Embodiment
Below, the technical scheme in the embodiment of the present invention will be clearly and completely described with reference to accompanying drawing.Described
Embodiment is only the part of the embodiment of the present invention, rather than whole embodiments.Those of ordinary skill in the art are based on this
Any change or replacement that inventive embodiments are obtained, both fall within the scope of protection of the invention.
Main idea is that replacing existing storage mode with high in the clouds node, pass through multipoint cooperative at node beyond the clouds
Mechanism realizes the management of data safety, meanwhile, high in the clouds node also includes third party authoritative institution, for business in a manner of year earning rate
Family, user or other related sides provide data safety income calculation, are used for each side.In the present invention, multipoint cooperative refers to high in the clouds
Acted synergistically between multiple member nodes of node, the common management for participating in data safety.Pass through multipoint cooperative mechanism, Neng Gouyou
Effect prevents the leakage of data safety, maliciously distorts or illegally consult, the security greatly to guarantee data security.Hereinafter, with
Data are described instead of data safety, alternatively, the present invention may also apply to the data of other in addition to data safety, such as
Audio, video data, computer data, E-government information etc..
Fig. 1 is the schematic diagram of the high in the clouds node of the diagram present invention.High in the clouds node is made up of multiple member nodes, thus high in the clouds
Node is also referred to as node pool.Fig. 1 shows 1-9 ..., N number of member node, examined for security for schematic example
Consider, the quantity of the member node based on multipoint cooperative mechanism should be no less than three, preferably more than five in the present invention.Moreover, cloud
End node can increase or removing members node, with the addition or deletion of member node, the data of corresponding member node storage
Also it can upgrade in time or back up.Can be connected with each other between member node partly to connect, can be straight between member node
Connect letter can also indirect communication, the present invention is not specifically limited.As shown in figure 1, in member node 1 and node pool other into
Member node 2-N is directly connected to, and member node 2 is only connected with member node 1,3,7, N.In the present invention, high in the clouds node it is every
One member node is respectively provided with node ID, and the node ID is beyond the clouds unique in node.
In addition, high in the clouds node also includes third party authoritative institution, the third party authoritative institution, which is used to calculate automatically, such as to store up
The year earning rate of the data such as value card, in order to which trade company's price, user's purchase stored value card etc. and other related sides are referred to and used,
Also, the third party authoritative institution can also change according to follow-up data, dynamic more New Year earning rate, in order to trade company, user
Earning rate floating situation is understood in time, and the third party authoritative institution can record the history purchase for calculating stored value card etc. automatically
Buy, consumer record, it is automatic to calculate average year earning rate.Wherein, the third party authoritative institution includes income collection module, credit
Management module, income calculation module and transceiver module.Preferably, third party authoritative institution is one of above-mentioned member node, such as Fig. 1
Shown, third party authoritative institution is member node 8, although the third party authoritative institution of diagram is not connected with each node,
It is that preferably, the third party authoritative institution is all connected with each node.Such member node can either realize third party authority
The function of mechanism, and can enough realize the original function of member node.By means of third party authoritative institution, data safety is realized
Safety purchase, a variety of references are provided for trade company, maximize return on assets.
Fig. 2 is the flow chart of the data managing method based on multipoint cooperative mechanism of the present invention.As shown in Fig. 2 this method
Comprise the following steps:
Step 1, data of the cloud end node reception from local device.
In the present invention, local device can be the various electronic equipments of trade company side or the APP softwares of trade company.When finger trade company
During APP softwares, the data from local device only refer to the equipment transmitted via APP softwares, unrelated with the equipment of user.
Further, after any member node of node receives data beyond the clouds, that selectes the data works as value node, such as
The member node that fruit receives data is not the value node of working as of the data, then is sent to the data and works as value node.In the present invention, when
Value node is one of member node of high in the clouds node, refers to the node for being responsible for current data management.When value node can be foundation
The selected node of reliability order, is recommended selected node by member node, the node selected according to node load, or local
The node that equipment is specified.
Further, in the selected data before value node, whether the member node for receiving data judges the data
It is that initial data (also referred to as primary data, refers to the data not occurred before being judged as, in one embodiment, initial data
Refer to that user prestores the data generated after the amount of money first), if it is, it is selected when value node after, when value node foundation number
According to attribute information, generate unique mark described in data Data Identification.The attribute information of data is such as, but not limited to local set
Standby IP, local device MAC Address, data source, data creation time, data name, numbering, size of data, data type etc.
