分级安全二维码下区块链溯源方案设计  

Blockchain Traceability Scheme Based on Hierarchical Security QR Code

作　　者：张晓宇 张丽娜[1,2] ZHANG Xiaoyu;ZHANG Lina(College of Computer Science and Technology,Xi’an University of Science and Technology,Xi’an 710054,China;School of Computer Science,Shaanxi Normal University,Xi’an 710119,China)

机构地区：[1]西安科技大学计算机科学与技术学院,西安710054 [2]陕西师范大学计算机科学学院,西安710119

出　　处：《计算机工程与应用》2022年第20期98-107,共10页Computer Engineering and Applications

基　　金：国家自然科学基金(62102309);陕西省科技厅青年项目(2021 JQ-575,2021 JQ-576);陕西省教育厅项目(19JK0526);榆林市科技局项目(2016-24-4,2019-173)。

摘　　要：食品安全溯源体系对食品安全保障以及食品行业自我约束具有重要的意义。现有各类结合区块链的溯源方案,存在各通信节点间的数据存储和验证安全强度不够的问题。部分方案虽然在节点间使用RFID实现访问控制,可防止信息被篡改,但成本过高且缺少节点间的身份验证。另一些方案在节点间使用二维码技术记录溯源信息。该类措施虽然可降低成本,但普通二维码具有信息公开性,不能存储机密数据。针对食品安全溯源,提出了基于区块链技术和二级二维码的新型溯源方案。设计了一个安全的二级二维码,用于解决节点间的数据通信安全问题,进而提出了一种分级安全的二维码下基于区块链的溯源方案。在该方案中,管理者通过溯源成员上传的身份签名来验证其合法性。只有合法成员可上传二维码信息,其他系统参与者可提取合法成员上传的群签名来确认二维码中存储信息的完整性。相较于使用RFID和普通二维码的溯源方案,在节点间实现了信息防篡改和身份认证的功能,以解决节点交易过程中的信息安全问题。Food safety traceability system is of great significance to food safety and self-restraint of the food industry.Some existing traceability schemes that based on block chains have the problem of insufficient security for data storage and verification among communication nodes.Although some schemes use RFID to realize the access control between nodes,which can prevent information from being tampered with,the cost is too high and there is a lack of authentication between nodes.Some other schemes use QR code to record traceability information between nodes.Although such mea-sures can reduce the cost,ordinary two-dimensional code cannot store confidential data.In this paper,a new traceability scheme based on block chain technology and secondary QR code is proposed for food safety traceability.A secure two level QR code is designed to solve the security problem of data communication between nodes,and then a blockchain traceability scheme based on hierarchical secure QR code is proposed.In this scheme,the manager can verify the legitimacy of the member’s identity through the signature uploaded by members.Only legal members can upload QR code informa-tion.Other system participants can extract the group signature uploaded by the legal members to confirm the integrity of the information stored in the QR code.Compared with the traceability scheme using RFID and ordinary QR code,this paper realizes the functions of information tamper proof and identity authentication between nodes to solve the problem of information security in the process of node transaction.

关 键 词：二级二维码 群签名 椭圆曲线数字签名算法(ECDSA) 区块链 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]