Blockchain-based pet stem cell full life cycle traceability method

Abstract

The application relates to the technical field of blockchain and biological quality management, in particular to a pet stem cell whole life cycle tracing method based on a blockchain, which comprises the following steps: establishing an on-chain digital twin of a pet stem cell preparation on the blockchain; predefining a state sequence in an intelligent contract deployed on the blockchain, and configuring illegal jump blocking logic and precondition checking logic; submitting, after signing by an agency node and edge computing abstract hash, artificial operation data and Internet of Things collection data in each state stage of the on-chain digital twin to the blockchain; in response to a tracing request carrying a digital certificate, analyzing role attributes in the digital certificate, and obtaining corresponding tracing data from the blockchain account book and authorized off-chain storage according to role permissions. The application helps to realize trusted tracing and automatic compliance management of the whole life cycle of the pet stem cell preparation.

Description

Technical Field

[0001] This application relates to the fields of blockchain and biological quality management technology, and in particular to a blockchain-based method for tracing the entire life cycle of pet stem cells. Background Technology

[0002] With the rapid development of the pet healthcare industry, stem cell therapy has become an important technological direction in pet clinical diagnosis and treatment due to its unique advantages in tissue repair, immune regulation, and intervention of intractable diseases. The production of pet stem cell preparations involves collaborative work among multiple institutions, stages, and stakeholders, from donor collection, in vitro expansion, cryopreservation, quality inspection to clinical administration. Data throughout the entire process is scattered and stored in the local systems of different institutions, resulting in problems such as data silos, susceptibility to tampering, difficulty in traceability, and lack of oversight.

[0003] Currently, pet stem cell management generally employs centralized recording systems, with data controlled by a single institution. Operation logs can be modified or deleted, making it impossible to guarantee the authenticity and immutability of operational behavior and environmental data. Furthermore, the lack of rigid constraints on changes in the life cycle stages makes it prone to skipping steps, reverse operations, and unauthorized transfers, compromising the quality of formulations and their safety.

[0004] Therefore, how to achieve reliable traceability and automated compliance management of pet stem cell preparations throughout their entire life cycle has become a technical problem that urgently needs to be solved in this field. Summary of the Invention

[0005] Therefore, it is necessary to provide a blockchain-based method for tracing the entire lifecycle of pet stem cell preparations, which can achieve credible traceability and automated compliance management throughout the entire lifecycle of pet stem cell preparations, in response to the aforementioned technical problems.

[0006] Firstly, this application provides a blockchain-based method for tracing the entire lifecycle of pet stem cells, the method comprising: Generate a globally unique batch identifier for the pet stem cell preparation and anchor the donor information and digital signature of the collection operation in the genesis block to establish an on-chain digital twin of the pet stem cell preparation on the blockchain. In smart contracts deployed on the blockchain, a state sequence is predefined, and illegal jump blocking logic and precondition verification logic are configured to constrain the on-chain digital twin to only undergo legal state evolution according to the state sequence during its life cycle. At each state stage of the on-chain digital twin, the generated manual operation data and IoT collected data are submitted to the chain after being signed by the institutional node and hashed by edge computing digest, and an abnormal event is triggered to be uploaded to the chain when the data exceeds a preset threshold. In response to a traceability request carrying a digital certificate, the role attributes in the digital certificate are parsed, and the corresponding traceability data is obtained from the blockchain ledger and authorized off-chain storage according to the role permissions, so as to complete the hierarchical traceability of the entire trusted history of the on-chain digital twin.

[0007] In one embodiment, responding to a traceability request carrying a digital certificate, parsing the role attributes in the digital certificate, and obtaining the corresponding traceability data from the blockchain ledger and authorized off-chain storage according to role permissions includes: Receive a traceability request carrying a digital certificate, which is issued by a member service provider of a permissioned blockchain network and contains predefined role attributes in the body field of the digital certificate; The smart contract's data access control interface is invoked to parse the role attributes in the digital certificate and determine the queryer's data access permission level based on the role attributes. Based on the determined data access permission level, the corresponding level of structured traceability data is obtained from the blockchain ledger, and detailed data is obtained from off-chain storage through the authorization token generated by the smart contract when the permissions permit. The structured traceability data obtained from the blockchain ledger and the detailed data obtained from off-chain storage are assembled into a hierarchical traceability view with evidence hashes according to the timeline template, and the hierarchical traceability view is returned as the query result.

[0008] In one embodiment, the role attribute includes at least one of pet owner, veterinarian, and regulatory agency; When the role attribute is the pet owner, the data access permission level is the first level, which only allows access to the timeline status node information of the on-chain digital twin and the corresponding evidence hash of the status change. When the role attribute is the attending veterinarian, the data access permission level is the second level, which allows access to all information of the first level and the pass / fail status of key quality inspection indicators stored on the chain, and to obtain temporary access credentials for the detailed quality inspection report hash in the off-chain storage. When the role attribute is the regulatory agency, the data access permission level is the third level, which allows access to all information of the second level, as well as the original IoT data hash of each state stage stored on the chain, the operator's digital certificate serial number, all endorsement signature details, and permanent access authorization to the full amount of original data in off-chain storage.

[0009] In one embodiment, the process of submitting manually generated operation data and IoT-collected data to the blockchain at each state stage of the on-chain digital twin, after being signed by the institutional node and hashed by edge computing digests, and triggering anomaly events to be uploaded to the blockchain when the data exceeds a preset threshold, includes: In each state stage of the on-chain digital twin, for manually manipulated data, the corresponding institutional node performs hash calculations and digital signatures before submitting it to the chain; In each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway calculates a digest hash according to a preset time window, and submits the digest hash to the chain after it is signed by the institutional node. The smart contract has built-in security thresholds for each IoT parameter. When any IoT parameter exceeds the corresponding security threshold, an abnormal event record is generated and written into the blockchain ledger, and associated with the on-chain digital twin of the current pet stem cell preparation. After the abnormal event is written, the smart contract prevents the on-chain digital twin from transitioning to the next state.

