Block chain-based product full-chain credible traceability management system

Abstract

The invention discloses a block chain-based product full-chain credible traceability management system, and relates to the technical field of product traceability management. The system comprises a dynamic two-dimensional code management module, a block chain evidence storage module, a full-chain data acquisition module and a traceability query module. The dynamic two-dimensional code management module generates a dynamic two-dimensional code of the product, and the dynamic two-dimensional code is bound with a block chain digital identity of the product and is stored and solidified on the chain; the full-chain data acquisition module acquires product traceability data of each supply node on a product supply chain, and the product traceability data is chained and synchronized to a cloud database encrypted by AES-256 for storage after being subjected to authority verification and consistency verification of the block chain evidence storage module; and the traceability query module calls the product traceability data based on the dynamic two-dimensional code of the product, verifies the authenticity of the product traceability data through SHA-256 Hash comparison, and then displays the product traceability data to the user side. According to the system, the whole process of product traceability data is credible, traceable and non-tampering, and the rights and interests of all parties of a supply chain are guaranteed.

Description

Technical Field

[0001] This invention relates to the field of product traceability management technology, specifically to a blockchain-based product end-to-end trusted traceability management system. Background Technology

[0002] Product traceability is a crucial link in ensuring product quality and safety and enhancing market trust throughout the entire product production and distribution chain. This is especially true in the food, agricultural, and consumer goods sectors, where consumers have an increasingly urgent need to know about the source of raw materials, production processes, and distribution routes. Supply chain participants and regulatory agencies also urgently need traceability to effectively manage the entire product lifecycle. With the globalization and specialization of supply chains, the number of supply nodes through which products flow has increased, resulting in traceability data that is multi-source, heterogeneous, and massive. Traditional traceability models are no longer sufficient to meet the needs for reliable data sharing and traceability across the entire chain.

[0003] Existing product traceability systems mostly use centralized databases to store traceability data, which presents significant trust crises and security risks. On the one hand, data under a centralized architecture is easily tampered with or deleted unilaterally, and data from each supply node is stored in isolation, making cross-node data verification difficult and compromising the authenticity of traceability information. On the other hand, existing systems lack sophisticated access control mechanisms, making them prone to issues such as unauthorized data entry and submission of false data. Furthermore, inadequate data encryption measures pose a risk of sensitive information leakage. In addition, most traceability systems lack effective data authenticity verification mechanisms, making it difficult for consumers to confirm whether traceability data has been tampered with, and for regulatory agencies to efficiently verify data credibility. This severely restricts the practical application value of traceability systems. Therefore, there is an urgent need for a full-chain traceability management system with reliable storage, controllable access, secure encryption, and verifiable authenticity. Summary of the Invention

[0004] The purpose of this invention is to provide a blockchain-based product end-to-end trusted traceability management system to solve the problems mentioned in the background art.

[0005] To solve the above-mentioned technical problems, the present invention provides the following technical solution: A blockchain-based product end-to-end trusted traceability management system includes a dynamic QR code management module, a blockchain evidence storage module, an end-to-end data collection module, and a traceability query module; The dynamic QR code management module is used to generate dynamic QR codes for products and establish a binding relationship between the dynamic QR codes and the blockchain digital identity of the products, and to solidify the binding relationship on the blockchain. The blockchain evidence storage module is used to generate the blockchain digital identity of the product, and at the same time receive and verify the product traceability data, and store the verified product traceability data on the blockchain. The full-chain data acquisition module is used to collect product traceability data from each supply node in the product supply chain and upload the product traceability data to the cloud database. The traceability query module is used to retrieve product traceability data based on the product's dynamic QR code, and to display the product traceability data to the user after verifying its authenticity.

[0006] Preferably, the dynamic QR code is obtained by encoding the access URL using a QR code encoding algorithm. The access URL corresponds one-to-one with the product, and the dynamic QR code is uniquely determined by the access URL.

[0007] Preferably, the method for on-chain evidence storage and solidification of the binding relationship is as follows: S1. Obtain the product's blockchain digital identity and extract the unique QR code identifier corresponding to the product's dynamic QR code; S2. Establish a binding relationship between the unique QR code identifier and the product's blockchain digital identity, forming a binding pair that includes the blockchain digital identity and the unique QR code identifier. Use the SHA-256 algorithm to perform a hash operation on the binding pair to generate a binding relationship hash value, and package the binding pair, binding timestamp, and operation entity digital signature into a binding record. S3. Send the binding relationship hash value and binding record to the blockchain evidence storage module, and write them into the blockchain ledger through a smart contract.

