CN118656838A - Digital business system management method, platform, equipment and medium for distributed system - Google Patents

Abstract

The present invention discloses a digital business system management method, platform, equipment and medium of a distributed system. A trusted device generation node is arranged on the blockchain to generate an exclusive trusted device for the user, and the trusted device issues a digital identity to the user; the trusted device generates a corresponding service closed-loop chain in response to the digital business demand sent by the user; the trusted device links the service closed-loop chain to trigger a smart contract, so that the digital business service node corresponding to the service closed-loop chain executes the digital business demand in coordination with the smart contract, obtains the execution result and stores it on the digital business storage node; the blockchain responds to the user's read request to read the execution result from the digital business storage node. The distributed system digital business system management method provided by the embodiment of the present invention can break through the island phenomenon between digital business service nodes, realize collaborative operation, simplify the operation process, improve operation efficiency, legally authorize access, and improve data security.

Description

Digital business system management method, platform, equipment and medium for distributed system

Technical Field

The present invention relates to the technical field of digital business management, and in particular to a distributed digital business system management method, platform, device and medium.

Background Art

As the exclusive digital business development space for natural persons, legal persons, and institutions, the digital business system is the basis for the realization of digital business. However, each digital business system is independent of each other and cannot communicate and interact with each other, resulting in the existence of isolated islands between different digital business systems. It is not possible to complete all digital business at one time, and multiple operations need to be repeated. In addition, the user identity attribute information required for each digital business is different, resulting in users having to submit identity attribute information multiple times for different digital business needs.

In order to ensure the security of digital business data, applicants are generally required to undergo strict and complex verification, which makes the operation of digital business cumbersome, places certain requirements on the professionalism of operators, and has low operating efficiency, which cannot meet the rapid development of digital business.

It can be seen that how to solve the island phenomenon between existing digital business systems, and how to simplify the digital business operation process and improve the efficiency of digital business operations while ensuring data security have become technical problems that technical personnel in this field need to solve urgently.

Summary of the invention

The present invention provides a distributed digital business system management method, platform, device and medium to solve the island phenomenon between existing digital business systems, as well as the technical problem of how to simplify the digital business operation process and improve the digital business operation efficiency under the premise of ensuring data security, so as to achieve collaborative operation between different digital business systems, complete multiple digital businesses at one time, and ensure the safety and reliability of operation data.

In a first aspect, the present invention provides a digital business system management method of a distributed system, wherein the digital business system includes a digital business service node, a trusted device generation node, a digital business storage node and a smart contract arranged on a blockchain, and the method includes:

The trusted device generation node generates a dedicated trusted device for the user in response to the trusted device generation request of the user, and the dedicated trusted device issues a corresponding digital identity to the user;

The dedicated trusted device responds to the digital service demand sent by the user to generate a corresponding service closed-loop chain according to the digital service demand; the service closed-loop chain includes all digital service service nodes involved in the digital service demand;

The trusted device links the service closed-loop chain to the chain and triggers the smart contract, so that the digital business service nodes included in the service closed-loop chain collaboratively execute the digital business requirements according to the smart contract, obtain the execution results and store them on the digital business storage nodes based on the corresponding digital identity identifiers;

The blockchain responds to the user's read request to read the execution result from the digital business storage node.

Preferably, the trusted device issues a corresponding digital identity to the user, including:

Generate corresponding public and private keys using an asymmetric cryptographic algorithm built into the trusted device;

A corresponding digital identity is generated based on the identity attribute information of the user, and a first hash fingerprint is obtained after a hash operation is performed on the digital identity. A corresponding mapping relationship is established between the first hash fingerprint and the public key and then uploaded to the blockchain. The identity attribute information includes but is not limited to an identity card number, a business license, and an ID under a characteristic environment.

Preferably, the dedicated trusted device responds to the digital service demand sent by the user to generate a corresponding service closed-loop chain according to the digital service demand, including:

The dedicated trusted device identifies the received digital service demand and the identity attribute information to determine whether it is sent by the user corresponding to the trusted device;

After the identification is passed, the dedicated trusted device analyzes the digital service demand to obtain all digital service service nodes involved in the digital service demand;

Reading corresponding digital service operation requirements from all the digital service service nodes involved, and analyzing the digital service operation requirements to generate a digital service operation tree structure diagram;

Corresponding association relationships are established among all the digital business service nodes involved according to the digital business operation tree structure diagram to generate a service closed-loop chain.