[0010] In one embodiment, for manually manipulated data, the process of submitting it to the chain after hashing and digitally signing it by the corresponding institutional node at each state stage of the on-chain digital twin includes: In each state stage of the on-chain digital twin, for manually operated data, the corresponding institutional node performs hash calculation on the manually operated data to obtain the first hash value; The first hash value and the timestamp of the current operation are digitally signed using the private key of the institution node to form signature data; The manual operation data, the first hash value, the signature data, the batch identifier, and the operator's digital certificate serial number are assembled, and the assembled data is submitted to a preset endorsement node in the blockchain network for endorsement verification. After the endorsement verification is passed, the assembled data is written into the blockchain ledger, and the first hash value is associated with the on-chain digital twin of the current pet stem cell preparation.

[0011] In one embodiment, at each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway calculates a digest hash according to a preset time window, and submits the digest hash to the chain after it is signed by the institution node. At each state stage of the on-chain digital twin, for IoT-collected data, the IoT-collected data is hashed through the edge gateway to obtain a second hash value as a digest hash; The IoT-collected data is stored in the organization's local database or an authorized off-chain storage system, and the storage path and the start and end timestamps of the time window are recorded. The edge gateway sends the digest hash, the storage path, and the start and end timestamps of the time window to the corresponding institution node, which then performs digital signature to form a data packet to be endorsed and submits it to the blockchain for endorsement verification. After the endorsement verification is passed, the digest hash and the storage path are written into the blockchain ledger and associated with the on-chain digital twin of the current pet stem cell preparation.

[0012] In one embodiment, the step of predefining a state sequence in a smart contract deployed on the blockchain and configuring illegal jump blocking logic and precondition verification logic to constrain the on-chain digital twin to only undergo legal state evolution according to the state sequence during its lifecycle includes: In a smart contract deployed on a blockchain, a sequentially ordered sequence of states is defined, which includes at least the states of extracted, amplified, frozen, under quality inspection, and administered. Configure illegal jump blocking logic, which only allows transitions from the current state to the next state in the state sequence, and rejects any jump or reverse state change requests; Configure precondition verification logic, which verifies whether there are corresponding necessary data records on the chain based on the difference between the current state and the target state. When the target state is valid and all prerequisites are met, the smart contract execution state changes, updating the current state of the on-chain digital twin to the target state.

[0013] In one embodiment, the blockchain-based pet stem cell full lifecycle traceability method further includes: If any precondition verification fails, the smart contract refuses to change the state, keeps the current state unchanged, generates a verification failure record containing the reason for failure, the batch identifier of the preparation, and a timestamp, writes it to the blockchain ledger, and sends an alarm notification to the relevant party nodes through the event mechanism.

[0014] In one embodiment, the step of verifying whether there is a corresponding necessary data record on the verification chain based on the difference between the current state and the target state includes: When a request transitions from the extracted state to the amplification state, the presence of the donor information hash, the digital signature of the collection operation, and the genesis block record of the pet stem cell preparation on the verification chain is checked. When a request transitions from the amplification state to the cryopreserved state, check whether there are cell passage records, viability counts, and culture environment parameter summary hashes on the check chain; When a request transitions from the frozen state to the quality inspection state, the verification chain checks whether the frozen scheme hash, frozen management identifier, and frozen timestamp exist. When a request transitions from the quality inspection state to the drug administration state, the verification chain checks whether there are hashes of the test results for all mandatory items and whether all test result values ​​meet the preset quality standards. When a request is made to transition from a drug-doped state to another state, the smart contract directly rejects any state change request.

[0015] In summary, this application includes the following beneficial technical effects: By generating globally unique batch identifiers for pet stem cell preparations and anchoring donor information and digital signatures for collection operations in the genesis block, an on-chain digital twin is established. This ensures that the source information of the preparation is tamper-proof, uniquely identified, and fully traceable, guaranteeing the authenticity and integrity of lifecycle data from the outset. By predefining state sequences in smart contracts and configuring illegal jump blocking logic and precondition verification logic, the on-chain digital twin can be strictly constrained to evolve legally according to the preset process, preventing process skipping, reverse flow, and illegal operations. This achieves automated compliance management throughout the entire lifecycle, significantly reducing compliance risks caused by human intervention. Furthermore, by integrating manual operation data at each stage with the Internet of Things (IoT), the system can effectively manage the entire lifecycle. The collected data is signed by the institutional node and hashed by edge computing digests before being uploaded to the blockchain. When the data exceeds the threshold, an anomaly event is triggered and uploaded to the blockchain, ensuring that all operations and environmental parameters are authentic, trustworthy, non-repudiable, and fully traceable. At the same time, it enables real-time detection and automatic alarm of abnormal risks, significantly improving the timeliness and reliability of quality control. By responding to traceability requests with digital certificates, on-chain and authorized off-chain data can be obtained in a hierarchical manner according to role permissions, enabling hierarchical, controllable, safe, efficient, and fully trustworthy traceability query. This not only meets the differentiated traceability needs of pet owners, attending veterinarians, and regulatory agencies, but also effectively protects data privacy, ultimately achieving trusted traceability and automated compliance management of pet stem cell preparations throughout their entire life cycle. Attached Figure Description

[0016] Figure 1 This is a flowchart illustrating a blockchain-based method for tracing the entire lifecycle of pet stem cells in one embodiment. Figure 2 This is a flowchart illustrating the source tracing request and response process in one embodiment. Figure 3 This is a schematic diagram of the data uplink triggering process in one embodiment. Detailed Implementation

[0017] This invention provides a blockchain-based method for tracing the entire lifecycle of pet stem cells.

[0018] The embodiments of the present invention will now be described in more detail with reference to the accompanying drawings. While some embodiments of the present invention are shown in the drawings, it should be understood that the present invention can be implemented in various forms and should not be construed as limited to the embodiments set forth herein. Rather, these embodiments are provided to provide a more thorough and complete understanding of the present disclosure. It should be understood that the accompanying drawings and embodiments are for illustrative purposes only and are not intended to limit the scope of protection of the present invention.

[0019] In the description of the embodiments disclosed in this invention, the term "comprising" and similar terms should be understood as open-ended inclusion, i.e., "including but not limited to". The term "based on" should be understood as "at least partially based on". The term "one embodiment" or "the embodiment" should be understood as "at least one embodiment". The terms "first", "second", etc., may refer to different or the same objects. Other explicit and implicit definitions may also be included below.