[0008] Preferably, the blockchain evidence storage module adopts a consortium blockchain architecture, which assigns supplier node identities and corresponding operating permissions to each supplier node in the product supply chain. The operating permissions are used to limit the product traceability data entry permissions of each supplier node.

[0009] Preferably, the product traceability data includes the supplier node identity, node digital signature, unique QR code identifier, entry timestamp, and product supply node traceability data.

[0010] Preferably, the process of verifying and storing the product traceability data on the blockchain is as follows: Based on the operating permissions of the supply node, verify whether the supply node has the permission to enter product traceability data. If the verification of the product traceability data entry permission of the supply node fails, the entry of product traceability data by the supply node will be rejected. If the product traceability data entry permission verification of the supply node is passed, the SHA-256 algorithm is used to perform a hash operation on the product supply node traceability data in the product traceability data to generate a data hash value. At the same time, the blockchain digital identity corresponding to the entry timestamp and QR code unique identifier in the product traceability data is extracted to form metadata. The data hash value, metadata and node digital signature are packaged into a storage data package and sent to the consortium blockchain consensus node for consistency verification. After the consistency verification is passed, the storage data package is recorded in the blockchain ledger.

[0011] Preferably, the product traceability data is uploaded to the cloud database only if the consistency verification is passed; otherwise, the full-chain data acquisition module will refuse to upload the product traceability data from the supply nodes.

[0012] Preferably, the process of verifying the authenticity of product traceability data is as follows: Based on the unique identifier of the dynamic QR code, the system retrieves the evidence storage data packets corresponding to each supply node bound to the unique QR code from the blockchain ledger. Simultaneously, it retrieves the product traceability data corresponding to each supply node bound to the unique QR code from the cloud database. The system then performs a hash operation on the product traceability data of each supply node using the SHA-256 algorithm to generate a verification hash value for each supply node. The system compares the data hash value in the evidence storage data packet corresponding to each supply node with its corresponding verification hash value. If the hash values ​​of all supply nodes match, all product traceability data is displayed to the user in a structured manner according to the time sequence of the supply nodes. If the hash values ​​of any supply node do not match, a product traceability data tampering warning is sent to the user.

[0013] Preferably, the cloud database is used to store binding pairs and product traceability data, and the stored product traceability data is encrypted using the AES-256 symmetric encryption algorithm.

[0014] Due to the adoption of the above technical solution, the present invention achieves significant technical progress compared with the prior art, specifically manifested in the following ways: Addressing the core pain points of traditional centralized traceability systems, such as data susceptibility to tampering and difficulties in cross-node verification, this invention achieves on-chain notarization and solidification of traceability data and binding relationships through a consortium blockchain architecture and smart contracts. Combined with the Raft consensus mechanism and multiple digital signatures to ensure data immutability, it completely resolves the trust crisis under centralized architectures. To address the issues of inadequate access control and the susceptibility to unauthorized data entry and falsified data in existing systems, this system establishes a refined node access control mechanism. It assigns exclusive identities and differentiated operating permissions through digital certificates, preventing unauthorized data submissions from the source. Finally, to address the risks of sensitive information leakage and the lack of data authenticity verification, this system employs AES-256 symmetric encryption. The encryption algorithm encrypts the traceability data and scanning logs stored in the cloud. The key is managed by consortium blockchain nodes to ensure security. At the same time, the SHA-256 hash comparison mechanism provides users and regulatory agencies with an intuitive and efficient means of verifying the authenticity of data, ensuring the credibility of query results. In addition, this system binds the product's blockchain digital identity with a dynamic QR code, opening up the complete link of data collection, storage, query, and log storage across the entire chain. This breaks down the data isolation barriers between various supply nodes, enabling full traceability of product traceability data from raw material supply to retail terminals. This significantly enhances the practical application value of the traceability system and fully protects the legitimate rights and interests of consumers, supply chain participants, and regulatory agencies. Attached Figure Description

[0015] To more clearly illustrate the technical solutions in the embodiments of this application or the prior art, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this invention. For those skilled in the art, other drawings can be obtained based on these drawings.

[0016] Figure 1 This is the system functional module interaction logic diagram of the present invention. Detailed Implementation

[0017] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of the present invention, not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of the present invention.