Preferably, the step of analyzing the digital service operation requirements to generate a digital service operation tree structure diagram includes:

If the digital service operation requirement of one of the digital service nodes involved is: based on the execution result of another digital service node involved, a hierarchical association relationship is established between the two digital service nodes involved, and the hierarchical association relationship is that the two digital service nodes involved are executed in sequence;

If the digital service operation requirement of one of the digital service nodes involved is: not depending on the execution results of other digital service nodes involved, the corresponding digital service node can establish a synchronous association relationship with any other digital service node involved, and the synchronous association relationship is that the two digital service nodes involved are executed synchronously;

If the digital business operation requirement of one of the digital business service nodes involved is: the execution result of another digital business service node involved is displayed on the same interface, then a connectivity relationship is established between the two digital business service nodes involved, and the connectivity relationship is that the execution results of the two digital business service nodes involved are displayed on the same interface.

Preferably, the smart contract is:

The digital service service nodes involved in the service closed-loop chain execute the digital service requirements according to the digital service operation tree structure diagram.

Preferably, obtaining the execution result and storing it in the digital service storage node includes:

Encrypting the execution result using the public key to obtain a ciphertext of the execution result;

A mapping relationship is established between the execution result ciphertext and the corresponding first hash fingerprint and then stored in the digital service storage node.

Preferably, the blockchain responds to the user's read request to read the execution result from the digital business storage node, including:

The blockchain receives the digital identity sent by the user through the trusted device and performs a hash operation to obtain a second hash fingerprint, compares the second hash fingerprint with the first hash fingerprint stored on the blockchain, and reads the execution result ciphertext corresponding to the first hash fingerprint from the blockchain after the comparison is successful;

The private key is used to decrypt the execution result ciphertext to obtain the execution result.

In a second aspect, the present invention further provides a distributed digital business system management platform, which implements the distributed digital business system management method described above, wherein the system comprises: an identity certificate issuing unit, an identity certificate verification unit, and an entity digital certificate generating unit;

The trusted device generation unit is used for the trusted device generation node to generate a dedicated trusted device for the user in response to a trusted device generation request of the user, and the dedicated trusted device issues a corresponding digital identity to the user;

The service closed-loop chain generating unit is used for the dedicated trusted device to respond to the digital service demand sent by the user to generate a corresponding service closed-loop chain according to the digital service demand; the service closed-loop chain includes all digital service service nodes involved in the digital service demand;

The digital service demand execution unit is used for the trusted device to put the service closed-loop chain on the chain and trigger the smart contract, so that the digital service nodes included in the service closed-loop chain can collaboratively execute the digital service demand according to the smart contract, obtain the execution result and store it on the digital service storage node based on the corresponding digital identity;

The execution result reading unit is used for the blockchain to respond to the user's read request to read the execution result from the digital business storage node.

In a third aspect, the present invention also provides a computer device, comprising a memory, a processor and a transceiver, which are connected via a bus; the memory is used to store a set of computer program instructions and data, and transmit the stored data to the processor, and the processor executes the program instructions stored in the memory to execute the digital business system management method of the distributed system described above.

In a fourth aspect, the present invention further provides a computer-readable storage medium, wherein a computer program is stored in the computer-readable storage medium, and when the computer program is executed, the above-mentioned distributed system digital business system management method is implemented.

The present invention provides a distributed digital business system management method, platform, device and medium. Compared with the prior art, the beneficial effects of the embodiments of the present invention are at least one of the following:

(1) By generating a user-specific trusted device, issuing a digital identity to the user, and verifying and controlling access to the user who accesses the trusted device, we ensure legal and authorized access to the digital business system;

(2) The trusted device generates a corresponding service closed-loop chain according to the digital business requirements, so as to associate the digital business service nodes involved in the digital business requirements with the business processes. Each digital business service node can not only independently complete the digital business operations, but also collaborate with other digital business service nodes, thus breaking through the isolated island phenomenon between different digital business service nodes.

(3) Trusted devices link service closed loops to the chain to trigger smart contracts, so as to collaboratively execute digital business needs, simplify digital business operation processes, and improve digital business operation efficiency;

(4) The execution results are stored on the blockchain. After the user completes identity verification through a trusted device, the execution results are searched using the hash fingerprint as the address to ensure data security.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG1 is a schematic diagram of steps of a digital business system management method of a distributed system provided by a preferred embodiment of the present invention;

FIG2 is a schematic diagram of the steps of a method for issuing a digital identity provided by a preferred embodiment of the present invention;

3 is a schematic diagram of the steps of generating rules for a service closed-loop chain provided by a preferred embodiment of the present invention;

FIG4 is a schematic diagram of the steps of generating a rule for a tree structure diagram of a digital business operation provided by a preferred embodiment of the present invention;

FIG5 is a tree structure diagram of a digital service operation provided by a preferred embodiment of the present invention;

6 is a schematic diagram of the steps of a method for storing execution results on a digital service storage node provided by a preferred embodiment of the present invention;

FIG7 is a schematic diagram of the steps of a method for reading an execution result from a digital business storage node on a blockchain provided by a preferred embodiment of the present invention;

FIG8 is a schematic diagram of the structure of a digital business system management platform of a distributed system provided by a preferred embodiment of the present invention;

FIG. 9 is a schematic diagram of a computer device provided by a preferred embodiment of the present invention.

