摘要： 随着高校毕业生规模的不断扩大，学位信息安全和共享方法都面临新的挑战。提出一种用户可控、多部门协同的电子学位证照数据保护及共享方法。基于权威证明共识算法，给出一种权威身份评估机制，实现权威用户身份的动态调整与更新，使得系统具有自适应的信誉调节能力，保证节点的可信性与学位信息的真实性。构建面向学位管理的智能合约架构，允许不同功能的合约相互调用，建立符合学位授予流程的访问控制方案，并提出一种批量电子学位证照的共享与审核方法，在加密环境下实现数据可信共享。利用哈希加密、数字签名等密码学技术结合智能合约实现高度自动化的学位授予、审核与验证功能，并基于以太坊的gas机制设计一种智能合约复杂度分析方法，有效衡量并分析学位授予各环节的功能复杂度，为实现各部门间的数据互通，提高学位证书的隐私性、安全性和可信性提供解决方案。实验结果表明，该方法具有一定的鲁棒性与高效性，提出的权威身份评估机制能够有效避免隐藏性恶意行为的发生。

关键词: 电子学位证照, 权威证明, 区块链, 智能合约, 信息安全

Abstract: With the increasing number of college graduates in recent years, degree data security and sharing methods face new challenges.This paper proposes a student-controllable method for protecting and sharing Electronic Degree Certificates(EDCs) through the coordination of the relevant departments.This method is based on the Proof of Authority(POA) consensus algorithm, where an authoritative identity evaluation mechanism is proposed to realize the dynamic adjustment and update of authoritative user identities;such that the system has an adaptive reputation adjustment ability that ensures the credibility of the nodes and the authenticity of the degree information.This method allows for the construction of a smart architecture for degree management, contraction of different functions to call on each other, and establishment of an access control scheme that conforms to the degree awarding process, proposes a batch electronic degree certificate sharing and verification scheme, and realizes credible data sharing in an encrypted environment.Hash encryption, digital signature and other cryptography technologies are used for content encryption and multiple authentications of the degree certificate;by using smart contract technology to achieve high automation of the degree confer, audit and verification.The method is based on the gas mechanism of Ethereum, a smart contract complexity analysis method designed to effectively measure and analyze the functional complexity of each link of degree awarding.Thus, this study provides a brand-new solution to open up the data exchange between departments and improve the privacy, security, and credibility of degree certificates.The experimental results were used to verify the robustness and efficacy of the method, proving that the authoritative identity evaluation mechanism can efficiently avoid the occurrence of hidden malicious behavior.

Key words: Electronic Degree Certificates(EDCs), Proof of Authority (POA), blockchain, smart contract, information security

中图分类号: 

• TP311