Various attribute informations.Then, when value node returns to above-mentioned Data Identification or the node ID when value node to local device, so as to
For in the subsequent treatment of same data, local device is sent out by Data Identification or when the node ID of value node is encapsulated in data
High in the clouds node is delivered to, high in the clouds node is according to Data Identification or when the node ID of value node is found out corresponding to the data when value saves
Point.The Data Identification so encapsulated or the node ID when value node so that high in the clouds node can be at the follow-up place of same data
Work as value node corresponding to data based on the Data Identification or when the node ID of value node is found out in reason, avoid repetition and select
When the wasting of resources or loss of data caused by value node the problems such as.
In addition, when value node can not also generate new Data Identification, if for example, the attribute information of data in itself can
Data described in unique mark, then directly using attribute information in itself as Data Identification.For example, for containing numbering
The data of " 1234567890 ", when value node is directly using the numbering as Data Identification;In another example for containing MAC Address
" XX-XX-XX-XX-XX-XX ", creation time " on October 11st, 2015,10:30:05 " data, when value node can foundation
The two attribute informations generate new Data Identification, directly can also regard the two attribute informations as Data Identification, so that according to
According to the two attribute informations or Data Identification, find out and work as value node corresponding to data.
Preferably, after Data Identification is obtained, when value node to other member node broadcast datas identify and node ID
Corresponding table, other member nodes store the corresponding table of the Data Identification and node ID in database.When local device is by number
During according to sending to high in the clouds node, one of member node receives the data, and the member node is searched in its database and foundation
Data Identification identical Data Identification acquired in the attribute information of data, work as value node corresponding to the data so as to find out.
Alternatively, when value node does not broadcast the Data Identification to other member nodes.When one of member node receives data, judge
Whether own node is that the data work as value node, if it is, perform subsequent treatment, if it is not, then to high in the clouds node
Other member nodes broadcast the Data Identification of the data, to determine to work as value node corresponding to the data.In response to this, other into
The Data Identification of broadcast compared with the Data Identification that itself is stored, then, is worked as value node by member's node corresponding to the data
The member node for receiving data is confirmed message to mode of unicast transmission, to inform that it is that current data works as value node, its
His member node suppresses to transmit any message, to avoid unnecessary communication.Then, the member nodes of data is received by data
It is sent to it and works as value node.
Wherein, if directly using the attribute information of data as Data Identification, need not be identified when value node returned data
Or as value node ID.If in addition, when value node is that local device is specified, without when value node generates Data Identification and returns
Return Data Identification or as value node ID, but specified directly in data and accordingly work as value node, such as value node ID is worked as in insertion,
Directly to receive the data when value node.
Preferably, when value node is returned only to above-mentioned Data Identification, so, it is therefore prevented that local device knows to work as value node institute
Avoid trojan horse program or hacker directly attack and working as value node, further improve the security of data.
Preferably, before step 1, the third party authoritative institution of local device and user side user equipment and high in the clouds node
Interaction data, to generate data.
Preferably, when transmitting heartbeat signal between value node and other member nodes, to determine whether can between node
Proper communication.
In another embodiment, in order to ensure meeting with the management system normal operation that guaranteed data security during disaster, cloud is prevented
In end node the problems caused by loss of data, the present invention introduces disaster-tolerant backup technology, each member node beyond the clouds in node
There are corresponding one or more backup nodes.When some member node failure in the node of high in the clouds, pass through malfunctioning node
Route backup, by corresponding data processing be transferred on the backup node of the malfunctioning node, so as to realize the safe disaster tolerance of system.
Step 2, high in the clouds node is stored data in multiple nodes.
Hereinafter, for the ease of describing the node of these data storages, the node of these data storages is referred to as to store section
Point.
Wherein, after value node receives initial data, the reliability order based on member node, select with a high credibility
Member node is as memory node, or when value node determines memory node at random.In the embodiment of the present invention, memory node can be with
Including that can not also include working as value node when value node, in addition, memory node can be whole member nodes or part
Member node, it is not specifically limited in of the invention.For example, when value node 1 can be using node 1-N as memory node, can also
Using node 1,3,5,7,8 or node 2-8 as memory node.And when value node 2 is using node 1,3,7, N as memory node.Go out
In security consideration, the quantity of the memory node based on multipoint cooperative mechanism should be no less than three in the present invention, preferably five with
On.