[0020] For ease of understanding, the specific process of the embodiments of the present invention is described below. Please refer to [link / reference]. Figure 1 One embodiment of the blockchain-based pet stem cell full life cycle traceability method in this invention includes: S100 generates a globally unique batch identifier for pet stem cell preparations and anchors the donor information and digital signature of the collection operation in the genesis block to establish an on-chain digital twin of the pet stem cell preparation on the blockchain.

[0021] Specifically, firstly, a globally unique batch identifier is generated for each batch of pet stem cell preparation. This batch identifier serves as the core index of the preparation within the blockchain network, persisting throughout its entire lifecycle. Subsequently, two key pieces of information are anchored in the blockchain's genesis block: firstly, donor information, including a hashed summary of the pet donor's original data such as identity, breed, and age; and secondly, a digital signature of the collection operation, a non-repudiable credential generated by the authorized institution or individual performing the collection operation using their private key to sign data such as the collection time, location, and operational procedures. Through these operations, a one-to-one on-chain digital twin of the pet stem cell preparation is established on the blockchain. This on-chain digital twin is not a simple data mirror image, but a trusted digital object anchored to the blockchain from its inception. Its integrity is guaranteed by the hash value and consensus mechanism of the genesis block; any subsequent modifications to the donor information or collection operation will be immediately detected.

[0022] S200 predefines state sequences in smart contracts deployed on the blockchain and configures illegal jump blocking logic and precondition verification logic to constrain the on-chain digital twin to only undergo legal state evolution according to the state sequence during its lifecycle.

[0023] Specifically, the smart contract deployed on the blockchain network predefines a sequential state sequence covering the key stages a pet stem cell preparation must undergo from preparation to use, such as extraction, expansion, cryopreservation, quality inspection, and administration. Simultaneously, the smart contract is configured with illegal jump blocking logic to automatically verify all initiated state change requests, prohibiting any state transitions that do not conform to the preset sequence, thus eliminating non-compliant operations such as process errors and arbitrary jumps from the technical level. Furthermore, the smart contract is synchronously configured with precondition verification logic to automatically verify necessary conditions before state changes are executed, ensuring that state evolution has a legal and compliant foundation.

[0024] In this embodiment, through predefined state sequences and logical configurations, smart contracts can automatically constrain the on-chain digital twin throughout its entire lifecycle, ensuring that it strictly follows the preset state sequences to perform legal state evolution. This achieves mandatory protection of process compliance without the need for continuous manual supervision, effectively avoiding process disorder and management risks caused by human intervention. It provides stable and reliable process control support for the credible traceability and automated compliance management of pet stem cell preparations throughout their entire lifecycle.

[0025] S300, in each state stage of the on-chain digital twin, will submit the generated manual operation data and IoT collected data to the chain after being signed by the institutional node and hashed by edge computing digest, and will trigger an abnormal event to be uploaded to the chain when the data exceeds a preset threshold.

[0026] Specifically, at each stage of the pet stem cell preparation's lifecycle corresponding to the on-chain digital twin, the system collects and aggregates all manual operation data and IoT device data generated in real time. To ensure the authenticity, integrity, and non-repudiation of this data, the manual operation data is digitally signed by the corresponding responsible agency node using its own identity key, while the IoT data is hashed via edge computing nodes. After both types of data undergo trusted processing, they are uniformly submitted to the blockchain network for on-chain notarization, ensuring that every operation and every set of environmental and quality parameters forms an immutable on-chain record. Simultaneously, the system pre-sets reasonable security threshold ranges for various IoT data collection parameters. When the real-time uploaded IoT data exceeds the preset threshold, the system automatically identifies and generates corresponding abnormal event records, synchronously writing the abnormal events into the blockchain ledger.

[0027] In this embodiment, by using the trusted data uploading mechanism and the automatic triggering mechanism for uploading data to the blockchain, real-time evidence storage and full verification of the entire process data of pet stem cell preparations can be achieved. This ensures that normal operations and abnormal situations throughout the life cycle are objectively and completely fixed in the blockchain, providing real and reliable data support for subsequent traceability, verification and quality control, and further improving the security and credibility of the entire life cycle management.

[0028] S400, in response to a traceability request carrying a digital certificate, parses the role attributes in the digital certificate and retrieves the corresponding traceability data from the blockchain ledger and authorized off-chain storage according to the role permissions, so as to complete the hierarchical traceability of the entire trusted history of the on-chain digital twin.

[0029] Specifically, the system verifies the legitimacy of the digital certificate carried in the request by parsing the internal identifier of the certificate to determine the role attribute of the requesting entity. Based on preset permission allocation rules, the system automatically matches the corresponding data access permissions according to the current role attribute. Within the scope of permissions, it reads the core traceability information that has been solidified and stored in the blockchain ledger, and retrieves relevant auxiliary data from secure and reliable off-chain storage within the authorized scope. The system integrates and organizes the on-chain and off-chain data obtained according to permissions to form a complete and reliable historical record, and finally returns the traceability result matching the requester's permissions, thereby completing the hierarchical, controllable, and reliable traceability of the entire lifecycle history of the on-chain digital twin. The entire process relies on digital certificates for automatic identity verification and on-demand data access based on role permissions, ensuring both the security and data privacy of traceability operations, while providing accurate and reliable traceability services for different entities, supporting the transparent and standardized supervision and use of pet stem cell preparations throughout the entire process.

[0030] In one embodiment, such as Figure 2 As shown, S400 includes: S410, receives a traceability request carrying a digital certificate; S420 calls the smart contract's data access control interface, parses the role attributes in the digital certificate, and determines the data access permission level of the querier based on the role attributes; S430: Based on the determined data access permission level, obtain the corresponding level of structured traceability data from the blockchain ledger, and obtain detailed data from off-chain storage through the authorization token generated by the smart contract when the permissions permit; S440 assembles the structured traceability data obtained from the blockchain ledger and the detailed data obtained from off-chain storage into a hierarchical traceability view with evidence hashes according to the timeline template, and returns the hierarchical traceability view as the query result.