DETAILED DESCRIPTION

The following is a detailed explanation of the implementation mode of the present invention in conjunction with the accompanying drawings. The embodiments are provided only for illustrative purposes and cannot be understood as limiting the present invention. The accompanying drawings are only for reference and illustration purposes and do not constitute a limitation on the scope of patent protection of the present invention. Based on the embodiments in the present invention, all other embodiments obtained by ordinary technicians in this field without making creative work are within the scope of protection of the present invention. In the description of the present invention, the terms "first", "second", "third", etc. are only used for descriptive purposes and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first", "second", "third", etc. may explicitly or implicitly include one or more of the features. In the description of the present invention, unless otherwise specified, the meaning of "multiple" is two or more.

In the description of the present invention, it should be noted that, unless otherwise clearly specified and limited, the terms "installed", "connected" and "connected" should be understood in a broad sense. For example, it can be a fixed connection, a detachable connection, or an integral connection; it can be a mechanical connection or an electrical connection; it can be a direct connection, or it can be indirectly connected through an intermediate medium, or it can be a connection between the two elements. The terms "vertical", "horizontal", "left", "right", "upper", "lower" and similar expressions used herein are only for illustrative purposes, and do not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation, and therefore cannot be understood as a limitation on the present invention. The term "and/or" used herein includes any and all combinations of one or more related listed items. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood according to specific circumstances.

In the description of the present invention, it should be noted that, unless otherwise defined, all technical and scientific terms used in the present invention have the same meaning as those commonly understood by those skilled in the art. The terms used in the specification of the present invention are only for the purpose of describing specific embodiments and are not intended to limit the present invention. For those of ordinary skill in the art, the specific meanings of the above terms in the present invention can be understood by specific circumstances.

Referring to FIG. 1 , in an embodiment of the present invention, a distributed digital business system management method is provided, wherein the digital business system includes a digital business service node, a trusted device generation node, a digital business storage node and a smart contract arranged on a blockchain, and the method includes:

S1. The trusted device generation node generates an exclusive trusted device for the user in response to a trusted device generation request from the user, and the exclusive trusted device issues a corresponding digital identity to the user.

S2. The trusted device responds to the digital service demand sent by the user to generate a corresponding service closed-loop chain according to the digital service demand; the service closed-loop chain includes all digital service service nodes involved in the digital service demand.

S3. The trusted device puts the service closed-loop chain on the chain and triggers the smart contract, so that the digital business service nodes included in the service closed-loop chain collaboratively execute the digital business requirements according to the smart contract, obtain the execution results and store them on the digital business storage nodes based on the corresponding digital identity.

S4. The blockchain responds to the user's read request to read the execution result from the digital business storage node.

Blockchain is a decentralized distributed ledger that is tamper-proof, secure and reliable. It combines distributed storage, peer-to-peer transmission, consensus mechanism, cryptography and other technologies. It records transactions and information through a growing data block chain (Blocks) to ensure the security and transparency of data. The digital business system provided in the preferred embodiment of the present invention is built based on blockchain technology. Specifically, the institutions, units, enterprises and/or individuals that provide digital business services are arranged on the blockchain as digital business service nodes. For the storage of digital business, distributed storage is used to form digital business storage nodes of the blockchain. A trusted device generation node is also arranged on the blockchain. The trusted device generation node is mainly used to generate a trusted device and chain the trusted device on the blockchain.

In a preferred embodiment of the present invention, the trusted device may be, but is not limited to, a single-chip microcomputer or smart card chip with digital identity generation, password lock function, data analysis and judgment function, or a dedicated link that uses a terminal device to realize digital identity generation, password lock function, data analysis and judgment function. If the trusted device is a built-in single-chip microcomputer or smart card chip, the single-chip microcomputer or smart card chip has a storage space with built-in algorithms and programs. The algorithms or programs can be used to issue corresponding digital identities to users and process digital business needs. If it is a dedicated link, the dedicated storage space can be accessed through the dedicated link. The storage space also has built-in algorithms and programs. The algorithms or programs can also be used to issue corresponding digital identities to users and process digital business needs.

