Method and system for trusted exchange of enterprise data on a supply chain

By setting up trusted interactive verification modules on the data terminals of each enterprise in the supply chain and adopting multi-party verification and image authentication mechanisms, the risk of data theft is resolved, and secure data exchange among enterprises in the supply chain is realized, ensuring the legality and security of data exchange.

CN121125309BActive Publication Date: 2026-02-24SHANGHAI HUAFENG CHUANGXIANG INTERNET TECH CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Application Number
CN202511453237.X
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2025-10-13
Publication Date
2026-02-24
Estimated Expiration
2045-10-13

AI Technical Summary

Technical Problem

Data exchange among companies in the supply chain is at risk of being stolen by competitors using network spoofing tools. Existing firewalls cannot identify deceptive communication behavior, resulting in insufficient data security.

Method used

A trusted interaction verification module is set up in the data terminal of each enterprise, and a trusted exchange multi-party verification mechanism and an image authentication mechanism are adopted. The trusted interaction verification module number of the cross-verification party is generated by a random number algorithm to verify the legality and security of the data interaction request, and image authentication is performed at a high security level to ensure the authenticity of the identity.

Benefits of technology

It effectively prevents data breaches and fraud, and improves the security of data exchange among enterprises in the supply chain, especially providing additional security when handling sensitive information or high-risk operations.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN121125309B_ABST
    Figure CN121125309B_ABST
Patent Text Reader

Abstract

The application discloses a kind of enterprise data trusted exchange method and system on supply chain, it is related to enterprise data exchange technical field, and the data terminal of each enterprise on supply chain is provided with trusted interaction authentication module, and multiple trusted interaction authentication modules are numbered;Data relay server is set.The trusted interaction authentication module of the application executes data trusted exchange multi-party authentication mechanism to verify the legality and security of data interaction request;At least three cross-verification is used, and the corresponding trusted interaction authentication module based on the network address communication of data interaction request is numbered, and the legality and security of the enterprise server of interaction cipher text verification data interaction request are verified, to avoid the data leakage risk caused by the target enterprise special setting of directional communication fraud;After passing through trusted exchange multi-party authentication mechanism, more secure enterprise data trusted exchange method on supply chain is constructed, to ensure the safe interaction of supply chain data.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This invention relates to the field of enterprise data exchange technology, and in particular to a reliable method and system for enterprise data exchange in the supply chain. Background Technology

[0002] Data exchange among enterprises in the supply chain is an important part of supply chain management. It involves the flow of data information between various links in the supply chain, such as suppliers, manufacturers, distributors, retailers and end users.

[0003] The main forms of data exchange among enterprises in the supply chain include electronic data interchange, application programming interfaces (APIs), cloud computing platforms, and blockchain technology.

[0004] The risk of data exchange between companies in the supply chain is data theft by competitors. Such data theft mainly relies on network spoofing tools and network sniffing tools to illegally obtain data. Currently, data security on servers is mainly based on the computer's built-in firewall, which cannot identify deceptive communication behavior based on the target company's special server settings, thus posing a risk of data being obtained through deception.

[0005] Therefore, there is an urgent need to design a reliable data exchange method and related system hardware for enterprises in the supply chain to improve the security of data exchange among enterprises in the supply chain. Summary of the Invention

[0006] To address the aforementioned technical problems, this invention provides a method and system for trusted data exchange among enterprises in a supply chain. The technical solution adopted is as follows:

[0007] A method for trusted data exchange among enterprises in a supply chain includes the following steps:

[0008] Step 1: Set up a trusted interaction verification module on the data terminal of each enterprise in the supply chain, and number the multiple trusted interaction verification modules; set up a data transfer server;

[0009] Step 2: The data interaction request enterprise server sends a data interaction request to the data relay server. When the data relay server forwards the data interaction request to the trusted interaction verification module of the designated data interaction target enterprise server, the trusted interaction verification module with the corresponding number executes the trusted data exchange multi-party verification mechanism to verify the legality and security of the data interaction request.