[0031] Specifically, when the system receives a traceability request with a digital certificate from a querying party, it first verifies the format and validity of the digital certificate. The digital certificate is uniformly issued by a member service provider of the permissioned blockchain network, and the querying party's role attributes, such as pet owner, veterinarian, or regulatory agency, are pre-embedded in the certificate's body field. After successful verification, the system calls a pre-defined data access control interface in a smart contract deployed on the blockchain. This interface parses the role attribute field in the digital certificate and automatically determines the current queryer's data access permission level based on the role-permission mapping table maintained internally by the smart contract. Permission levels are typically divided into multiple tiers from low to high, with different tiers corresponding to different data visibility ranges. After the permission level is determined, the system retrieves the corresponding structured traceability data from the blockchain ledger based on that level, such as the state change timeline of the on-chain digital twin, the notarized hashes of each state node, and key operation summaries. If the current permission level allows access to more detailed raw data (such as a complete quality inspection report, high-frequency IoT sampling records, etc.), the smart contract dynamically generates an authorization token with time-limited validity and single-use restrictions. The querying party uses this token to send a request to the authorized off-chain storage system to obtain the required detailed data. Finally, the system assembles the structured data obtained from the blockchain ledger and the detailed data obtained from off-chain storage according to a preset timeline template, forming a hierarchical traceability view where each data segment is accompanied by a corresponding notarization hash. This view is then returned to the requesting party as the query result. Through the above process, this method achieves hierarchical, controllable, and verifiable end-to-end traceability based on certificate parsing and dynamic authorization, while ensuring the immutability of on-chain data.

[0032] In one embodiment, the role attributes include at least one of pet owner, veterinarian, and regulatory agency; When the role is a pet owner, the data access level is Level 1, allowing access only to the timeline state node information of the on-chain digital twin and the corresponding notarized hash of state changes; when the role is a veterinarian, the data access level is Level 2, allowing access to all information in Level 1 and the pass / fail status of key quality inspection indicators stored on-chain, as well as temporary access credentials for the detailed quality inspection report hash in off-chain storage; when the role is a regulatory agency, the data access level is Level 3, allowing access to all information in Level 2 and the original IoT data hash of each state stage stored on-chain, the operator's digital certificate serial number, all endorsement signature details, and permanent access authorization for all original data in off-chain storage.

[0033] Specifically, the role attributes in the digital certificate include at least one of the following: pet owner, veterinarian, or regulatory agency. Different role attributes are mapped to different data access permission levels. When the parsed role attribute is pet owner, the data access permission level is set to Level 1. At Level 1, the querying party is only allowed to obtain the timeline state node information of the on-chain digital twin and the corresponding evidence hash for each state change. The timeline state node information refers to the state name and change timestamp of each key stage in the complete life cycle of the pet stem cell preparation, from donor collection, in vitro expansion, cryopreservation, quality testing, to final administration. The evidence hash is the hash value corresponding to each state change operation. The pet owner can use this hash value to independently verify that the state change record has indeed been fixed in the blockchain ledger, but cannot view the specific operation details, quality inspection data, or original IoT parameters under that state node. Through this permission setting, pet owners can clearly understand which stage of preparation the pet stem cell preparation they are interested in is currently in, the timing of each stage, and whether the entire process is proceeding in the normal order. This satisfies their basic right to know and supervise the preparation process, while effectively protecting the core process parameters of the preparation institution, the professional operating details of veterinarians, and the specific testing data of the quality inspection institution from unnecessary disclosure, thus achieving a balance between transparency and privacy protection. When the identified role is a primary veterinarian, the data access permission level is set to Level 2. Level 2 not only includes all the information from Level 1 but also provides access to two additional types of key data: First, the on-chain storage of the pass / fail status of key quality inspection indicators, i.e., whether the mandatory inspection items (such as cell viability, sterility testing, mycoplasma testing, endotoxin testing, etc.) generated during the "quality inspection" stage of the pet stem cell preparation meet the preset quality standards. The specific test values ​​and complete reports are not directly disclosed. Second, a temporary access credential with time-limited validity and single-use restrictions is dynamically generated through a smart contract. The primary veterinarian can use this credential to obtain the hash value of the detailed quality inspection report from the authorized off-chain storage system and then compare it to obtain the complete original quality inspection report. The reason for setting up a temporary access credential instead of permanent authorization for veterinarians is that veterinarians typically only need to comprehensively evaluate the detailed quality data of a batch of preparations to determine its suitability for use before preparing to administer the medication to a sick pet. Their access needs have clear timeliness and scenario relevance. With second-level access, the attending veterinarian can quickly determine whether the preparation is up to standard before administration. If necessary, they can also review the full original quality inspection report to make a scientific clinical decision, while other non-essential information about the preparation institution remains isolated.When the parsed role attribute is a regulatory agency, the data access permission level is set to Level 3, the highest permission level. Level 3, building upon Level 2, further grants access to the most granular full audit data. Specifically, this includes the hash values ​​of the raw IoT-collected data for each state stage stored on-chain (such as incubator temperature, humidity, carbon dioxide concentration, cryopreservation temperature curves, etc.), the digital certificate serial numbers of all operators (used to trace the identity of the specific operator at each stage), and all endorsement signature details (including the identity of the endorsing node and the signature result). Furthermore, unlike the temporary access credentials obtained by veterinarians, regulatory agencies are granted permanent access to all raw data in off-chain storage. They can directly and at any time retrieve complete quality inspection reports, raw IoT sampling records, operation logs, and other detailed data for all historical batches without needing to apply for temporary tokens each time. Through Level 3 permissions, regulatory agencies can conduct a thorough audit of all historical data for any pet stem cell preparation, verifying whether the responsible party at each operational stage is compliant, whether each environmental parameter is within safe thresholds, and whether each endorsement signature comes from a legitimate endorsing node, thereby achieving comprehensive supervision and accountability throughout the entire lifecycle of the preparation.