Preferably, before above-mentioned steps 2, when value node carries out concealment conversion to the data received, it is only capable of by depositing
Data of the node conversion through concealment conversion are stored up, other member nodes of the data is not stored so as to avoid and consults or obtain the number
According to, and then add the confidentiality of data.
Specifically, high in the clouds node can use but be not limited to the storage that following two modes realize data:
The first storage mode, after value node receives data, data-ground is established according to data-addresses mapping algorithm
Location mapping relations, whole data are respectively stored in multiple memory nodes.The first storage mode is applied to data of small size
Storage.
Second of storage mode, after value node receives data, the data are split as multiple subdatas, according to number
Data-addresses mapping relations are established according to-mapping address algorithm, multiple subdatas are respectively stored in multiple memory nodes.The
Storage of two kinds of storage modes especially suitable for large-scale data or mass data, by the way of the storage of multiple nodes, realize
The storage management of large-scale data.
When value node establishes data-addresses mapping relations according to data-addresses mapping algorithm, according to the mapping relations, when
Value node can determine multiple memory nodes of data storage, realize the quick lookup of address, add data storage
Security, this will be described below.
Fig. 3 is the schematic diagram of the data-addresses mapping relations of the diagram present invention.Data-addresses mapping algorithm is with certain
Functional relation data are calculated, and then obtain the technology of the storage address of the data.In the embodiment of the present invention, establish such as
Data and address are stored in above-mentioned mapping table by the data-addresses mapping table (MappingTable) shown in Fig. 3 correspondingly
In, when searching address, by mapping function Y (t), data can be completed to the mapping x=Y (t) of address.Wherein, x is storage
The address of the memory node of data, t be data in itself, the Data Identification of the attribute information of data or data.Utilize data
The Data Identification of attribute information or data, the size of data-addresses mapping table can be reduced, saved when the storage of value node is empty
Between.
The process using data-addresses mapping algorithm searching data storage address will be described in detail below.
Step a, identification data t, t mapping address, Y (t)=x are calculated according to data-addresses mapping function;
Step b, judge whether MappingTable [x] is empty, if result is yes, it is determined that address error, return to step
Rapid a recalculates mapping address, otherwise, if result is no, is transferred to step c;
Step c, compare MappingTable [x]=t, if comparative result is yes, it is determined that address is correct, that is, finds out
Address data memory, otherwise, it is determined that address error, return to step a recalculate mapping address.
Using above-mentioned algorithm, the time needed for address search is greatly reduced, improves the efficiency of address lookup.Wherein,
Address in data-addresses mapping table can be the set of address.In addition, in order to further reduce data-addresses mapping table
Memory space, the address in data-addresses mapping table can be a reference address, the i.e. index of address, and by the index institute
Corresponding better address is stored in other memory spaces.Address in data-addresses mapping table can use predetermined length
Mode is configured, and sets the address memory space of regular length in advance for the index of address.For example, referred to using index " 1358 "
Member node 1-5 is pointed to member node 1,3,5,8, or using index " 01001 ".
Preferably, whether occupied if identifying the address space using a bit in data-addresses mapping table, such as " 1 " table
Show that the address space is occupied, " 0 " represents that the address space is unoccupied.
The data management operations based on multipoint cooperative mechanism at the node of high in the clouds are carried out below with reference to specific embodiment
Description, is initial data for the data, data management operations will be hereafter described in terms of two.Hereinafter based on multiple spot
The data management of coordination mechanism can include data generation, data modification, data download, data inspection etc., and data modification includes
The modification modes such as data change, data are deleted, data increase.These following embodiments are not precluded from implementation as described above
Example, on the contrary, as in place of noncontradictory, embodiments described above is quoted or continued to these embodiments.
Fig. 4 is the flow chart for the initial data management method based on multipoint cooperative mechanism for illustrating the embodiment of the present invention.Knot
The high in the clouds node shown in Fig. 1 is closed, the initial data management method at high in the clouds node described in detail below.
The credit management module of third party authoritative institution is used for the creditworthiness for supervising trade company, records the credit journey of each trade company
The data such as degree, hair fastener quantity, hair fastener fund.In addition, when evaluating trade company's creditworthiness, the credit pipe of the third party authoritative institution
The ratio for the Reserve Fund that reason module is also paid based on trade company, assigns certain weight to evaluate trade company's creditworthiness, so that it is guaranteed that
The interests of user.By means of third party authoritative institution, the present invention can realize the safety purchase of data safety, be provided for trade company more
Kind reference, maximize the return on assets of trade company.