[0018] Examples, such as Figure 1The aforementioned product end-to-end trusted traceability management system based on blockchain includes a dynamic QR code management module, a blockchain evidence storage module, an end-to-end data collection module, a cloud database, and a traceability query module. It adopts an overall architecture of distributed collaboration, consortium blockchain evidence storage, and cloud encrypted storage to jointly complete the end-to-end trusted traceability management of products.

[0019] The dynamic QR code management module is used to generate dynamic QR codes for products and establish a binding relationship between the dynamic QR codes and the blockchain digital identity of the products, and to solidify the binding relationship on the blockchain. The blockchain evidence storage module is used to generate the blockchain digital identity of the product, and at the same time receive and verify the product traceability data, and store the verified product traceability data on the blockchain. The full-chain data acquisition module is used to collect product traceability data from each supply node in the product supply chain and upload the product traceability data to the cloud database. The cloud database is used to store binding pairs and product traceability data, and the product traceability data is encrypted. The traceability query module is used to retrieve product traceability data based on the product's dynamic QR code, and to display the product traceability data to the user after verifying its authenticity.

[0020] Furthermore, the working principle of the present invention will be illustrated below through embodiments: This example uses the full-chain traceability of pre-prepared food products from a food company as an example.

[0021] The dynamic QR code management module is responsible for generating the product's dynamic QR code and binding it to the blockchain digital identity for notarization. In this embodiment, the dynamic QR code uses the QR code encoding algorithm to encode the unique access URL. The access URL corresponds one-to-one with the product, so the dynamic QR code is unique and has no duplicates. The access ULR consists of the system domain name "https: / / blockchain-trace.com / trace?pid=" and the product's unique UUID "UUID-867e388d-7f2a-4c3d-9b1e-1234567890ab". In this embodiment, the access ULR is specifically "https: / / blockchain-trace.com / trace?pid=UUID-867e388d-7f2a-4c3d-9b1e-1234567890ab". After generating a dynamic QR code, the dynamic QR code management module extracts the product's unique UUID from the access URL as the QR code's unique identifier (QID). Simultaneously, it obtains the product's blockchain digital identity DID from the blockchain notarization module: BCID-0x7a9f3d2c6b8e104a5c7d9b3e8f0a2d4b6c8e0f1a3b5d7f9. A binding pair is established between the product's blockchain digital identity DID and the QR code's unique identifier (QID), and the binding relationship hash value is generated using the SHA-256 algorithm: 0x2f9d4e6c8a0b3d5f7e9c1a2b4d6f8e0a3c5e7g9i1k3m5o7q9s. The binding timestamp is also recorded: 2024-05-20. At 09:15:30.123, the digital signature RSA-2048 of the operating entity, which is the system administrator Admin-001, is packaged into a binding record and a binding relationship hash value and sent to the preset smart contract of the blockchain notarization module to complete on-chain solidification. After on-chain solidification, the preset smart contract generates a binding notarization certificate Bind-Cert-00123 containing information such as notarization number and on-chain timestamp, and returns it to the local storage unit of the dynamic QR code management module for storage for subsequent verification. The smart contract is a pre-written automated execution program deployed on the consensus node of the consortium blockchain.

[0022] The blockchain evidence storage module is built on a Hyperledger Fabric consortium blockchain architecture, deploying 13 supply nodes: 3 manufacturer nodes, 2 wholesaler nodes, 5 retailer nodes, 2 raw material supplier nodes, and 1 market supervision node. The Raft consensus mechanism ensures data consistency. The module assigns a unique identifier to each supply node using X.509 digital certificates (e.g., manufacturer node A is Node-M-001) and pre-sets differentiated operating permissions through smart contracts. Raw material suppliers can only input raw material procurement and inspection data, manufacturers can only input production process data, wholesalers can only input distribution data, retailers can only input sales data, and the supervision node only has query permissions. When a supply node submits product traceability data by scanning a dynamic QR code linked to the product's unique identifier, the blockchain evidence storage module first verifies the supply node's operating permissions. The product traceability data is then extracted and a data hash value is generated using the SHA-256 algorithm. Next, the blockchain digital identity and entry timestamp are extracted to form metadata. The data hash value, metadata, and node digital signatures are packaged into a data storage package and sent to the consortium blockchain consensus nodes for consistency verification. These consortium blockchain consensus nodes refer to the 13 supply nodes participating in the Raft consensus mechanism of this consortium blockchain. When more than 2 / 3 of the consortium blockchain consensus nodes verify that the data storage package format is legal, the node digital signature is valid, and the data hash value has not been tampered with, the consistency verification passes. After the consistency verification passes, a preset smart contract is used to write the data storage package into the blockchain ledger and generate a unique data storage number. Simultaneously, an on-chain certificate containing the data storage number, the consortium blockchain consensus node signature set, and other information is automatically generated and returned to the supply node that submitted the product traceability data via a P2P network, serving as the basis for the legal on-chain upload of the product traceability data.