[0034] In one embodiment, such as Figure 3 As shown, S300 includes: S310: In each state stage of the on-chain digital twin, for manually manipulated data, the corresponding institutional node performs hash calculations and digital signatures before submitting it to the chain; S320: In each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway calculates the digest hash according to a preset time window, and submits the digest hash to the chain after it is signed by the institution node. S330, the smart contract has built-in security thresholds for each IoT parameter. When any IoT parameter exceeds the corresponding security threshold, an abnormal event record is generated and written to the blockchain ledger, and associated with the on-chain digital twin of the current pet stem cell preparation. S340, after an abnormal event is written, the smart contract prevents the on-chain digital twin from transitioning to the next state.

[0035] Specifically, for manually manipulated data, the corresponding institutional node performs hash calculations and adds a digital signature before submitting it to the blockchain. For IoT-collected data, the edge gateway deployed on the device side calculates a digest hash according to a preset time window, and submits this digest hash to the blockchain after being signed by the institutional node. Through this design, the blockchain ledger only stores cryptographic evidence that can verify the integrity and authenticity of the data, while the original data can be stored locally or off-chain as needed, thereby significantly reducing on-chain storage overhead while ensuring trustworthiness. Simultaneously, security thresholds for various IoT parameters are built into the smart contract. When the edge gateway detects in real time that any IoT parameter (such as incubator temperature, CO2 concentration, etc.) exceeds its preset security threshold, the smart contract automatically generates an abnormal event record, writes the record to the blockchain ledger, and associates it with the on-chain digital twin of the current pet stem cell preparation. More importantly, once the anomaly is written to the ledger, the smart contract immediately prevents the on-chain digital twin from transitioning to the next state. For example, if a temperature exceeding the threshold occurs during the "amplification" phase, the smart contract will refuse to change the state from "amplification" to "frozen" even if all other operations have been completed, until the anomaly is handled and the record is cleared. This rigid constraint of blocking anomalies enables fully automated closed-loop management from data collection, threshold judgment, anomaly reporting to the blockchain, to state control, preventing substandard formulations from flowing into subsequent stages.

[0036] In one embodiment, at each state stage of the on-chain digital twin, for manually manipulated data, the corresponding institutional node performs hash calculations and digital signatures before submitting it to the chain, including: At each stage of the on-chain digital twin, for manually operated data, the corresponding institutional node performs a hash calculation on the manually operated data to obtain a first hash value; the institutional node's private key is used to digitally sign the first hash value and the timestamp of the current operation to form signature data; the manually operated data, the first hash value, the signature data, the batch identifier, and the operator's digital certificate serial number are assembled, and the assembled data is submitted to the preset endorsement node in the blockchain network for endorsement verification; after the endorsement verification is passed, the assembled data is written into the blockchain ledger, and the first hash value is associated with the on-chain digital twin of the current pet stem cell preparation.

[0037] Specifically, at each state stage of the on-chain digital twin, when a piece of human operation data is generated (such as a record of operations performed by an operator, such as cell passage, cryopreservation, sampling, or quality inspection), the corresponding institutional node first performs a hash calculation on the human operation data to obtain a first hash value of fixed length. This hash calculation uses a cryptographic hash function (such as SHA-256), which can map human operation data of any length to a unique digest value. Any slight modification to the original data will result in a completely different hash value. Subsequently, the institutional node uses its own private key to digitally sign the first hash value and the timestamp of the current operation to form non-repudiable signature data. The introduction of the timestamp can prevent replay attacks and clarify the specific time when the operation occurred. Next, the institutional node assembles the original manual operation data, the calculated first hash value, the generated signature data, the batch identifier of the current pet stem cell preparation, and the operator's digital certificate serial number into a complete data packet. This data packet contains all the information needed to verify the authenticity of the data. The original data is used to display the operation content, the hash value is used for quick integrity verification, the signature data is used to verify the data source and prevent tampering, the batch identifier is used to associate it with a specific preparation twin, and the digital certificate serial number is used to trace the identity of the specific operator. Then, this data packet is submitted to a pre-defined endorsement node in the blockchain network for endorsement verification. The endorsement node verifies the validity of the signature (i.e., confirming whether the signature was signed by the corresponding institutional node's private key), the operation authority (i.e., confirming whether the institutional node has the right to perform this operation), and the compliance of the data format. After successful endorsement verification, the data packet is officially written into the blockchain ledger, and the first hash value is associated with the on-chain digital twin of the current pet stem cell preparation. In this way, any subsequent queryer can verify whether the manual operation data has been tampered with during storage or transmission by recalculating the hash value of the original manual operation data and comparing it with the first hash value stored on the chain; while digital signatures and digital certificate serial numbers can be used to trace the specific operating agency and operator, realizing trusted evidence storage, accurate location of responsibility and non-repudiation guarantee of the entire process of manual operation.

[0038] In one embodiment, at each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway calculates a digest hash according to a preset time window, and submits the digest hash to the chain after it is signed by the institution node. At each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway performs hash calculation on the IoT-collected data to obtain a second hash value as a digest hash; the IoT-collected data is stored in the institution's local database or authorized off-chain storage system, and the storage path and the start and end timestamps of the time window are recorded; the edge gateway sends the digest hash, storage path, and start and end timestamps of the time window to the corresponding institution node, and the institution node performs digital signature to form a data packet to be endorsed and submits it to the chain for endorsement verification; after the endorsement verification is passed, the digest hash and storage path are written into the blockchain ledger and associated with the current on-chain digital twin of the pet stem cell preparation.

[0039] Specifically, at each stage of the on-chain digital twin, for the large amount of environmental or process parameter data continuously collected by various IoT sensors, the edge gateway deployed on the device side first performs hash calculations on this data according to a preset time window. This time window can be flexibly configured according to business needs, such as every 10 minutes, every hour, or every production batch. Through hash calculation, the edge gateway obtains a fixed-length second hash value, which is the digest hash of all IoT datasets within that time window. Any modification to any original data within that time window will cause the digest hash to change. At the same time, the original massive IoT collection data is not directly uploaded to the blockchain, but is stored in the organization's local database or authorized off-chain storage system (such as a distributed file system or cloud storage), and the storage path of the dataset and the start and end timestamps of the corresponding time window are recorded for subsequent on-demand retrieval. Subsequently, the edge gateway packages the calculated digest hash (second hash value), storage path, and start and end timestamps of the time window and sends them to the corresponding institutional node. The institutional node digitally signs the above information, forming a data packet to be endorsed, and submits it to the endorsement node in the blockchain network for endorsement verification. The endorsing node verifies the validity of the signature and the compliance of the data format. Once confirmed, the endorsement is approved. After successful verification, the smart contract writes the digest hash and storage path to the blockchain ledger and associates this record with the on-chain digital twin of the current pet stem cell preparation. Through this method, the blockchain ledger only stores the unique cryptographic fingerprint (digest hash) of each time window's IoT dataset and its storage location index, while the original data remains off-chain. When verifying the authenticity of a batch of IoT data, the original data is retrieved from off-chain storage according to the storage path, its hash value is recalculated, and compared with the digest hash stored on-chain. If they match, it proves that the original data has not been tampered with since storage; if they do not match, it indicates that the data has been illegally modified. This method ensures the integrity and immutability of massive amounts of IoT data while significantly reducing the storage burden on the blockchain.