[0010] The trusted exchange multi-party verification mechanism randomly generates at least three trusted interactive verification module numbers for cross-verification parties based on a random number algorithm, and cross-verifies the data interaction request with the trusted interactive verification module corresponding to the number. The trusted interactive verification module corresponding to the number verifies the legitimacy and security of the enterprise server of the data interaction request based on the network address communication encrypted text of the data interaction request.

[0011] Step 3: If the data interaction request in Step 2 passes the trusted exchange multi-party verification mechanism, the trusted interaction verification module of the target enterprise server will collect the data corresponding to the data interaction request, take the highest security level in the collected data as the security level of the interaction data, and form an interaction data packet based on the data interaction request and the security level label.

[0012] Step 4: The trusted interaction verification module of the target enterprise server sends the interaction data packet to the data relay server. The relay server extracts the security level of the security level label. If the security level is greater than or equal to the set security level threshold, the relay server executes the image authentication mechanism and sends image authentication feedback to the data interaction request enterprise server. The image authentication feedback includes the image object and image action requirements. The data interaction request enterprise server records the image authentication data packet at the current time based on the image authentication feedback and sends it to the relay server.

[0013] In step 5, if the relay server determines that the security level is less than the set security level threshold, it will forward the interactive data packet to the data interaction request enterprise server.

[0014] If the relay server executes the image authentication mechanism, and the image authentication data packet of the data interaction request enterprise server passes the image authentication mechanism, then the interaction data packet will be forwarded to the data interaction request enterprise server.

[0015] If the image authentication data packet of the data interaction request enterprise server fails the image authentication mechanism, the relay server will refuse to forward the interaction data packet and send a warning message to both the data interaction target enterprise server and the data interaction request enterprise server.

[0016] By adopting the above technical solution, a trusted interaction verification module is set up for the data terminal of each enterprise in the supply chain. The trusted interaction verification module can be implemented based on an intelligent agent or computer with computing power.

[0017] When a company needs to exchange data with a target company in its supply chain, the server defined by the company is designated as the data exchange request enterprise server, and the target company is designated as the data relay server. The data exchange request enterprise server sends a data exchange request to the data relay server, and the data relay server forwards the data exchange request to the trusted interaction verification module of the designated data exchange target enterprise server. The trusted interaction verification module with the corresponding number executes the trusted data exchange multi-party verification mechanism to verify the legality and security of the data exchange request.

[0018] At least three-party cross-verification is employed. The trusted interactive verification module corresponding to the number communicates based on the network address of the data interaction request. Since the trusted interactive verification module number is generated using a random number algorithm, it is assumed in advance that the deceiving party cannot obtain the number. Therefore, it is impossible to set additional communication deception parameters specifically. Thus, it is highly unlikely that normal communication can be achieved with the enterprise server corresponding to the number, nor can the pre-agreed ciphertext information be obtained. In specific applications, the ciphertext information can be pre-agreed and numbered. The ciphertext can also be randomly generated to increase the verification difficulty. The ciphertext verification verifies the legitimacy and security of the data interaction request to the enterprise server, avoiding the risk of data leakage caused by targeted communication deception based on the specific settings of the target enterprise.

[0019] After passing through a trusted multi-party verification mechanism, the required data and security level labels are packaged into an interactive data packet and forwarded to the relay server. The relay server then needs to further execute an image authentication mechanism based on the security level. The purpose of the image authentication mechanism is to ensure that the individual or entity interacting is the person they claim to be when the data security level is high. Through image authentication, the operator's facial features, actions, or possession of specific items can be verified to prove the authenticity of their identity. Image authentication can reduce or prevent fraudulent activities such as identity theft and account takeover. Image authentication provides an additional layer of security for the data exchange and transaction process, especially when handling sensitive information or performing high-risk operations.