[0023] The end-to-end data collection module acquires product traceability data through a combination of automated IoT collection and compliant manual entry. Supply nodes scan the dynamic QR codes of products within their respective nodes to input the product traceability data they are responsible for into a preset template and submit it. The end-to-end data collection module only uploads the product traceability data and the corresponding on-chain certificate to the cloud database after receiving the on-chain certificate returned by the blockchain notarization module. If the consistency verification fails or the on-chain certificate is not received, the end-to-end data collection module refuses to upload the data and sends a "Data abnormal, please resubmit" message to the input end of the supply node, ensuring that all product traceability data uploaded to the cloud database is credible data verified on the blockchain.

[0024] The cloud database uses a MySQL Cluster distributed database deployed on Alibaba Cloud ECS instances. In addition to storing product binding pairs and traceability data, it is also used to store binding evidence certificates, on-chain certificates, and barcode scanning logs. The cloud database uses the AES-256 symmetric encryption algorithm to encrypt and store sensitive information such as device MAC addresses in the product traceability data and barcode scanning logs of the supply nodes. The keys adopt a consortium blockchain node sharding management mode, with 13 keys held by each supply node to ensure data security.

[0025] The traceability query module handles the core function of user-side QR code scanning and querying. When a user scans a product's dynamic QR code via WeChat or Alipay, the module automatically extracts the unique identifier from the QR code. Based on this unique identifier, it retrieves the data packets from each supply node's storage from the blockchain storage module and simultaneously searches the cloud database for the corresponding full-chain traceability data, decrypting the original text. It also collects the scanning time (2024-05-25 14:20:30.789) and the scanning device information (iPhone). 14. MAC address 00:1B:44:11:3A:B7 and other information are used to generate a QR code scanning log. The traceability query module uses the SHA-256 algorithm to generate a verification hash value for each product traceability data from each supply node retrieved from the cloud database. This hash value is compared with the data hash value in the blockchain evidence storage data package. If all hash values ​​match, the product traceability data with the unique QR code identifier is displayed in a timeline and list format according to the sequence of "raw material supply → production → warehousing → transportation → retail," and the page displays a data trust identifier. If the hash value comparison is inconsistent, a red warning pop-up window will appear to indicate that the product traceability data has been tampered with and will be synchronized to the regulatory node. Regardless of whether the user's QR code scanning query result is normal, the traceability query module adds a query result identifier to the QR code scanning log, generates a log hash value using the SHA-256 algorithm, encrypts and stores the QR code scanning log in the cloud database, and packages the log hash value, unique QR code identifier, etc., into a log evidence storage request and sends it to the blockchain evidence storage module. After verification by the smart contract, it is written into the blockchain ledger and a log on-chain certificate is generated, completing the on-chain evidence storage of the query behavior.

[0026] The complete workflow of this embodiment is as follows: After product production is completed, the dynamic QR code management module generates a unique dynamic QR code for the product, and the blockchain notarization module generates the product's blockchain digital identity. The product's dynamic QR code and blockchain digital identity are bound together and notarized on the blockchain. A pre-set smart contract returns the notarized certificate, and the dynamic QR code is affixed to the product packaging. Supply nodes such as raw material suppliers, manufacturers, wholesalers, and retailers sequentially enter the product traceability data of their respective supply links through the full-chain data collection module. After the blockchain notarization module completes the permission verification and consistency verification, the data is notarized on the blockchain. The pre-set smart contract returns the notarized certificate. After receiving the consistency verification result, the full-chain data collection module uploads the product traceability data and the notarized certificate to the cloud database. When users scan the code to query, the traceability query module retrieves the blockchain ledger and the cloud database to complete the hash value verification, displays the query results, and collects the scanning log. The scanning log is encrypted and stored in the cloud database, and the hash value is notarized on the blockchain. Market supervision nodes can query the entire product traceability data, various notarized certificates, and scanning logs, realizing full supervision of the product supply chain and query behavior, and providing credible evidence for dispute resolution and violation investigation.

