each stage, a directed acyclic graph is used to construct the state transition structure, and a path hash identifier that is bound to upstream and downstream nodes is dynamically generated for each node.

[0016] Multi-factor state change conditions are set for the state node, including time thresholds, device role labels, and environmental context rules.

[0017] Preferably, the index generation module specifically includes:

[0018] Extract the state identifier of the current lifecycle state node of the target object, and combine it with the object category code to generate a state context summary;

[0019] A one-time perturbation factor is introduced based on the state context summary. The perturbation factor is calculated from the current timestamp, the fingerprint of the QR code generating device, and the hash of the local environment variables of the target object.

[0020] The state context summary is combined with the perturbation factor, and hash compression based on salt scrambling is performed to generate a unique state hash index, which is then embedded as the encoding index of the QR code into the QR code graphic data structure.

[0021] Preferably, the dynamic encryption module includes:

[0022] Extract the state key of the current state node, and combine it with the physical hardware characteristics of the QR code generation device, the current network signal fingerprint, and the geographical location feature value to construct a set of encryption factors;

[0023] The set of encryption factors is input into the dynamic key generation engine, and a one-time session key is generated using a dynamic derivation algorithm based on an asynchronous factor perturbation model.

[0024] The session key is used to perform asymmetric encryption on the content to be encoded in the QR code, which includes a state hash index, a dynamic access tag, and a time lock field.

[0025] Preferably, the path verification module includes:

[0026] Receive the current status information and operation context submitted by the accessing party, parse the status identifier, access device number and timestamp contained therein, and construct an access status request packet;

[0027] The set of legal state paths in the state sequence graph is called, and combined with the accessor's most recent verified state node, the reachability matching path is calculated based on the weighted state transition mapping graph.

[0028] The fuzzy path verification algorithm is used to compare the access request path with the system registered path. If they match within the error tolerance and the jump order, role identification and time window all meet the preset conditions, decryption is allowed; otherwise, access is denied.

[0029] Preferably, the state chain recording module includes:

[0030] Listen to the lifecycle event stream of the target object, and when a valid QR code access or status transition behavior is detected, obtain the current status identifier, previous status hash and timestamp in real time;

[0031] The process is combined using a process summary generation engine to generate state transition summary nodes. These nodes are encoded using an irreversible hashing mechanism and do not contain any reversible state data.

[0032] The generated state transition summary nodes are linked sequentially in chronological order to form a linear state chain structure. The state chain is used only for state consistency verification and does not participate in the QR code generation or decryption process.

[0033] Preferably, the failure control module includes:

[0034] Call the state chain recording module to analyze the continuity of the state chain of the object to which the QR code belongs. If a time discontinuity or unauthorized node insertion is found in the jump summary, the state chain is determined to be interrupted.

[0035] Compare the current access request path with the valid path mapping in the state sequence diagram. If the path is not connected, the jump direction is reversed, or there is an illegal cross-level behavior, then mark the path as inconsistent.

[0036] The system detects the difference between the access device's environmental parameters and the environmental characteristics recorded when the QR code was generated. If the deviation exceeds a set threshold, an environmental anomaly flag is triggered.

[0037] If there is a state chain interruption, inconsistent marking path, or triggering of an abnormal environment flag, the QR code is determined to be invalid and its subsequent recognition and decoding operations are rejected.

[0038] The technical effects and advantages provided by the present invention in the above technical solution are as follows:

[0039] 1. This invention constructs a QR code lifecycle tracking and management system based on dynamic encryption, achieving deep binding between QR code content and the target object's state, device environment, and access path. This ensures that the QR code possesses uniqueness, unpredictability, and non-replicability at different lifecycle stages. In particular, the introduction of state modeling graphs, state hash indexes, dynamic perturbation encryption, path consistency verification, and state chain structures enables dynamic control of QR code access and path legitimacy verification, effectively preventing QR code forgery, reuse, or unauthorized access.