When the assets of such as stored value card etc it is expected to send in trade company side, the local device generation corresponding data of trade company side,
Then pass to the transceiver module of third party authoritative institution.After transceiver module receives the data, send it to interests and collect mould
Block.
Data of the income calculation module based on reception, the relative year earning rate of the data from local device is calculated, and
The year earning rate of calculating is returned into local device.
Specifically, by taking stored value card as an example, the data can include name of firm, card type type, card type denomination, purchase gold
Volume, give the amount of money, using discount, term of validity etc..The present invention calculates the year earning rate Z of the stored value card using below equation:
Z=[(Y-X) * 365/ (X*T)] * 100%
Wherein, X is that user buys the amount of money, and Y is workable overall balance after purchase, and T is that the term of validity or real consumption are complete
Number of days.
After year earning rate is calculated, year earning rate is sent to the local device of trade company side by transceiver module.It is optional
Ground, trade company side specify the user side user equipment for receiving year earning rate when sending data, so as in third party authoritative institution
After calculating year earning rate, year earning rate is sent to the user side user equipment specified by transceiver module, so as to user's root
According to the recommendation of third party authoritative institution, corresponding stored value card is bought.
In the continuous business process of trade company, third party authoritative institution dynamic more New Year earning rate, for different Card Types
Average year earning rate is calculated, to provide decision-making foundation for trade company, the pricing strategy of stored value card is adjusted according to actual conditions.
After user determines card type denomination, trade company's side local device generates local data according to the data that user determines, so
Afterwards, the data of generation are sent to high in the clouds node by local device.
Specifically, as shown in figure 4, the data managing method includes:
Step 11, the third party authoritative institution of high in the clouds node receives data of the transmission from local device on assets,
The third party authoritative institution calculates the relative year earning rate of the data from local device, and the year earning rate of calculating is returned
Return local device and user side user equipment;
Step 12, local device generates initial data based on the selection of user equipment, and initial data is sent into cloud
End node;
Step 13, one of member node of high in the clouds node receives the initial data from local device, selectes the original number
According to work as value node;
Step 14, after value node receives initial data, multiple memory nodes of the initial data are determined;
Step 15, each memory node is to whether allowing data generation authorizes, to produce authorization message, memory node
Authorization message is added in initial data, and the initial data of authorization message is with the addition of to when value node is sent;
Step 16, when value node according to the authorized quantity of memory node judge final data generation whether by, if by,
Then when value node is based on Raw Data Generation final data, if not by abandoning data generation;
Step 17, the final data of generation is stored in memory node.
Wherein, when value node can the reliability order based on member node, member node with a high credibility is defined as
Memory node, or when value node can determine the memory node that memory node or local device specify at random.It is preferred that
Ground, memory node include working as value node in itself, when counting the authorized quantity of memory node, when value node also counts awarding for itself
Weigh information.Alternatively, memory node does not include working as value node in itself.In the present invention, for security consideration, memory node quantity
No less than three, preferably more than five.The characteristics of this multipoint cooperative mechanism so that high in the clouds node is particularly suitable for building dispersion pipe
Reason system, the significant increase security of system.
After memory node is determined, establish data-addresses mapping according to data-addresses mapping algorithm when value node and close
System, so that in searching data corresponding address, address corresponding to the data, above-mentioned mistake are found out based on data-addresses mapping function
Journey is as described above.
Preferably, step 15 further comprises, after memory node produces authorization message, authorization message is carried out using private key
Encryption.Correspondingly, step 16 further comprises, when value node with the addition of using public key decryptions the initial data of authorization message, with
Determine the authorized quantity of memory node corresponding to initial data.By above-mentioned encryption process, uncorrelated node is avoided to depositing
The malice for storing up the authorization message of node is distorted or illegally authorized, and adds the security of data.
Preferably, in step 16, only when authorized quantity is equal to whole memory node quantity, final data is generated and judged
For by being otherwise judged as not passing through.In addition, also can predetermined threshold, only when authorized quantity exceedes predetermined threshold, will finally count
It is judged as according to generation by being otherwise judged as not passing through.