Whether it is a trusted device in the form of a single-chip microcomputer or a smart card chip, or a trusted device in the form of a dedicated link, its storage space includes user space and built-in space. In terms of data access, programs in the built-in space can access data in the built-in space and data in the user space, and programs in the user space can only access data in the user space, and cannot access data and programs in the built-in space. User space storage is only used for the user's identity attribute information, such as identity card number, business license, and basic information such as ID in a specific environment. Identity attribute information can be maintained by the user. The built-in space stores and processes authentication key data that cannot be tampered with, stolen or leaked, digital business operation requirements maintained by digital business service nodes that cannot be tampered with, and algorithms and programs that cannot be leaked. Specifically, the algorithms and programs in the built-in space of the trusted device in this embodiment include a digital identity certificate issuance program, a service closed-loop chain generation program, an elliptic encryption algorithm for asymmetric encryption, a secure hash algorithm applicable to digital signature standards, and the like.

In a preferred embodiment of the present invention, when applying for a digital service, the user does not apply directly to the digital service service node, but first sends a trusted device generation request to the trusted device generation node, and the trusted device generation node generates an exclusive trusted device for the user. In the present invention, the trusted device is taken as an example for explanation as an exclusive link. The user enters the exclusive storage space through the trusted link and maintains identity attribute information in the storage space, such as identity card number, business license, and ID in a specific environment. Activate the identity credential issuance program to issue the corresponding digital identity to the user. As shown in Figure 2, the trusted device issues the corresponding digital identity to the user, including the following steps:

S101. Generate corresponding public and private keys using an asymmetric cryptographic algorithm built into the trusted device.

In the global generation phase of the trusted device, an asymmetric elliptic encryption algorithm is used to generate a public key and a private key that are exclusive to the trusted device.

S102. Generate a corresponding digital identity based on the identity attribute information of the user, perform a hash operation on the digital identity to obtain a first hash fingerprint, establish a corresponding mapping relationship between the first hash fingerprint and the public key, and then upload them to the blockchain. The identity attribute information includes but is not limited to an identity card number, a business license, and an ID under a characteristic environment.

The user's identity attribute information and randomly generated character string form the user's digital identity. The randomly generated character string can refer to the password generation mechanism, for example: an 8-bit character string composed of uppercase and lowercase letters, numbers and special characters. The digital identity is hashed to obtain the corresponding first hash fingerprint. The digital identity is transmitted and stored in the form of hash fingerprint, and the addressing can not only ensure the security of data transmission, but also complete the comparison of digital identity by comparing hash fingerprints, thereby improving the efficiency of identity recognition.

Furthermore, after establishing a corresponding mapping relationship between the first hash fingerprint and the public key, the fingerprint is uploaded to the blockchain and stored on the corresponding digital business storage node, and other nodes on the blockchain store the fingerprint synchronously.

In a preferred embodiment of the present invention, the trusted device acts as a bridge between the user and the blockchain. When receiving a digital service demand sent by the user, the trusted device generates a corresponding service closed-loop chain according to the digital service demand, as shown in FIG3 , including the following steps:

S201. The dedicated trusted device identifies the received digital service demand and the digital identity to determine whether they are sent by the user corresponding to the trusted device.

In a preferred embodiment of the present invention, each user has a dedicated trusted device, and the user space in the trusted device stores the user's identity attribute information. The user sends the user's digital service requirements and identity attribute information to the trusted device to request a digital service operation. Based on the identity attribute information, the trusted device can identify whether the request is sent by the user who is dedicated to the trusted device. The trusted device and the user are bound by a one-to-one mapping relationship to improve the security of trusted device access and ensure legal and authorized access to the digital service system.

S202: After the identification is successful, the dedicated trusted device analyzes the digital service demand to obtain all digital service service nodes involved in the digital service demand.

In a preferred embodiment of the present invention, after the identification is passed, the service closed-loop chain generation program of the trusted device is activated, and the digital service demand is first analyzed to obtain the digital service service node involved in executing the digital service demand. The digital service service node involved in executing the digital service demand can be obtained by the following method: establishing a digital service demand and digital service node mapping database, and searching the digital service demand and digital service node mapping database with the received digital service demand to obtain all the digital service service nodes involved in the digital service demand.

S203: Read corresponding digital service operation requirements from all the digital service service nodes involved, analyze the digital service operation requirements, and generate a digital service operation tree structure diagram.