[0020] Build a more secure and trusted method for exchanging enterprise data in the supply chain to ensure the secure interaction of supply chain data.

[0021] Optionally, in step 1, let N be the total number of trusted interactive verification modules, and i be the number of a specific trusted interactive verification module. Then the numbering formula is: ;

[0022] If N is a single-digit or tens-digit number, then add 0s to the front of N to form a three-digit number.

[0023] By adopting the above technical solution, the number of companies in the supply chain typically does not exceed one hundred, and a three-digit numbering system can meet the numbering requirements, providing the original standard numbering system for subsequent random number generation algorithms.

[0024] Optionally, in step 2, the method for generating cross-validator numbers using a random number algorithm is as follows: Let R be a random number algorithm, n be the number of cross-validators to be generated (n≥3), and j be the generated number. Then, the formula for randomly generating cross-validator numbers is: ;

[0025] in It is a formula for randomly generating the k-th cross-validation square number.

[0026] By adopting the above technical solution, the random number algorithm should be configured to remove duplicates when generating numbers, so as to avoid the low-probability event of generating the same number multiple times.

[0027] Optionally, in step 2, the specific method for verifying the legality and security of the cross-validation data interaction request is as follows: forward the network address of the data interaction request enterprise server corresponding to the data interaction request to the trusted interaction verification module that generates the cross-validation party number using a random number algorithm. The trusted interaction verification module requests encrypted communication from the network address of the data interaction request enterprise server. If communication feedback is received, encrypted communication is sent. If an encrypted code is received and it matches the encrypted code corresponding to the encrypted database, the cross-validation is successful, and the trusted interaction verification module of the target enterprise server of the data interaction is fed back with the information that the cross-validation is successful.

[0028] If all cross-validations pass, the trusted interaction verification module of the target enterprise server for the interactive data exchange determines that the legality and security of the data interaction request to the enterprise server have been verified.

[0029] Optionally, security levels refer to S1, S2, and S3. S1 level data refers to ordinary data, S2 level data refers to confidential data, and S3 level data refers to top secret data.

[0030] Optionally, in step 3, the data corresponding to the data interaction request is packaged with a security level tag and a timestamp to form an interaction data packet.

[0031] Optionally, in step 4, the security level threshold refers to level S2.

[0032] By adopting the above technical solution, S2 and S3 level data should be subject to an image authentication mechanism, requiring authorized personnel to record designated videos to ensure data security.

[0033] Optionally, the image authentication mechanism includes the following specific steps:

[0034] Step 1, let I be the video frame from the image authentication feedback. This is the output of the face detection algorithm. ;

[0035] in This represents the bounding box for the nth detected face.

[0036] Step 2, let F be the feature extraction function, It is a face bounding box. This is the feature vector extracted from the face region;

[0037] Step 3: Let L be the liveness detection function and AL be the liveness detection result;

[0038] The results of the liveness detection function can include blink detection, head movements, and facial expression changes;

[0039] Step 4: Let BA be the behavior analysis function, V be the video sequence, and A(V) be the behavior pattern obtained from the analysis.

[0040] Step 5, let SM be the similarity matching function. is the reference feature vector, and S is the similarity score;

[0041] ;

[0042] Step 6: Let D be the authentication decision function, S be the similarity score, and AL be the liveness detection result. and These are the thresholds for similarity and liveness detection, respectively.

[0043] ;

[0044] It is the image authentication decision result, which includes passing the image authentication mechanism and failing the image authentication mechanism.

[0045] By adopting the above technical solutions, image authentication records can be used as part of auditing and monitoring for post-event analysis, investigation, or dispute resolution. Image authentication can defend against automated attacks (such as bot attacks) because these attacks are typically unable to replicate actions or expressions that require human intervention.