[0040] 2. The technical solution provided by this invention significantly improves the capabilities of QR codes in terms of security, traceability, access control, and lifecycle management. Especially in complex application scenarios involving multiple roles, states, and environments, this system can support real-time determination of QR code validity, automatically identify illegal access paths and environmental anomalies, and greatly enhance the applicability and credibility of QR codes in scenarios such as supply chain management, anti-counterfeiting traceability, and high-security invoices. Attached Figure Description

[0041] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this invention. For those skilled in the art, other drawings can be obtained based on these drawings.

[0042] Figure 1 This is a mind map of the system modules of the present invention. Detailed Implementation

[0043] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0044] For examples, please refer to Figure 1As shown in this embodiment, the QR code full lifecycle tracking and management system based on dynamic encryption includes:

[0045] The state modeling module is used to construct state sequence diagrams based on the lifecycle flow of the target object;

[0046] The index generation module is used to generate a state hash index based on the state identifier of the current life cycle state node of the target object when generating the QR code, and combine it with a random perturbation factor to form an encoding index for embedding the QR code.

[0047] The dynamic encryption module is used to generate a one-to-one dynamic key based on several encryption factors and to perform asymmetric encryption on the QR code content.

[0048] The path verification module is used to extract the current state information submitted by the accessing party when the QR code is accessed, and compare it with the legal state transition path recorded in the state sequence diagram. If they match, the decryption operation is allowed; otherwise, the decoding request is rejected.

[0049] The state chain recording module is used to generate a state transition summary for each legitimate access or state change event of the QR code and to construct the state chain structure.

[0050] The failure control module is used to determine the validity status of the QR code based on the continuity judgment result of the state chain, the consistency verification result of the current state and the path, and the degree of deviation of the access environment. If there is an anomaly, the QR code is marked as invalid and subsequent recognition is rejected.

[0051] The state modeling module is used to construct a state sequence diagram of the target object throughout its entire lifecycle. The state sequence diagram is a directed state graph structure used to describe the reachable paths and state change logic of the target object between each lifecycle stage. Specifically, it includes the following steps:

[0052] Lifecycle information collection: First, obtain the lifecycle process definition of the business scenario to which the target object belongs. This process definition includes multiple stage nodes, such as "production", "quality inspection", "warehousing", "transportation", "sales" and "after-sales". At the same time, collect the types of participating entities, operation permissions and event triggering conditions of each stage.

[0053] State Node Construction: Based on the lifecycle process, each stage node is mapped to a state node, and a unique state identifier is assigned to each state node. This identifier is generated by a joint hash of object type, stage number and timestamp, ensuring that the state node is globally unique and unpredictable.

[0054] Path relationship setting: Directed edges are constructed using logical dependencies between stages, forming a non-cyclic state transition structure. During this process, the system sets a set of legal transition paths for each state node based on the role trust relationships between upstream and downstream nodes, business sequence logic, and constraint rules. This path set not only records the reachable node numbers but also embeds a path constraint summary for subsequent path consistency verification.

[0055] State change condition configuration: Configure dynamic state change conditions for each state node. These conditions include, but are not limited to, operation time window, execution device fingerprint, geographical area range, and environmental context features. The system supports real-time adjustment of change thresholds through a policy rule engine, enabling state transitions to be based not only on static process logic but also on environmental and behavioral constraints, thus achieving dynamic state modeling.

[0056] The state sequence diagram constructed in the above manner has the following technical effects: it supports structured modeling of multi-stage states throughout the entire lifecycle of a target object; it can realize the legality verification of state paths and the identification of abnormal behaviors; and it can work in conjunction with QR code encryption mechanisms to realize state-driven tracking and access control.

[0057] The index generation module is used to build a highly dynamic and secure encoded index during the QR code generation process to ensure that the QR code has uniqueness, unpredictability, and non-copyability in different lifecycle states. Its specific implementation includes the following:

[0058] Status Identifier Acquisition: When a target object enters a certain lifecycle node (such as quality inspection or outbound), the system first calls the state sequence diagram generated in the state modeling module to obtain the status identifier corresponding to the current node. This identifier is a unique 16-32 bit code, formed by hashing the status name, stage number, and generation timestamp to ensure that it is not repeated with business operations.