In a preferred embodiment of the present invention, the trusted device queries the blockchain based on all the digital business service nodes involved in the obtained digital business requirements, so as to read the digital business operation requirements corresponding to each digital business service node from all the digital business service nodes involved in the digital business requirements. The digital business operation requirements at least include: the information required for the digital business handling, whether it is necessary to be based on the execution results of other digital business service nodes, and whether it can be combined with the execution results of other digital business service nodes. The above digital business operations are analyzed to generate a digital business operation tree structure diagram, as shown in Figure 4, including the following steps:

S2031. If the digital service operation requirement of one of the digital service nodes involved is: based on the execution result of another digital service node involved, a hierarchical association relationship is established between the two digital service nodes involved, and the hierarchical association relationship is executed in sequence.

As shown in FIG5 , the execution of the digital business service node B must be based on the execution result of the digital business service node A, so a hierarchical association relationship is established between the digital business service node A and the digital business service node B, that is, the digital business service node A is executed first and the digital business service node B is executed later.

S2032. If the digital service operation requirement of one of the digital service nodes involved is: not depending on the execution results of other digital service nodes involved, the corresponding digital service node can establish a synchronous association relationship with any other digital service node involved, and the synchronous association relationship is synchronous execution.

As shown in Figure 5, neither the digital business service node C nor the digital business service node D needs to be based on the execution results of any other involved digital business service node. Therefore, the execution order of the digital business service node D of the digital business service node C is not constrained, and a synchronous association relationship can be established with any other involved digital business service node to execute synchronously with any other involved digital business service node.

S2033. If the digital business operation requirement of one of the digital business service nodes involved is: the execution result of another digital business service node involved is displayed on the same interface, a connectivity relationship is established between the two digital business service nodes involved, and the connectivity relationship is that the execution results of the two digital business service nodes involved are displayed on the same interface.

As shown in Figure 5, digital business service node A and digital business service node B are in a hierarchical association relationship. If digital business service node A and digital business service node B use the same execution form, it indicates that the execution results of digital business service node A and digital business service node B meet the conditions for combined display, and their execution results can be displayed on the same interface, then a connection relationship is established between digital business service node A and digital business service node B. In the tree structure diagram of digital business handling, a dotted arrow different from a solid arrow can be used to indicate that there is a connection relationship between two digital business service nodes. If the execution results of digital business service node C and digital business service node D also meet the conditions for combined display, and their execution results can be displayed on the same interface, then a connection relationship is established between digital business service node C and digital business service node D.

The digital business service nodes involved in the digital business needs are associated in a certain execution order in the form of a digital business operation tree structure diagram, forming an interconnected and complete digital business execution closed-loop chain to make the execution of digital business more efficient.

S204: Establish corresponding association relationships among all the digital business service nodes involved according to the digital business handling tree structure diagram to generate a service closed-loop chain.

In a preferred embodiment of the present invention, all involved digital business service nodes are associated according to a digital business operation tree structure diagram to generate a service closed-loop chain. According to the service closed-loop chain, all digital services involved in the digital business requirements can be executed in sequence, simplifying the digital business execution process and improving the efficiency of digital business execution.

After the service closed-loop chain is generated, the trusted device uploads the service closed-loop chain to the blockchain and triggers the smart contract arranged on the blockchain, so that the digital business service nodes corresponding to the service closed-loop chain can collaboratively execute the digital business requirements according to the smart contract. In a preferred embodiment of the present invention, the smart contract is configured as follows: the digital business service nodes involved in the service closed-loop chain execute the digital business requirements according to the digital business handling tree structure diagram. The digital business handling tree structure diagram is a complete flowchart of the execution of digital business requirements, so the digital business service nodes involved in the service closed-loop chain only need to execute the relevant steps according to the digital business handling tree structure diagram to obtain the final execution result of the digital business requirements.

In a preferred embodiment of the present invention, the final execution result is stored in a digital service storage node, as shown in FIG6 , including the following steps:

S301. Use the public key to encrypt the execution result to obtain a ciphertext of the execution result.

S302: Establish a mapping relationship between the execution result ciphertext and the corresponding first hash fingerprint and store them in the digital service storage node.

After the digital business service node involved executes the digital business demand and obtains the execution result, the execution result is encrypted according to the public key of the corresponding trusted device on the blockchain to obtain the execution result ciphertext. The execution result ciphertext and the corresponding first hash fingerprint are also mapped and stored on the digital business storage node. It is only necessary to feedback the completion of the execution of the digital business demand to the user through the trusted device, such as the execution is completed. If the user needs to download the execution result, it is necessary to send a read request to the blockchain through the trusted device to read the execution result from the digital business storage node on the blockchain, as shown in Figure 7, including the following steps:

S401. The blockchain receives the digital identity sent by the user through the trusted device and performs a hash operation to obtain a second hash fingerprint, compares the second hash fingerprint with the first hash fingerprint stored on the blockchain, and reads the execution result ciphertext corresponding to the first hash fingerprint from the blockchain after the comparison is successful.