[0046] A trusted data exchange system for enterprises in a supply chain is provided to implement a trusted data exchange method for enterprises in a supply chain. The system includes multiple enterprise servers and a data relay server. Each enterprise server includes a data interaction target enterprise server, a data interaction request enterprise server, multiple associated enterprise servers, and multiple trusted interaction verification modules. The multiple trusted interaction verification modules are respectively connected to the data input / output terminals of the data interaction target enterprise server, the data interaction request enterprise server, and the multiple associated enterprise servers. The multiple trusted interaction verification modules are interconnected via the Internet. The data relay server is connected to the multiple trusted interaction verification modules via the Internet.

[0047] Optionally, the target enterprise server for data interaction, the enterprise server for data interaction request, multiple associated enterprise servers, multiple trusted interaction verification modules, and the data relay server are all implemented based on computers.

[0048] By adopting the above technical solutions, computers can efficiently perform data transfer, execution of trusted mechanisms, and visual analysis.

[0049] In summary, the present invention has at least one of the following beneficial technical effects:

[0050] This invention provides a method and system for trusted data exchange among enterprises in a supply chain. A trusted interaction verification module is set up for the data terminal of each enterprise in the supply chain. The trusted interaction verification module can be implemented based on an intelligent agent or computer with computing power.

[0051] The data interaction request enterprise server sends a data interaction request to the data relay server. The data relay server forwards the data interaction request to the trusted interaction verification module of the designated data interaction target enterprise server. The trusted interaction verification module with the corresponding number executes the trusted data exchange multi-party verification mechanism to verify the legality and security of the data interaction request.

[0052] At least three-party cross-verification is employed. The trusted interactive verification module corresponding to the number communicates based on the network address of the data interaction request. Since the trusted interactive verification module number is generated by a random number algorithm, the interactive encrypted text verifies the legitimacy and security of the enterprise server of the data interaction request, avoiding the risk of data leakage caused by targeted communication deception based on the special settings of the target enterprise.

[0053] After the trusted exchange multi-party verification mechanism is passed, the relay server also needs to further implement the image authentication mechanism according to the security level. Through image authentication, the operator's facial features, actions or holding specific items can be verified to prove the authenticity of their identity. Through image authentication, fraudulent activities such as identity theft and account takeover can be reduced or prevented. Image authentication provides an additional security layer for the data exchange and transaction process, especially when handling sensitive information or performing high-risk operations.

[0054] Build a more secure and trusted method for exchanging enterprise data in the supply chain to ensure the secure interaction of supply chain data. Attached Figure Description

[0055] Figure 1 This is a flowchart illustrating a method for trusted data exchange between enterprises in a supply chain, as proposed by the present invention.

[0056] Figure 2 This is a schematic diagram of the component connection principle of a trusted data exchange system for enterprises in the supply chain according to the present invention.

[0057] Explanation of reference numerals in the attached diagram: 1. Trusted interaction verification module; 2. Data relay server; 101. Target enterprise server for data interaction; 102. Requesting enterprise server for data interaction. Detailed Implementation

[0058] The present invention will be further described in detail below with reference to the accompanying drawings.

[0059] This invention discloses a method and system for trusted data exchange among enterprises in a supply chain.

[0060] Reference Figure 1 and Figure 2 Example 1: A method for trusted data exchange among enterprises in a supply chain, comprising the following steps:

[0061] Step 1: Set up a trusted interaction verification module 1 on the data terminal of each enterprise in the supply chain, and number the multiple trusted interaction verification modules 1; set up a data transfer server 2;

[0062] Step 2: The data interaction request enterprise server 102 sends a data interaction request to the data relay server 2. When the data relay server 2 forwards the data interaction request to the trusted interaction verification module 1 of the designated data interaction target enterprise server 101, the trusted interaction verification module 1 with the corresponding number executes the trusted data exchange multi-party verification mechanism to verify the legality and security of the data interaction request.

[0063] The trusted exchange multi-party verification mechanism randomly generates at least three trusted interactive verification module 1 numbers for cross-verification parties based on a random number algorithm, and cross-verifies the data interaction request to the trusted interactive verification module 1 corresponding to the number. The trusted interactive verification module 1 corresponding to the number verifies the legality and security of the data interaction request to the enterprise server 102 based on the network address communication encrypted text of the data interaction request.