[0040] In one embodiment, a state sequence is predefined in a smart contract deployed on the blockchain, and illegal jump blocking logic and precondition verification logic are configured to constrain the on-chain digital twin to only undergo legal state evolution according to the state sequence during its lifecycle, including: Define a sequentially arranged sequence of states in the smart contract deployed on the blockchain. The state sequence should include at least the states of Extracted, Expanding, Frozen, Under Quality Inspection, and Dosing. Configure an illegal jump blocking logic, which only allows transitions from the current state to the next state in the state sequence and rejects any jump or reverse state change requests. Configure a precondition verification logic, which verifies whether the corresponding necessary data record exists on the chain based on the difference between the current state and the target state. When the target state is valid and all preconditions are met, the smart contract executes a state change, updating the current state of the digital twin on the chain to the target state.

[0041] Specifically, firstly, a sequential state sequence is predefined in the smart contract. This sequence strictly adheres to the biological and quality management standards for pet stem cell preparations, from donor collection to clinical use. It includes at least five key states: Extracted, Expanding, Cryopreserved, Under Quality Inspection, and Administered. Extracted indicates that stem cells have been successfully isolated from the donor; Expanding indicates that cells are being cultured and expanded in vitro; Cryopreserved indicates that cells have been cryopreserved according to the prescribed protocol; Under Quality Inspection indicates that the preparation is undergoing various quality tests; and Administered indicates that the preparation has been used for clinical treatment of pets. These five states progress sequentially according to the biological process and cannot be reversed or skipped. Secondly, an illegal jump blocking logic is configured in the smart contract. The core rule of this logic is that for each state currently held by the on-chain digital twin, it is only allowed to initiate a state change request to the next state defined in the state sequence. For example, if the current state is Extracted, it is only allowed to change to Expanding; if the current state is Expanding, it is only allowed to change to Cryopreserved, and so on. Any request attempting a jump or reverse change, regardless of the initiator's permissions, will be unconditionally rejected by the smart contract, and an illegal attempt will be recorded in the blockchain ledger. This rigid blocking mechanism technically eliminates the possibility of process errors, eliminating the need for manual review or offline institutional constraints. Furthermore, precondition verification logic is configured in the smart contract. Unlike the illegal jump blocking logic, which only checks the legality of the state transition, the precondition verification logic further requires that before allowing a state change, it must verify whether the necessary data records corresponding to the state transition already exist on the chain. Specifically, the smart contract dynamically determines the set of data items to be verified based on the difference between the current state and the target state. For example, when a request jumps from "extracted" to "amplified," the smart contract verifies whether the donor information hash, the digital signature of the collection operation, and the genesis block record exist on the chain; when a request jumps from "amplified" to "frozen," it verifies whether the cell passage record, viability count, and culture environment parameter summary hash exist. Only when all necessary data exists and can be queried and verified on the chain will the precondition verification pass. Finally, when the target state is deemed legitimate by the illegal jump blocking logic (i.e., it is exactly the next state in the sequence of the current state), and the precondition verification logic confirms that all necessary data exists on the chain, the smart contract will perform a state change operation, update the current state field of the on-chain digital twin to the target state, and record metadata such as the timestamp of the state change, the trigger hash, and the operator's digital certificate serial number.

[0042] In this embodiment, by predefining state sequences, configuring illegal jump blocking logic and precondition verification logic, the system achieves automated, rigid, and auditable control over the evolution of pet stem cell preparations throughout their entire life cycle. This effectively overcomes the process violation risks caused by reliance on human approval or soft constraints in traditional centralized systems, and significantly improves the compliance and security of biological product traceability and management.

[0043] In one embodiment, the blockchain-based pet stem cell lifecycle traceability method further includes: If any precondition verification fails, the smart contract refuses to change the state, keeps the current state unchanged, generates a verification failure record containing the reason for failure, the batch identifier of the preparation, and a timestamp, writes it to the blockchain ledger, and sends an alarm notification to the relevant party nodes through the event mechanism.

[0044] Specifically, during the execution of precondition verification logic by the smart contract, if any necessary data record is found to be missing or does not meet the requirements—for example, when requesting a transition from extracted to amplified, if the donor information hash or collection operation digital signature cannot be found on the chain; or when requesting a transition from amplified to cryopreserved, if the viability count record or culture environment parameter summary hash is missing—the smart contract determines that the state change request is illegitimate and immediately refuses to execute the state change operation. Simultaneously, to permanently fix this verification failure on the blockchain for subsequent auditing, accountability, or process improvement, the smart contract automatically generates a verification failure record. This record contains at least three core elements: the reason for the failure, the batch identifier of the current pet stem cell preparation, and the timestamp of the verification failure. This record is directly written to the blockchain ledger through the smart contract's internal logic, without relying on external triggers. Because the operation of writing to the blockchain ledger is immutable and has a deterministic temporal order, any subsequent observer can accurately understand at what point in time, for which batch of preparation, and for what reason the state change failed. Furthermore, to enable real-time response to anomalies and prevent operational delays or escalation of quality risks due to information lag, an event mechanism is configured in the smart contract. When a verification failure record is written to the ledger, the smart contract sends an alert notification via the blockchain's event publishing interface to relevant nodes that have pre-subscribed to related notifications (such as the monitoring nodes of the manufacturing institution, the client of the quality manager, and the audit system of the regulatory agency). This alert notification can be delivered via in-chain events or off-chain message pushes, and its content includes at least the batch identifier, the reason for failure, and a timestamp, so that relevant parties are aware of the anomaly immediately and can take manual intervention or process correction measures.

