结合区块链和关系数据库管理的会计信息系统安全方案

Combining Blockchain and Relational Database Management for Secure Accounting Information System

会计信息系统(AIS)是企业资源规划(ERP)的核心模块,过去一直被设计为集中式系统,存在单点故障、可扩展性、安全性、灵活性等方面的缺陷。为此,提出了结合联盟区块链和关系数据库管理系统(RDMBS),支持事务防篡改和签名验证的分布式AIS系统。通过将区块链嵌入关系表中,在数据库中以防篡改的方式存储可信信息,并支持数据的溯源和验证。整个系统由多个经授权的参与方共同维护,支持AIS数据的安全整合,并通过签名方案明确数据所有权。为支持大规模查询,应用了基于动态布隆过滤树(DBFT)的优化算法,以最大限度降低查询和验证作业的总时间成本。实验评估表明,所提方法在AIS系统中成功实现了基于区块链的身份验证和篡改溯源,并显著提升了大规模分析查询和验证的效率。

The Accounting Information System(AIS)serves as a core module in Enterprise Resource Planning(ERP).Traditionally designed as a centralized system,AIS exhibits drawbacks such as single points of failure,scalability is-sues,security concerns,and lack of flexibility.To address these challenges,we propose a distributed AIS system that integrates Consortium Blockchain and Relational Database Management System(RDBMS),providing support for tamper-proof transactions and authenticaions.By embedding blockchain within relational tables,we store trustworthy informa-tion in the database in an anti-tampering manner,enabling data traceability and verification.The entire system is col-laboratively maintained by multiple authorized participants,ensuring secure integration of AIS data and explicit data ownership through a dual-signature scheme.To support large-scale queries,an optimization algorithm based on Dy-namic Bloom Filter Tree(DBFT)has been applied,aiming to minimize the overall time cost of query and verification operations.The experimental evaluation indicates that the proposed method has successfully implemented blockchain-based identity verification and tamper tracing in the AIS system,leading to a significant enhancement in the efficiency of large-scale analytical queries and verifications.