[0064] Step 3: If the data interaction request in Step 2 passes the trusted exchange multi-party verification mechanism, the trusted interaction verification module 1 of the target enterprise server 101 will collect the data corresponding to the data interaction request, take the highest security level in the collected data as the security level of the interaction data, and form an interaction data packet based on the data interaction request and the security level label.

[0065] Step 4: The trusted interaction verification module 1 of the target enterprise server 101 sends the interaction data packet to the data relay server 2. The relay server 2 extracts the security level of the security level label. If the security level is greater than or equal to the set security level threshold, the relay server 2 executes the image authentication mechanism and sends image authentication feedback to the data interaction request enterprise server 102. The image authentication feedback includes the image object and image action requirements. The data interaction request enterprise server 102 records the image authentication data packet at the current time based on the image authentication feedback and sends it to the relay server 2.

[0066] In step 5, if the relay server 2 determines that the security level is less than the set security level threshold, it will forward the interactive data packet to the data interaction request enterprise server 102.

[0067] If relay server 2 executes the image authentication mechanism, and the image authentication data packet of data interaction request enterprise server 102 passes the image authentication mechanism, then the interaction data packet will be forwarded to data interaction request enterprise server 102.

[0068] If the image authentication data packet of the data interaction request enterprise server 102 fails the image authentication mechanism, the relay server 2 refuses to forward the interaction data packet and sends a warning message to the data interaction target enterprise server 101 and the data interaction request enterprise server 102.

[0069] For each enterprise in the supply chain, a trusted interaction verification module 1 is set up on the data terminal. The trusted interaction verification module 1 can be implemented based on an intelligent agent or computer with computing power.

[0070] When a company needs to exchange data with a target company in the supply chain, the server defined by the company is designated as the data exchange request enterprise server 102, and the target company is designated as the data relay server 2. The data exchange request enterprise server 102 sends a data exchange request to the data relay server 2. The data relay server 2 forwards the data exchange request to the trusted interaction verification module 1 of the designated data exchange target enterprise server 101. The trusted interaction verification module 1 with the corresponding number executes the trusted data exchange multi-party verification mechanism to verify the legality and security of the data exchange request.

[0071] At least three-party cross-verification is employed. The trusted interactive verification module 1 corresponding to the number communicates based on the network address of the data interaction request. Since the number of the trusted interactive verification module 1 is generated using a random number algorithm, it is assumed in advance that the deceiving party cannot obtain the number. Therefore, it is impossible to set additional communication deception parameters specifically. Thus, it is highly unlikely that normal communication can be achieved with the enterprise server corresponding to the number, nor can the pre-agreed ciphertext information be obtained. In specific applications, the ciphertext information can be pre-agreed and numbered. The ciphertext sorting number can also be randomly generated to increase the verification difficulty. The legality and security of the data interaction request to the enterprise server 102 are verified by the interactive ciphertext, avoiding the risk of data leakage caused by targeted communication deception based on the special settings of the target enterprise.

[0072] After passing the trusted exchange multi-party verification mechanism, the required data and security level labels are packaged into an interactive data packet and forwarded to relay server 2. Relay server 2 also needs to further execute an image authentication mechanism according to the security level. The purpose of the image authentication mechanism is to ensure that the individual or entity interacting is the person or entity they claim to be when the data security level is high. Through image authentication, the operator's facial features, actions, or possession of specific items can be verified to prove the authenticity of their identity. Through image authentication, fraudulent activities such as identity theft and account takeover can be reduced or prevented. Image authentication provides an additional security layer for the data exchange and transaction process, especially when handling sensitive information or performing high-risk operations.

[0073] Build a more secure and trusted method for exchanging enterprise data in the supply chain to ensure the secure interaction of supply chain data.