[0045] In one embodiment, depending on the difference between the current state and the target state, verifying whether there are corresponding necessary data records on the verification chain includes: When a request transitions from the extracted state to the amplification state, the verification chain checks for the existence of donor information hashes, digital signatures of the collection operation, and genesis block records for the pet stem cell preparation. When a request transitions from the amplification state to the cryopreserved state, the verification chain checks for the existence of cell passage records, viability counts, and culture environment parameter summary hashes. When a request transitions from the cryopreserved state to the quality inspection state, the verification chain checks for the existence of cryopreservation protocol hashes, cryopreservation tube identifiers, and cryopreservation timestamps. When a request transitions from the quality inspection state to the drug-dosed state, the verification chain checks for the existence of hashes of test results for all mandatory tests, and whether all test result values ​​meet the preset quality standards. When a request transitions from the drug-dosed state to other states, the smart contract directly rejects any state change request.

[0046] Specifically, when a request transitions from the extracted state to the amplification state, the smart contract first verifies the existence of a donor information hash for the pet stem cell preparation on the blockchain. This donor information hash is a summary of the original data, such as the donor's identity, breed, and health screening, anchored in the genesis block, ensuring the preparation's origin is clear and tamper-proof. Secondly, it verifies the existence of a digital signature for the collection operation, i.e., a signature credential used by the authorized institution or individual executing the collection, using their private key to record the collection time, location, and operational procedures. Finally, it verifies the existence of a genesis block record, confirming that the digital twin on the blockchain has been registered in the initial block of the blockchain. Only when all three pieces of data exist in the blockchain ledger and are verifiable will the smart contract allow the transition from the extracted state to the amplification state.

[0047] When a request is made to transition from the amplification state to the cryopreserved state, the smart contract verifies the existence of cell passage records, viability counts, and culture environment parameter digest hashes on the blockchain. Cell passage records include information such as the number of passages, passage time, and batch of culture medium used. Viability counts refer to the measurement results of cell viability before each passage or cryopreservation. The culture environment parameter digest hash is a hash value calculated by the edge gateway based on time windows of environmental data such as temperature and CO2 concentration during the amplification process. Only when all three types of data are stored on the blockchain, indicating that the amplification process is compliant, cell viability meets standards, and the environment is controlled, will the smart contract allow the state transition to the cryopreserved state.

[0048] When a request transitions from the "frozen" state to the "under quality inspection" state, the smart contract verifies the existence of a cryopreservation scheme hash, cryopreservation tube identifier, and cryopreservation timestamp on the blockchain. The cryopreservation scheme hash records a digital digest of the cryoprotectant, cooling procedure, and other methods used; the cryopreservation tube identifier uniquely points to the container code where the batch of formulation is stored; and the cryopreservation timestamp precisely records the completion time of the cryopreservation operation. All three pieces of data are indispensable, proving that the formulation has been properly frozen and has a traceable storage identity before it can enter the quality inspection stage.

[0049] When a request is made to transition from the "In Quality Inspection" state to the "Dosing Received" state, the smart contract performs the most stringent precondition checks. First, it verifies the existence of hashes for the test results of all mandatory tests on the blockchain. Mandatory tests include at least cell viability, sterility testing, mycoplasma testing, and endotoxin testing. Second, it verifies that the value of each test result meets the preset quality standards. Only when the hashes of the test results for all mandatory tests are on the blockchain, and each test value meets the quality standards, does the smart contract allow the transition from the "In Quality Inspection" state to the "Dosing Received" state. Any missing test result or a value exceeding the standard will result in the state change being rejected.

[0050] Finally, when a request is made to transition from the "dosed" state to any other state (such as attempting to revert to quality control or jump to an undefined state), the smart contract directly rejects any state change request. This is because the "dosed" state indicates that the formulation has been used for clinical treatment in the pet, its lifecycle has ended, and no further state changes should occur.

[0051] In this embodiment, through the above-mentioned refined precondition verification for different transition scenarios, it is ensured that every key link of the pet stem cell preparation from extraction to administration is based on complete and compliant data records. Any missing or abnormal link will be automatically intercepted during the state transition stage, thereby achieving rigid quality control throughout the entire process.

[0052] The above are all preferred embodiments of this application, and are not intended to limit the scope of protection of this application. Therefore, all equivalent changes made in accordance with the structure, shape and principle of this application should be covered within the scope of protection of this application.

Claims

1. A blockchain-based method for tracing the entire lifecycle of pet stem cells, characterized in that, include: Generate a globally unique batch identifier for the pet stem cell preparation and anchor the donor information and digital signature of the collection operation in the genesis block to establish an on-chain digital twin of the pet stem cell preparation on the blockchain. In smart contracts deployed on the blockchain, a state sequence is predefined, and illegal jump blocking logic and precondition verification logic are configured to constrain the on-chain digital twin to only undergo legal state evolution according to the state sequence during its life cycle. At each state stage of the on-chain digital twin, the generated manual operation data and IoT collected data are submitted to the chain after being signed by the institutional node and hashed by edge computing digest, and an abnormal event is triggered to be uploaded to the chain when the data exceeds a preset threshold. In response to a traceability request carrying a digital certificate, the role attributes in the digital certificate are parsed, and the corresponding traceability data is obtained from the blockchain ledger and authorized off-chain storage according to the role permissions, so as to complete the hierarchical traceability of the entire trusted history of the on-chain digital twin.

2. The method for tracing the entire life cycle of pet stem cells based on blockchain according to claim 1, characterized in that, The step of responding to a traceability request carrying a digital certificate, parsing the role attributes in the digital certificate, and obtaining the corresponding traceability data from the blockchain ledger and authorized off-chain storage according to role permissions includes: Receive a traceability request carrying a digital certificate, which is issued by a member service provider of a permissioned blockchain network and contains predefined role attributes in the body field of the digital certificate; The smart contract's data access control interface is invoked to parse the role attributes in the digital certificate and determine the queryer's data access permission level based on the role attributes. Based on the determined data access permission level, the corresponding level of structured traceability data is obtained from the blockchain ledger, and detailed data is obtained from off-chain storage through the authorization token generated by the smart contract when the permissions permit. The structured traceability data obtained from the blockchain ledger and the detailed data obtained from off-chain storage are assembled into a hierarchical traceability view with evidence hashes according to the timeline template, and the hierarchical traceability view is returned as the query result.