[0059] Context information extraction: The system synchronously collects context parameters from the QR code generation environment, including but not limited to:

[0060] The unique hardware fingerprint of the current QR code generating device (such as MAC address or CPU serial number);

[0061] Operator identification identifier;

[0062] Local physical location coordinates (such as GPS or Wi-Fi base station positioning results);

[0063] Current system timestamp (high-precision clock);

[0064] Summary of local environmental variables (such as temperature and humidity sensor data).

[0065] After preprocessing, the information is reduced to a set of basic parameters for a perturbation factor.

[0066] Perturbation factor generation: Based on the above set of environmental parameters, a one-time perturbation factor is generated through a multi-source hybrid perturbation function (nonlinear combination function). This perturbation factor has high timeliness and environmental sensitivity. Even if the same object generates QR codes multiple times, the perturbation factor results will be different.

[0067] State hash index construction: The system concatenates the state identifier and perturbation factor according to a predetermined format and inputs them into the salted hash processing unit. Hash compression with dynamic salt values ​​(such as a SHA-3 derivative algorithm) is then performed to generate the final state hash index. This index has a fixed length and is strongly bound to the perturbation factor, making it irreversible to derive the original state identifier or environmental parameters.

[0068] Encoded Index Embedding: The generated state hash index is embedded into the QR code logical data structure and used as a core reference field for subsequent decoding and authorization verification. Because this index does not contain the original object identification information, it possesses good confidentiality, security, and anti-reuse characteristics.

[0069] The encoded index generated in the above manner has the following advantages: each QR code is strongly associated with the object's state and generation environment; the index cannot be reconstructed by copying the QR code or forging the environment; the QR code information does not contain plaintext identity information, enhancing its resistance to attacks; and it improves the uniqueness and traceability of the QR code at each stage of its lifecycle.

[0070] The dynamic encryption module is used to generate a dynamic key with time, environment, and state specificity based on multiple sensitive factors, and uses this key to perform asymmetric encryption on the QR code encoded content to ensure the security, uniqueness, and unpredictability of the QR code. Its specific technical implementation includes the following aspects:

[0071] During the QR code generation process, the system first calls the state modeling module to obtain the state key corresponding to the current lifecycle state node. This key is dynamically generated based on the state identifier and is not statically stored.

[0072] Subsequently, the system synchronously collects multiple context-sensitive parameters as additional encryption factors, specifically including:

[0073] Device fingerprints: such as the CPU serial number, MAC address, firmware version, etc. of the QR code generating terminal;

[0074] Network fingerprints: such as the current Wi-Fi access point MAC address, public network exit IP address, network latency mode, etc.

[0075] Geographic location data: including GPS coordinates or the location range of cell towers;

[0076] Operator Identity Summary: Operator ID and its behavioral fingerprint, such as operation frequency and task preferences;

[0077] Timestamp: The generation time under a high-precision clock, in nanosecond or millisecond range.

[0078] The above parameters, after data standardization and weighted filtering, constitute a set of environment-driven encryption factors, which serve as the sole input for subsequent dynamic key generation.

[0079] This module does not employ traditional symmetric or fixed asymmetric key systems, but instead introduces a key derivation mechanism based on a perturbation-aware model:

[0080] The mechanism is based on an asynchronous perturbation function chain, which integrates the high-order combination features of encryption factors;

[0081] Noise sensitivity analysis of the factor set is performed by introducing perturbation entropy weight mapping;

[0082] Finally, a one-time asymmetric key pair is generated, in which the private key is only temporarily retained on the server side for interaction with the status verification module, while the public key is used for QR code encryption.

[0083] This key has the following characteristics: one-time password, not stored, unreproducible, and untransferable. Even if the same node and the same device generate QR codes at different times, the key results will be completely different, preventing copying and replay attacks.

[0084] After key derivation is completed, the system uses the session-level key to encrypt the QR code logical data, mainly including:

[0085] State hash index (uniquely identifies the state stage);

[0086] Encode index perturbation bits (to ensure unpredictability);

[0087] Dynamic access tags (used for access control matching);

[0088] Optional time lock field (for implementing timed decoding control).