[0074] In Example 2, in step 1, let N be the total number of trusted interactive verification modules 1, and i be the number of a specific trusted interactive verification module. Then the numbering formula is: ;

[0075] If N is a single-digit or tens-digit number, then add 0s to the front of N to form a three-digit number.

[0076] Typically, the number of companies in a supply chain will not exceed one hundred, so a three-digit numbering system is sufficient to meet the numbering requirements, providing a raw standard number for subsequent random number generation algorithms.

[0077] In Example 3, step 2, the method for generating cross-validator numbers using a random number algorithm is as follows: Let R be a random number algorithm, n be the number of cross-validators to be generated (n≥3), and j be the generated number. Then, the formula for randomly generating cross-validator numbers is: ;

[0078] in It is a formula for randomly generating the k-th cross-validation square number.

[0079] Random number algorithms should be configured to remove duplicates when generating numbers to avoid the low-probability event of generating the same number multiple times.

[0080] In Example 4, step 2, the specific method for verifying the legality and security of the cross-validation data interaction request is as follows: the trusted interaction verification module 1, which generates the cross-validation party number using a random number algorithm, forwards the network address of the data interaction request enterprise server 102 corresponding to the data interaction request. The trusted interaction verification module 1 requests encrypted communication from the network address of the data interaction request enterprise server 102. If communication feedback is received, encrypted communication is sent. If an encrypted cipher is received and matches the encrypted cipher in the encrypted database, the cross-validation is successful, and the trusted interaction verification module 1 of the target enterprise server 101 of the data interaction is fed back with the information that the cross-validation is successful.

[0081] If all cross-validations pass, the trusted interaction verification module 1 of the target enterprise server 101 for interactive data interaction determines that the legality and security of the data interaction request to the enterprise server 102 have been verified.

[0082] Example 5: Security levels refer to S1, S2 and S3. S1 level data refers to ordinary data, S2 level data refers to confidential data and S3 level data refers to top secret data.

[0083] In Example 6, in step 3, the data corresponding to the data interaction request is packaged with a security level tag and a timestamp to form an interaction data packet.

[0084] In Example 7, step 4, the security level threshold refers to level S2.

[0085] S2 and S3 level data should be subject to an image authentication mechanism, requiring authorized personnel to record designated videos to ensure data security.

[0086] Example 8: The image authentication mechanism includes the following specific steps:

[0087] Step 1, let I be the video frame from the image authentication feedback. This is the output of the face detection algorithm. ;

[0088] in This represents the bounding box for the nth detected face.

[0089] Step 2, let F be the feature extraction function, It is a face bounding box. This is the feature vector extracted from the face region;

[0090] Step 3: Let L be the liveness detection function and AL be the liveness detection result;

[0091] The results of the liveness detection function can include blink detection, head movements, and facial expression changes;

[0092] Step 4: Let BA be the behavior analysis function, V be the video sequence, and A(V) be the behavior pattern obtained from the analysis.

[0093] Step 5, let SM be the similarity matching function. is the reference feature vector, and S is the similarity score;

[0094] ;

[0095] Step 6: Let D be the authentication decision function, S be the similarity score, and AL be the liveness detection result. and These are the thresholds for similarity and liveness detection, respectively.

[0096] ;

[0097] It is the image authentication decision result, which includes passing the image authentication mechanism and failing the image authentication mechanism.

[0098] Image authentication records can be used as part of auditing and monitoring for post-event analysis, investigation, or dispute resolution. Image authentication can protect against automated attacks (such as bot attacks) because these attacks are typically unable to replicate actions or expressions that require human intervention.