3. The method for tracing the entire life cycle of pet stem cells based on blockchain according to claim 2, characterized in that, The role attributes include at least one of the following: pet owner, veterinarian, or regulatory agency. When the role attribute is the pet owner, the data access permission level is the first level, which only allows access to the timeline status node information of the on-chain digital twin and the corresponding evidence hash of the status change. When the role attribute is the attending veterinarian, the data access permission level is the second level, which allows access to all information of the first level and the pass / fail status of key quality inspection indicators stored on the chain, and to obtain temporary access credentials for the detailed quality inspection report hash in the off-chain storage. When the role attribute is the regulatory agency, the data access permission level is the third level, which allows access to all information of the second level, as well as the original IoT data hash of each state stage stored on the chain, the operator's digital certificate serial number, all endorsement signature details, and permanent access authorization to the full amount of original data in off-chain storage.

4. The method for tracing the entire life cycle of pet stem cells based on blockchain according to claim 1, characterized in that, In each state stage of the on-chain digital twin, the generated manual operation data and IoT-collected data are submitted to the chain after being signed by the institution node and hashed by edge computing digests, and the abnormal event is triggered to be uploaded to the chain when the data exceeds a preset threshold, including: In each state stage of the on-chain digital twin, for manually manipulated data, the corresponding institutional node performs hash calculations and digital signatures before submitting it to the chain; In each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway calculates a digest hash according to a preset time window, and submits the digest hash to the chain after it is signed by the institutional node. The smart contract has built-in security thresholds for each IoT parameter. When any IoT parameter exceeds the corresponding security threshold, an abnormal event record is generated and written into the blockchain ledger, and associated with the on-chain digital twin of the current pet stem cell preparation. After the abnormal event is written, the smart contract prevents the on-chain digital twin from transitioning to the next state.

5. A blockchain-based method for tracing the entire lifecycle of pet stem cells according to claim 4, characterized in that, In each state stage of the on-chain digital twin, for manually manipulated data, the corresponding institutional node performs hash calculations and digital signatures before submitting it to the chain, including: In each state stage of the on-chain digital twin, for manually operated data, the corresponding institutional node performs hash calculation on the manually operated data to obtain the first hash value; The first hash value and the timestamp of the current operation are digitally signed using the private key of the institution node to form signature data; The manual operation data, the first hash value, the signature data, the batch identifier, and the operator's digital certificate serial number are assembled, and the assembled data is submitted to a preset endorsement node in the blockchain network for endorsement verification. After the endorsement verification is passed, the assembled data is written into the blockchain ledger, and the first hash value is associated with the on-chain digital twin of the current pet stem cell preparation.

6. The method for tracing the entire life cycle of pet stem cells based on blockchain according to claim 4, characterized in that, In each state stage of the on-chain digital twin, for IoT-collected data, the edge gateway calculates a digest hash according to a preset time window, and submits the digest hash to the chain after being signed by the institution node. At each state stage of the on-chain digital twin, for IoT-collected data, the IoT-collected data is hashed through the edge gateway to obtain a second hash value as a digest hash; The IoT-collected data is stored in the organization's local database or an authorized off-chain storage system, and the storage path and the start and end timestamps of the time window are recorded. The edge gateway sends the digest hash, the storage path, and the start and end timestamps of the time window to the corresponding institution node, which then performs digital signature to form a data packet to be endorsed and submits it to the blockchain for endorsement verification. After the endorsement verification is passed, the digest hash and the storage path are written into the blockchain ledger and associated with the on-chain digital twin of the current pet stem cell preparation.

7. The method for tracing the entire life cycle of pet stem cells based on blockchain according to claim 1, characterized in that, The predefined state sequence in the smart contract deployed on the blockchain, along with the configuration of illegal jump blocking logic and precondition verification logic, is used to constrain the on-chain digital twin to only undergo legal state evolution according to the state sequence during its lifecycle. In a smart contract deployed on a blockchain, a sequentially ordered sequence of states is defined, which includes at least the states of extracted, amplified, frozen, under quality inspection, and administered. Configure illegal jump blocking logic, which only allows transitions from the current state to the next state in the state sequence, and rejects any jump or reverse state change requests; Configure precondition verification logic, which verifies whether there are corresponding necessary data records on the chain based on the difference between the current state and the target state. When the target state is valid and all prerequisites are met, the smart contract execution state changes, updating the current state of the on-chain digital twin to the target state.

8. A blockchain-based method for tracing the entire lifecycle of pet stem cells according to claim 7, characterized in that, Also includes: If any precondition verification fails, the smart contract refuses to change the state, keeps the current state unchanged, generates a verification failure record containing the reason for failure, the batch identifier of the preparation, and a timestamp, writes it to the blockchain ledger, and sends an alarm notification to the relevant party nodes through the event mechanism.

9. A blockchain-based method for tracing the entire lifecycle of pet stem cells according to claim 7, characterized in that, The step of verifying whether there are corresponding necessary data records on the verification chain based on the difference between the current state and the target state includes: When a request transitions from the extracted state to the amplification state, the presence of the donor information hash, the digital signature of the collection operation, and the genesis block record of the pet stem cell preparation on the verification chain is checked. When a request transitions from the amplification state to the cryopreserved state, check whether there are cell passage records, viability counts, and culture environment parameter summary hashes on the check chain; When a request transitions from the frozen state to the quality inspection state, the verification chain checks whether the frozen scheme hash, frozen management identifier, and frozen timestamp exist. When a request transitions from the quality inspection state to the drug administration state, the verification chain checks whether there are hashes of the test results for all mandatory items and whether all test result values ​​meet the preset quality standards. When a request is made to transition from a drug-doped state to another state, the smart contract directly rejects any state change request.

Images