[0089] The encrypted data is encapsulated in a structured format within the QR code's content carrier, supporting decoding access only by terminals holding legitimate decryption paths and access factors, thus preventing unauthorized reading across scenarios and states.

[0090] This module ensures that each state of the QR code corresponds to unique encrypted content throughout its lifecycle, offering the following significant advantages:

[0091] Uniqueness: The QR codes generated by the same object in different states or environments will necessarily be different;

[0092] Unpredictability: Because the key depends on a multidimensional perturbation factor, attackers cannot predict the encrypted output;

[0093] Anti-counterfeiting: The key derivation process incorporates both device and environmental factors to prevent cross-device spoofing;

[0094] Chain-based verifiability: When used in conjunction with the state chain module, the key generation path can be traced and its legitimacy verified.

[0095] The path verification module is used to verify the consistency of the path when a QR code reading request is initiated, based on the current state information submitted by the visitor and the system's preset state sequence diagram. This determines whether the access conforms to the lifecycle logic of the target object and decides whether to allow the decryption of the QR code content. Its specific implementation includes the following key steps and technical mechanisms:

[0096] When a terminal scanning device initiates a QR code access request, the system receives the access request data packet submitted by the accessing party, which includes:

[0097] The status indicator of the current location (e.g., "out of stock", "in transit").

[0098] The unique hardware identifier of the operating device (such as terminal ID, operator number);

[0099] Current operation timestamp and its corresponding time period identifier;

[0100] Optional reference code for the previous state node (e.g., source repository ID).

[0101] The path verification module preprocesses the above data to construct a structured access status request packet for subsequent path comparison.

[0102] The system calls the state sequence diagram constructed in the state modeling module and extracts the "most recent legal state node" that has been recorded in the historical life cycle of the target object as the starting point of the path.

[0103] Then, starting from that state node, search for the set of all legally reachable state nodes in the state graph. This set not only records the state identifiers that allow jumps, but also includes the jump conditions (role type, operation time window, geographical region, etc.).

[0104] The set of state paths is organized in a directed graph structure and equipped with a jump weight matrix for subsequent path similarity matching.

[0105] The system employs a fuzzy path comparison mechanism, introducing the following technical methods for path matching:

[0106] The status identifier in the access request path is compared with the set of legal paths. If it is a preset legal redirect pair, proceed to the next step.

[0107] Verify that the permissions defined for the operation subject are consistent with those defined for the path node to prevent unauthorized behavior;

[0108] Compare whether the timestamp is within the allowed operation time window of the path node;

[0109] If a path trust weight policy is configured, the trustworthiness of the access path can be determined based on the cumulative weight of the access path in the state graph.

[0110] If all the above conditions are met, the system determines the path is valid and returns a "decoding authorization token," allowing QR code decryption. Otherwise, the access is marked as "illegal path access," and subsequent parsing is terminated.

[0111] Unlike traditional QR code recognition systems that rely solely on identity or permission verification for access control, this path verification module possesses the following innovative features:

[0112] State-driven path verification mechanism: binds QR code access to object state graph logic, and access is not allowed if the path conditions are not met;

[0113] Multidimensional consistency comparison technology: joint judgment based on three dimensions: state transition, operation role, and time control;

[0114] Fault-tolerant fuzzy matching mechanism: supports error control and path buffering in state transition scenarios;

[0115] Zero-exposure path comparison strategy: State graph information is not disclosed to the access party to protect the object lifecycle flow logic.

[0116] The state chain recording module is used to record a summary of every legitimate access operation or state change event of the QR code during its lifecycle, and construct an irreversible state chain structure for subsequent path consistency verification and source traceability verification. This module does not store the original business data, but records the lifecycle evolution trajectory in summary form, thus balancing security, data privacy, and verification efficiency.

[0117] During operation, the system continuously monitors lifecycle events related to the QR code, including but not limited to:

[0118] The QR code is recognized and decoded on a legitimate device;

[0119] The target object is moved from one state node to another;

[0120] Operations performed after authorization verification (such as packing, warehousing, and signing for receipt).