[0099] Example 9: A trusted data exchange system for enterprises in a supply chain, used to implement a trusted data exchange method for enterprises in a supply chain. The system includes multiple enterprise servers and a data relay server 2. The enterprise servers include a data interaction target enterprise server 101, a data interaction request enterprise server 102, multiple associated enterprise servers, and multiple trusted interaction verification modules 1. The multiple trusted interaction verification modules 1 are respectively connected to the data input and output terminals of the data interaction target enterprise server 101, the data interaction request enterprise server 102, and the multiple associated enterprise servers. The multiple trusted interaction verification modules 1 are interconnected via the Internet. The data relay server 2 is connected to the multiple trusted interaction verification modules 1 via the Internet.

[0100] In Example 10, the data interaction target enterprise server 101, the data interaction request enterprise server 102, multiple associated enterprise servers, multiple trusted interaction verification modules 1, and the data transfer server 2 are all implemented based on a computer.

[0101] Computers can efficiently perform data transfer, execute trusted mechanisms, and perform visual analysis.

[0102] The above are all preferred embodiments of the present invention and are not intended to limit the scope of protection of the present invention. Therefore, all equivalent changes made in accordance with the structure, shape and principle of the present invention should be covered within the scope of protection of the present invention.

Claims

1. A method for trusted data exchange among enterprises in a supply chain, characterized in that, Includes the following steps: Step 1: Set up a trusted interaction verification module (1) on the data terminal of each enterprise in the supply chain, and number the multiple trusted interaction verification modules (1); set up a data transfer server (2). Step 2: The data interaction request enterprise server (102) sends a data interaction request to the data relay server (2). When the data relay server (2) forwards the data interaction request to the trusted interaction verification module (1) of the designated data interaction target enterprise server (101), the trusted interaction verification module (1) with the corresponding number executes the data trusted exchange multi-party verification mechanism to verify the legality and security of the data interaction request. The trusted exchange multi-party verification mechanism randomly generates the numbers of at least three trusted interactive verification modules (1) of the cross-verifiers based on the random number algorithm, and cross-verifies the data interaction request to the trusted interactive verification module (1) corresponding to the number. The trusted interactive verification module (1) corresponding to the number verifies the legality and security of the data interaction request enterprise server (102) based on the network address communication ciphertext of the data interaction request. Step 3: If the data interaction request in step 2 passes the trusted exchange multi-party verification mechanism, the trusted interaction verification module (1) of the target enterprise server (101) of the interactive data will collect the data corresponding to the data interaction request, and take the highest security level in the collected data as the security level of the interactive data, and form an interactive data packet based on the data interaction request and the security level label. Step 4: The trusted interaction verification module (1) of the target enterprise server (101) sends the interaction data packet to the data relay server (2). The relay server (2) extracts the security level of the security level label. If the security level is greater than or equal to the set security level threshold, the relay server (2) executes the image authentication mechanism and sends the image authentication feedback to the data interaction request enterprise server (102). The image authentication feedback includes the image object and the image action requirements. The data interaction request enterprise server (102) records the image authentication data packet of the current time according to the image authentication feedback and sends it to the relay server (2). In step 5, if the relay server (2) determines that the security level is less than the set security level threshold, it will forward the interactive data packet to the data interaction request enterprise server (102). If the relay server (2) executes the image authentication mechanism, and the image authentication data packet of the data interaction request enterprise server (102) passes the image authentication mechanism, then the interaction data packet will be forwarded to the data interaction request enterprise server (102). If the image authentication data packet of the data interaction request enterprise server (102) fails the image authentication mechanism, the relay server (2) refuses to forward the interaction data packet and sends a warning message to the data interaction target enterprise server (101) and the data interaction request enterprise server (102).

2. The method for trusted exchange of enterprise data in a supply chain according to claim 1, characterized in that: In step 1, let N be the total number of trusted interactive verification modules (1), and i be the number of a specific trusted interactive verification module. Then the numbering formula is: ; If N is a single-digit or tens-digit number, then add 0s to the front of N to form a three-digit number.