S402: Decrypt the execution result ciphertext using the private key to obtain the execution result.

Because the execution of digital business needs often cannot provide immediate feedback on the execution results, in order to avoid the execution results being stored in a trusted device and leaked, the preferred embodiment of the present invention does not adopt the conventional method of sending the execution results directly to the trusted device and returning them to the user by the trusted device, but adopts the method of storing the execution results in the digital business storage node of the blockchain, which the user can download only after the verification is completed. The user sends the digital identity to the blockchain through the trusted device, and the blockchain performs a hash operation on the digital identity to obtain the corresponding second hash fingerprint. The second hash fingerprint is used to find the first hash fingerprint stored on the blockchain to read the execution result ciphertext stored in the mapping with the first hash fingerprint, and the execution result ciphertext is decrypted using the private key stored in the trusted device exclusive to the user to obtain the execution result. For the download of the execution result, the hash fingerprint is used for addressing, and the user's exclusive private key is used for decryption to ensure the security of the data.

In a preferred embodiment of the present invention, a trusted device generation node is arranged on the blockchain to respond to the user's trusted device generation request, and a dedicated trusted device is generated for the user. The dedicated trusted device can issue a digital identity for the user, verify and control the access of the user who accesses the trusted device, and ensure the legal authorized access of the digital business system. The trusted device responds to the digital business requirements sent by the user, generates a corresponding service closed-loop chain according to the digital business requirements, and associates the digital business service nodes involved in the digital business requirements with the business process. Each digital business service node can not only independently complete the operation of the digital business, but also can cooperate with other digital business service nodes to break the island phenomenon between different digital business service nodes. The trusted device links the service closed-loop chain to trigger the smart contract, so that the digital business service nodes corresponding to the service closed-loop chain can cooperate to execute the digital business requirements according to the smart contract, simplify the digital business operation process, and improve the digital business operation efficiency. The execution results are stored on the blockchain, and after the user completes the identity verification through the trusted device, the execution results are searched with the hash fingerprint as the address to ensure the security of the data.

Accordingly, as shown in FIG8 , based on a distributed digital business system management method, an embodiment of the present invention further provides a distributed digital business system management platform, which implements the distributed digital business system management method disclosed in the embodiment of the present invention, including: a trusted device generation unit 1, a service closed-loop chain generation unit 2, a digital business demand execution unit 3, and an execution result reading unit 4;

The trusted device generation unit 1 is used for the trusted device generation node to generate an exclusive trusted device for the user in response to a trusted device generation request of the user, and the exclusive trusted device issues a corresponding digital identity to the user.

The service closed-loop chain generation unit 2 is used for the exclusive trusted device to respond to the digital service requirements sent by the user to generate a corresponding service closed-loop chain according to the digital service requirements of the user; the service closed-loop chain includes all digital service service nodes involved in the digital service requirements.

The digital business demand execution unit 3 is used by the trusted device to put the service closed-loop chain on the chain and trigger the smart contract, so that the digital business service nodes included in the service closed-loop chain can collaboratively execute the digital business demand according to the smart contract, obtain the execution result and store it on the digital business storage node based on the corresponding digital identity.

The execution result reading unit 4 is used for the blockchain to respond to the user's read request to read the execution result from the digital business storage node.

For the specific definition of a digital business system management platform for a distributed system, please refer to the above-mentioned definition of a digital business system management method for a distributed system, which will not be repeated here. A person of ordinary skill in the art will appreciate that the various modules and steps described in conjunction with the embodiments disclosed in the present invention can be implemented in hardware, software, or a combination of both. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present invention.

As shown in FIG9 , a computer device provided by an embodiment of the present invention includes a processor, a memory, and a computer program stored in the memory and configured to be executed by the processor. When the processor executes the computer program, the steps in the above-mentioned blockchain-based entity digital credential generation method embodiment are implemented, such as steps S1 to S4 described in FIG1 .

Those skilled in the art will appreciate that the schematic diagram 9 is merely an example of a computer device and does not constitute a limitation on the computer device. The computer device may include more or fewer components than shown in the diagram, or a combination of certain components, or different components. For example, the computer device may also include input and output devices, network access devices, buses, etc.