[0121] Once the above events are triggered, the system extracts the following information from the event stream:

[0122] The identifier (state ID) of the current state node;

[0123] The hash digest (forward hash) of the previous state node;

[0124] The unique identifier of the currently operating device (such as terminal ID or hardware signature);

[0125] Current event trigger timestamp (high precision);

[0126] The state diagram contains predefined labels for valid redirect paths.

[0127] This information together constitutes the "state transition dataset" for this transition event.

[0128] Input the above state transition dataset into the summary generation engine and perform the following steps:

[0129] Compressed digest processing of the dataset is performed using a specified irreversible hash algorithm (such as SHA-3 or BLAKE2b).

[0130] At the same time, a dynamic perturbation salt value (derived from the previous node's timestamp and device parameters) is introduced to enhance the non-repetitiveness of the summary;

[0131] Generate a state transition summary record with a fixed length, which does not contain reversible information and cannot deduce the original state or device data.

[0132] This summary record has the following characteristics:

[0133] Immutability: Changing any input parameter will completely change the digest;

[0134] Unpredictability: The introduction of perturbation salinity is time- and environment-dependent;

[0135] Non-associative: There are no common fields between different objects or states, preventing schema inference.

[0136] The newly generated summary record is appended to the summary of the previous node as the latest node in the state chain, constructing a linear linked structure. The state chain is organized as a singly linked list, and each node contains only:

[0137] The system includes: a summary of the current node; a reference value to the previous node's summary (forward hash); the current node's generation time; and a brief state transition label (optional, to be processed after encoding). The system does not use blockchain technology or introduce a distributed consensus mechanism. Instead, it achieves local irreversible traceability through a chain structure and summary association. The state chain data structure is stored only on the system side, does not participate in QR code encoding, and is not transmitted with the QR code. Its main functions are: to verify the consistency of state paths for access behavior; to support post-event traceability analysis; and to assist in identifying forged QR codes or illegal transition paths.

[0138] The failure control module is used to evaluate the legitimacy and credibility of the QR code under the current access request in real time, and determine whether it is in a valid state accordingly. Its core logic is based on three indicators: state chain continuity judgment, path consistency verification result, and access environment deviation identification, to build a multi-dimensional failure judgment mechanism, thereby avoiding the misuse or abuse of QR codes in illegal scenarios, erroneous states, or counterfeit environments.

[0139] The system first retrieves the complete state transition summary sequence of the target object from the state chain record module, and analyzes the continuity and temporal validity of the chain structure, specifically including:

[0140] Check that the forward hash references between state transition digests are complete and without broken links;

[0141] Compare the time intervals between adjacent state transition nodes to see if they exceed the preset maximum window period;

[0142] Determine if any unauthorized nodes (such as those that skip quality inspection and go directly to sales) are inserted into the chain.

[0143] If there are breaks, time anomalies, or skip nodes in the chain structure, the state chain continuity is determined to be invalid.

[0144] The system synchronously calls the path verification module to compare the results and confirm whether the current state submitted by the accessing party constitutes a valid jump path with the previous node in the system state sequence diagram, including:

[0145] Does a valid path mapping exist?

[0146] Does the jump direction conform to the state evolution process?

[0147] Does the current role have the necessary permissions for status operations?

[0148] Does the time window meet the validity period set by the state node?

[0149] If the redirection path does not match, the role permissions do not match, or the state direction is reversed, the path consistency is considered to have failed.

[0150] The system dynamically samples the current access environment, including the following parameters:

[0151] The hardware fingerprint of current barcode scanning devices;

[0152] Access geographic location (GPS or cell tower location);

[0153] Network fingerprints (such as IP regions and channel information);

[0154] Local sensor parameters (such as temperature, air pressure, etc.).

[0155] The above information is compared with the environmental factors recorded when the QR code is generated, and a multidimensional vector difference calculation model (such as weighted Euclidean distance + threshold function) is used to determine the degree of environmental deviation.

[0156] If the deviation exceeds the set tolerance threshold (even if the QR code is copied, it will still fail due to the inconsistency of the environment), it will be considered as an abnormal access environment.