3. The method for trusted exchange of enterprise data in a supply chain according to claim 2, characterized in that, In step 2, the method for generating cross-validator numbers using a random number algorithm is as follows: Let R be a random number algorithm, n be the number of cross-validators to be generated, n ≥ (3), and j be the generated number. Then the formula for randomly generating cross-validator numbers is: ; in It is a formula for randomly generating the k-th cross-validation square number.

4. A method for trusted data exchange among enterprises in a supply chain according to claim 3, characterized in that, In step 2, the specific method for verifying the legality and security of the cross-validation data interaction request is as follows: the trusted interaction verification module (1) corresponding to the cross-validation party number generated by the random number algorithm forwards the network address of the data interaction request enterprise server (102) corresponding to the data interaction request. The trusted interaction verification module (1) requests encrypted communication from the network address of the data interaction request enterprise server (102). If communication feedback is received, encrypted text is sent. If encrypted code is received and it matches the encrypted code corresponding to the encrypted database, the cross-validation is passed, and the trusted interaction verification module (1) of the target enterprise server (101) of the interactive data interaction is fed back with the information that the cross-validation is passed. If all cross-validations pass, the trusted interaction verification module (1) of the target enterprise server (101) of the interactive data interaction will determine the legality and security of the data interaction request enterprise server (102) and pass the verification.

5. A method for trusted exchange of enterprise data in a supply chain according to claim 4, characterized in that, Security levels are S1, S2, and S3. S1 level data refers to ordinary data, S2 level data refers to confidential data, and S3 level data refers to top secret data.

6. A method for trusted exchange of enterprise data in a supply chain according to claim 5, characterized in that, In step 3, the data corresponding to the data interaction request is packaged into an interaction data package by adding a security level tag and a timestamp.

7. A method for trusted exchange of enterprise data in a supply chain according to claim 6, characterized in that, In step 4, the security level threshold refers to level S2.

8. A method for trusted exchange of enterprise data in a supply chain according to claim 7, characterized in that, The image authentication mechanism includes the following specific steps: Step 1, let I be the video frame from the image authentication feedback. This is the output of the face detection algorithm. ; in This represents the bounding box for the nth detected face. Step 2, let F be the feature extraction function, It is a face bounding box. This is the feature vector extracted from the face region; Step 3: Let L be the liveness detection function and AL be the liveness detection result; The liveness detection function detects blinks, head movements, and facial expression changes. Step 4: Let BA be the behavior analysis function, V be the video sequence, and A(V) be the behavior pattern obtained from the analysis. Step 5, let SM be the similarity matching function. is the reference feature vector, and S is the similarity score; ; Step 6), let D be the authentication decision function, S be the similarity score, and AL be the liveness detection result. and These are the thresholds for similarity and liveness detection, respectively. ; It is the image authentication decision result, which includes passing the image authentication mechanism and failing the image authentication mechanism.

9. A trusted data exchange system for enterprises in a supply chain, characterized in that: To implement the trusted data exchange method for enterprises in the supply chain as described in claim 8, the system includes multiple enterprise servers and a data transfer server (2). The enterprise servers include a data interaction target enterprise server (101), a data interaction request enterprise server (102), multiple associated enterprise servers, and multiple trusted interaction verification modules (1). The multiple trusted interaction verification modules (1) are respectively connected to the data input and output terminals of the data interaction target enterprise server (101), the data interaction request enterprise server (102), and the multiple associated enterprise servers. The multiple trusted interaction verification modules (1) are interconnected based on Internet communication. The data transfer server (2) is respectively connected to the multiple trusted interaction verification modules (1) based on Internet communication.

10. A trusted data exchange system for enterprises in a supply chain according to claim 9, characterized in that: The data interaction target enterprise server (101), the data interaction request enterprise server (102), multiple associated enterprise servers, multiple trusted interaction verification modules (1) and data transfer server (2) are all implemented based on computers.

Citation Information

Patent Citations

  • Three-party authenticated key agreement method for centralized mobile positioning system

    CN111682938A

  • Network security verification method and system for distributed communication

    CN120582798A