基于区块链的动态权限管理与隐私保护方案OA

This paper proposed a blockchain-based scheme to address issues such as delayed permission revocation,policy leakage,and high proxy re-encryption overhead in supply chain collaboration environments.The scheme constructed a three-layer security architecture integrating symmetric encryption,attribute-based encryption,and a trusted execution environment(TEE).It incorporated multi-hop proxy re-encryption to enable dynamic policy updates and forward security for historical da-ta.It designed an IoT event-driven smart contract coordination mechanism to trigger policies automatically and synchronize on-chain and off-chain states.It integrated the Groth16 zero-knowledge proof system with the TEE to form a closed-loop verifica-tion system comprising off-chain privacy proofs,on-chain policy auditing,and hardware-controlled decryption.Experimental results demonstrate that the proposed scheme outperforms existing approaches in key metrics such as policy-update latency and decryption response time,effectively supporting fine-grained,verifiable,and lightweight data sharing in scenarios including smart warehousing and cross-border logistics.