The processor may be a central processing unit (CPU), or other general-purpose processors, digital signal processors (DSP), application-specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor or any conventional processor, etc. The processor is the control center of the computer device, and uses various interfaces and lines to connect various parts of the entire computer device.

The memory can be used to store the computer program and/or module, and the processor realizes various functions of the computer device by running or executing the computer program and/or module stored in the memory, and calling the data stored in the memory. The memory can mainly include a program storage area and a data storage area, wherein the program storage area can store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area can store data created according to the use of the mobile phone (such as audio data, a phone book, etc.), etc. In addition, the memory can include a high-speed random access memory, and can also include a non-volatile memory, such as a hard disk, a memory, a plug-in hard disk, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, a flash card (Flash Card), at least one disk storage device, a flash memory device, or other volatile solid-state storage devices.

Wherein, if the module integrated in the computer device is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the present invention implements all or part of the processes in the above-mentioned embodiment method, and can also be completed by instructing the relevant hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer program can implement the steps of the above-mentioned various method embodiments when executed by the processor. Wherein, the computer program includes computer program code, and the computer program code can be in source code form, object code form, executable file or some intermediate form, etc. The computer-readable medium can include: any entity or device capable of carrying the computer program code, recording medium, U disk, mobile hard disk, disk, optical disk, computer memory, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), electric carrier signal, telecommunication signal and software distribution medium, etc.

Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

Accordingly, an embodiment of the present invention provides a computer-readable storage medium, which includes a stored computer program, wherein when the computer program is running, the device where the computer-readable storage medium is located is controlled to execute the steps in the blockchain-based entity digital certificate generation method of the above embodiment, such as steps S1 to S4 described in Figure 1.

A distributed digital business system management method, platform, computer device and storage medium provided in this embodiment are aimed at the island phenomenon between existing digital business systems, and the technical problem of how to simplify the digital business operation process and improve the digital business operation efficiency under the premise of ensuring data security. The present invention arranges a trusted device generation node on the blockchain to respond to the user's trusted device generation request, generate a dedicated trusted device for the user, and the dedicated trusted device can issue a digital identity for the user, verify and control the user who accesses the trusted device, and ensure the legal authorized access to the digital business system. The trusted device responds to the digital business requirements sent by the user, generates a corresponding service closed-loop chain according to the digital business requirements, and associates the digital business service nodes involved in the digital business requirements with the business process. Each digital business service node can not only independently complete the digital business operation, but also can work in collaboration with other digital business service nodes, breaking through the island phenomenon between different digital business service nodes. The trusted device links the service closed-loop chain to trigger the smart contract, so that the digital business service nodes corresponding to the service closed-loop chain can collaboratively execute the digital business requirements according to the smart contract, so as to simplify the digital business operation process and improve the digital business operation efficiency. The execution results are stored on the blockchain. After the user completes identity verification through a trusted device, the execution results are searched using the hash fingerprint as the address to ensure data security.

The above-mentioned embodiments only express several preferred implementation modes of the present invention, and the description thereof is relatively specific and detailed, but it cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for ordinary technicians in this technical field, several improvements and substitutions can be made without departing from the technical principle of the present invention, and these improvements and substitutions should also be regarded as the protection scope of the present invention. Therefore, the protection scope of the patent of the present invention shall be based on the protection scope of the claims.

Claims (10)

1. A digital service system management method of a distributed architecture, wherein the digital service system comprises a digital service node, a trusted device generation node, a digital service storage node, and an intelligent contract arranged on a blockchain, the method comprising:

The trusted device generation node responds to a trusted device generation request of a user, generates a dedicated trusted device for the user, and issues a corresponding digital identity for the user by the dedicated trusted device;

The exclusive trusted device responds to the digital service requirement sent by the user to generate a corresponding service closed-loop chain according to the digital service requirement; the service closed loop comprises all the digital service nodes related to the digital service requirement;

The trusted device links the service closed-loop chain and triggers the intelligent contract, so that the digital service nodes included in the service closed-loop chain cooperatively execute the digital service demands according to the intelligent contract to obtain an execution result and store the execution result on the digital service storage nodes based on the corresponding digital identity;

The blockchain responds to the read request of the user to read the execution result from the digital service storage node.

2. The method for digital service system management of a distributed architecture according to claim 1, wherein said trusted device issues a corresponding digital identification to said user, comprising:

generating a corresponding public key and private key by an asymmetric cryptography algorithm built in the trusted device;

Generating a corresponding digital identity mark based on the identity attribute information of the user, carrying out hash operation on the digital identity mark to obtain a first hash fingerprint, establishing a corresponding mapping relation between the first hash fingerprint and the public key, and then uploading the corresponding mapping relation to the blockchain, wherein the identity attribute information comprises, but is not limited to, an identity card number, a business license and an ID under a characteristic environment.