[0027] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A blockchain-based product end-to-end trusted traceability management system, characterized in that, include: The dynamic QR code management module is used to generate dynamic QR codes for products and establish a binding relationship between the dynamic QR codes and the product's blockchain digital identity, and then solidify the binding relationship on the blockchain. The blockchain evidence storage module is used to generate the blockchain digital identity of the product, and at the same time receive and verify the product traceability data, and store the verified product traceability data on the blockchain. The full-chain data acquisition module is used to collect product traceability data from each supply node in the product supply chain and upload the product traceability data to the cloud database; The traceability query module is used to retrieve product traceability data based on the product's dynamic QR code, and then display the product traceability data to the user after verifying its authenticity.

2. The product end-to-end trusted traceability management system based on blockchain according to claim 1, characterized in that, The dynamic QR code is obtained by encoding the access URL using a QR code encoding algorithm. The access URL corresponds one-to-one with the product, and the dynamic QR code is uniquely determined by the access URL.

3. The product end-to-end trusted traceability management system based on blockchain according to claim 2, characterized in that, The method for on-chain evidence storage and solidification of the binding relationship is as follows: S1. Obtain the product's blockchain digital identity and extract the unique QR code identifier corresponding to the product's dynamic QR code; S2. Establish a binding relationship between the unique QR code identifier and the product's blockchain digital identity, forming a binding pair that includes the blockchain digital identity and the unique QR code identifier. Use the SHA-256 algorithm to perform a hash operation on the binding pair to generate a binding relationship hash value, and package the binding pair, binding timestamp, and operation entity digital signature into a binding record. S3. Send the binding relationship hash value and binding record to the blockchain evidence storage module, and write them into the blockchain ledger through a smart contract.

4. The product end-to-end trusted traceability management system based on blockchain according to claim 3, characterized in that, The blockchain evidence storage module adopts a consortium blockchain architecture, which assigns supplier node identities and corresponding operation permissions to each supplier node in the product supply chain. The operation permissions are used to limit the product traceability data entry permissions of each supplier node.

5. The blockchain-based product end-to-end trusted traceability management system according to claim 4, characterized in that, The product traceability data includes the supplier node identity, node digital signature, unique QR code identifier, entry timestamp, and product supply node traceability data.

6. The product end-to-end trusted traceability management system based on blockchain according to claim 5, characterized in that, The process of verifying and storing the product traceability data on the blockchain is as follows: Based on the operating permissions of the supply node, verify whether the supply node has the permission to enter product traceability data. If the verification of the product traceability data entry permission of the supply node fails, the entry of product traceability data by the supply node will be rejected. If the product traceability data entry permission verification of the supply node is passed, the SHA-256 algorithm is used to perform a hash operation on the product supply node traceability data in the product traceability data to generate a data hash value. At the same time, the blockchain digital identity corresponding to the entry timestamp and QR code unique identifier in the product traceability data is extracted to form metadata. The data hash value, metadata and node digital signature are packaged into a storage data package and sent to the consortium blockchain consensus node for consistency verification. After the consistency verification is passed, the storage data package is recorded in the blockchain ledger.

7. The product end-to-end trusted traceability management system based on blockchain according to claim 6, characterized in that, The product traceability data is uploaded to the cloud database only if the consistency check passes; otherwise, the full-chain data collection module will refuse to upload the product traceability data from the supply nodes.

8. The product end-to-end trusted traceability management system based on blockchain according to claim 7, characterized in that, The process of verifying the authenticity of product traceability data is as follows: Based on the unique identifier of the dynamic QR code, the system retrieves the evidence storage data packets corresponding to each supply node bound to the unique QR code from the blockchain ledger. Simultaneously, it retrieves the product traceability data corresponding to each supply node bound to the unique QR code from the cloud database. The system then performs a hash operation on the product traceability data of each supply node using the SHA-256 algorithm to generate a verification hash value for each supply node. The system compares the data hash value in the evidence storage data packet corresponding to each supply node with its corresponding verification hash value. If the hash values ​​of all supply nodes match, all product traceability data is displayed to the user in a structured manner according to the time sequence of the supply nodes. If the hash values ​​of any supply node do not match, a product traceability data tampering warning is sent to the user.

9. The product end-to-end trusted traceability management system based on blockchain according to claim 8, characterized in that, The cloud database is used to store binding pairs and product traceability data, and the stored product traceability data is encrypted using the AES-256 symmetric encryption algorithm.

Images