[0157] If any of the above three sub-modules results in "abnormal" or "inconsistent", the system will immediately mark the QR code as invalid and perform the following response operations:

[0158] Request to decrypt QR code content was rejected;

[0159] Record access exception events and update the state chain;

[0160] Add the current QR code index to a local blacklist to prevent its reuse in the short term;

[0161] Optional warning mechanisms can be triggered (such as notifying the system administrator or locking the object's operation permissions).

[0162] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any changes or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application.

Claims

1. A QR code full lifecycle tracking management system based on dynamic encryption, characterized in that: include: The state modeling module is used to construct state sequence diagrams based on the lifecycle flow of the target object; The index generation module is used to generate a state hash index based on the state identifier of the current life cycle state node of the target object and combined with a random perturbation factor when generating the QR code, forming an encoding index for embedding the QR code. A dynamic encryption module is used to generate a one-time session key based on a set of encryption factors; and to use the one-time session key to perform encryption processing on the content to be encoded in the QR code, wherein the content to be encoded in the QR code includes the state hash index, the encoding index perturbation bit, the dynamic access tag, and the time lock field. The path verification module is used to extract the current state information submitted by the accessing party when the QR code is accessed, and compare it with the legal state transition path recorded in the state sequence diagram. If they match, the decryption operation is allowed; otherwise, the decoding request is rejected. The path verification module receives the current status information and operation context submitted by the access party, parses the status identifier, access device number and timestamp contained therein, and constructs an access status request packet; The set of legal state paths in the state sequence graph is called, and combined with the accessor's most recent verified state node, the reachability matching path is calculated based on the weighted state transition mapping graph. Using a fuzzy path verification algorithm, the access request path is compared with the legal status path. If they match within the error tolerance and the jump order, role identification and time window all meet the preset conditions, decryption is allowed; otherwise, access is denied. The state chain recording module is used to generate a state transition summary for each legitimate access or state change event of the QR code and to construct a state chain structure. When generating the state transition summary, the state chain recording module introduces a dynamic perturbation salt value, which is derived from the timestamp of the previous node and the device parameters. The state chain data structure is only stored on the system side, does not participate in QR code encoding, and is not transmitted with the QR code. The failure control module is used to determine the validity status of the QR code based on the continuity judgment result of the state chain, the consistency verification result of the current state and the path, and the degree of deviation of the access environment. If there is an anomaly, the QR code is marked as invalid and subsequent recognition is rejected.

2. The QR code full lifecycle tracking management system based on dynamic encryption according to claim 1, characterized in that: The state modeling module specifically includes: acquiring lifecycle metadata of the target object, including processing flow nodes, stage labels, and operation subject information, and establishing an initial state list; constructing a state transition structure using a directed acyclic graph based on the operational dependencies between stages, and dynamically generating path hash identifiers for each node that are bound to upstream and downstream nodes; setting multi-factor state change conditions for the state nodes, including time thresholds, device role labels, and environmental context rules.

3. The QR code full lifecycle tracking management system based on dynamic encryption according to claim 1, characterized in that: The index generation module specifically includes: State identifier acquisition: When the target object enters a certain lifecycle node, the system first calls the state sequence diagram generated in the state modeling module to obtain the state identifier corresponding to the current node; Context information acquisition: The system synchronously collects the context parameters in the QR code generation environment to obtain the basic parameter set of the perturbation factor; Perturbation factor generation: Based on the basic parameter set of the perturbation factor, a one-time perturbation factor is generated; State hash index construction: The system concatenates the state identifier and the perturbation factor in a predetermined format and inputs them into the salted hash processing unit to perform hash compression with dynamic salt value to generate the final state hash index.

4. The QR code full lifecycle tracking management system based on dynamic encryption according to claim 1, characterized in that: The state chain recording module includes: monitoring the lifecycle event stream of the target object; when a valid QR code access or state transition behavior is detected, acquiring the current state identifier, previous state hash, and timestamp in real time; using a stage digest generation engine, combining these to generate state transition digest nodes, wherein the nodes are encoded using an irreversible hash mechanism and do not contain any reversible state data; and linking the generated state transition digest nodes sequentially in chronological order to form a linear state chain structure, wherein the state chain is only used for state consistency verification and does not participate in the QR code generation or decryption process.

Images