3. The method for digital service system management of a distributed architecture as recited in claim 2, wherein,

The exclusive trusted device responds to the digital service requirement sent by the user to generate a corresponding service closed-loop chain according to the digital service requirement, and the exclusive trusted device comprises:

The exclusive trusted device identifies the received digital service requirement and the identity attribute information to determine whether to send the data to the user corresponding to the trusted device;

after the identification is passed, the exclusive trusted device analyzes the digital service requirements to obtain all the related digital service nodes of the digital service requirements;

reading corresponding digital service operation requirements from all the related digital service nodes, analyzing the digital service operation requirements, and generating a digital service operation tree structure diagram;

And establishing corresponding association relations among all the related digital service nodes according to the digital service operation tree structure diagram so as to generate a service closed-loop chain.

4. The method for digital service system management of a distributed architecture according to claim 3,

The step of analyzing the digital business operation requirement to generate a digital business operation tree structure diagram comprises the following steps:

If the digital service operation requirement of one of the related digital service nodes is: establishing a hierarchical association relationship between two related digital service nodes according to the execution result of the other related digital service node, wherein the hierarchical association relationship is executed by the two related digital service nodes successively;

If the digital service operation requirement of one of the related digital service nodes is: the corresponding digital service nodes can establish synchronous association relations with any other related digital service nodes without depending on the execution results of the other related digital service nodes, and the synchronous association relations are synchronously executed by the two related digital service nodes;

If the digital service operation requirement of one of the related digital service nodes is: and if the execution result of the digital service node and the execution result of the other related digital service node are displayed on the same interface, establishing a communication relation between the two related digital service nodes, wherein the communication relation is that the execution results of the two related digital service nodes are displayed on the same interface.

5. The method for digital service system management of a distributed architecture according to claim 3,

The intelligent combination is about:

And the digital service nodes involved in the service closed-loop chain execute the digital service demands according to the digital service operation tree structure diagram.

6. The distributed architecture digital service system management method according to claim 2, wherein the obtaining the execution result and storing in the digital service storage node comprises:

encrypting the execution result by adopting the public key to obtain an execution result ciphertext;

and establishing a mapping relation between the execution result ciphertext and the corresponding first hash fingerprint, and then storing the mapping relation on the digital service storage node.

7. The method for digital business system management of distributed architecture according to claim 6, wherein,

The blockchain responding to the read request of the user to read the execution result from the digital service storage node, comprising:

The blockchain receives a digital identity sent by the user through the trusted device and carries out hash operation to obtain a second hash fingerprint, the second hash fingerprint is compared with the first hash fingerprint stored on the blockchain, and after the comparison is passed, the execution result ciphertext corresponding to the first hash fingerprint is read from the blockchain;

and decrypting the execution result ciphertext by adopting the private key to obtain the execution result.

8. A digital service system management platform of a distributed architecture, implementing the digital service system management method of a distributed architecture according to any one of claims 1-7, comprising: the system comprises a trusted device generating unit, a service closed loop chain generating unit, a digital service demand executing unit and an execution result reading unit;

The trusted device generation unit is used for responding to a trusted device generation request of a user by the trusted device generation node, generating a dedicated trusted device for the user, and issuing a corresponding digital identity for the user by the dedicated trusted device;

The service closed-loop chain generation unit is used for responding to the digital service requirement sent by the user by the exclusive trusted device so as to generate a corresponding service closed-loop chain according to the digital service requirement; the service closed loop comprises all the digital service nodes related to the digital service requirement;

The digital service demand execution unit is used for the trusted device to uplink the service closed-loop chain and trigger the intelligent contract, so that the digital service node included in the service closed-loop chain cooperatively executes the digital service demand according to the intelligent contract to obtain an execution result and stores the execution result on the digital service storage node based on the corresponding digital identity;

the execution result reading unit is used for responding to the reading request of the user by the blockchain so as to read the execution result from the digital service storage node.

9. A computer device, characterized by: the computer device comprises a memory, a processor and a transceiver, which are connected through a bus; the memory is used to store a set of computer program instructions and data and to transfer the stored data to the processor, which executes the program instructions stored in the memory to perform the digital service system management method of the distributed architecture as claimed in any one of claims 1 to 7.

10. A computer-readable storage medium, characterized by: the computer readable storage medium has stored therein a computer program which, when executed, implements the digital service system management method of the distributed architecture as claimed in any one of claims 1 to 7.