In an alternative embodiment of the invention, after authorized quantity is counted when value node, memory node deletes authorization message.
Alternatively, after step 14, after memory node is determined, judge to whether there is authorization message in memory node, such as deposit
Authorization message is then being deleted, is causing to work as value node mistake geo-statistic authorized quantity so as to avoid repetitive endowment.Said process is kept away
Exempt from the malice mandate of some or a part of memory node, ensure that the security of data.
Further, the storage in step 17 is stored using two kinds of the above storage modes.
For stored-value card data, after user buys stored value card, local device is based on Stored Value card information generation initial data.
The initial data can include stored value card numbering, holder name, merchant information, the purchase amount of money, Stored Value remaining sum, commodity or service
Useful life, commodity or the access times of service, digital cash, commodity amount, digital cash, the means of payment, payment cipher
Etc. plurality of, the present invention is simultaneously not specifically limited.Initial data is sent to high in the clouds node by local device, and to select, this is original
Data work as value node.After value node receives initial data, the memory node of 5 initial data is determined.This 5 storage sections
Point is authorized to produce authorization message to data generation, and authorization message is added in initial data, is sent out to when value node
Send the initial data that with the addition of authorization message.When value node statistics authorized quantity, when authorized quantity is 5, computer is determined
File or stored-value card data be generated as by, when value node by the computer documents of generation or stored-value card data be stored in this 5
In individual memory node, if not by abandoning data generation.
By means of third party authoritative institution, present invention reduces data safeties such as stored value cards to caused by user risk
And problem, the perfect management rule in stored value card market.
Beyond the clouds after node storage initial data, the various pipes such as local device can modify to data, download, consulting
Reason operation.Consume or in amount deducted on trade company APP for example, user holds, become for the data safety of this user
Dynamic, i.e., local device need to modify to data.Data management behaviour at the node of high in the clouds is only described by taking data modification as an example below
Make, data modification hereafter is applied to any data management operations.
Fig. 5 is the flow chart for the data modification method based on multipoint cooperative mechanism for illustrating the embodiment of the present invention.Such as Fig. 5 institutes
Show, the data modification method includes:
Step 21, one of member node of high in the clouds node receive the data from local device, judge the data whether be
Initial data, if it is not, determine the data works as value node;
Step 22, after value node receives data, the storage section of the data is searched according to data-addresses mapping algorithm
Point;
Step 23, each memory node to produce authorization message, and will authorize to whether allowing data modification authorizes
Information is added in data, to the data that authorization message is with the addition of when value node transmission;
Step 24, when value node authorized quantity of memory node according to corresponding to data judge data modification whether by,
If by, when value node by amended data storage in memory node, if not by the data being abandoned, to local
Equipment returns to modification failed message.
Further, in step 21, according to the Data Identification or attribute information in data, determine corresponding to data when value saves
Point, it is determined that the step of working as value node is as described above.In step 23, when the area of value node detection current data and data before
Not, data refer to the last data for same type data before.For security consideration, each of memory node is equal
The difference of current data and data before is detected, and to whether allowing data modification authorizes.In step 24, only when mandate number
When amount is equal to whole memory node quantity, data modification is judged as by being otherwise judged as not passing through.In addition, it can also make a reservation for
Threshold value, only when authorized quantity exceedes predetermined threshold, data modification is judged as by being otherwise judged as not passing through.
Preferably, in step 23, when value node is respectively stored in multiple memory nodes according to by whole data;Or when value
The data are split as multiple subdatas by node, and multiple subdatas are respectively stored in multiple memory nodes.
Preferably, step 23 further comprises, after memory node produces authorization message, authorization message is carried out using private key
Encryption.Correspondingly, step 24 further comprises, when value node with the addition of using public key decryptions the data of authorization message, to determine
The authorized quantity of memory node.By above-mentioned encryption process, uncorrelated node is avoided to the authorization message of memory node
Malice is distorted or illegally authorized, and adds the security of data.
Preferably, after step 24, when amended data are sent to third party authoritative institution, third party by value node
The amended data of authority store, dynamically to update the data earning rate after safe year.
In addition, the various stored value cards that third party authoritative institution can be issued trade company are weighted average computation, and will meter
Result is calculated to send to local device, so as to businessmans of local device and other similar stored value cards of distribution carry out Combined Ration compared with.
In the present invention, if the data from local device are tampered, the data after distorting are transferred into it and work as value node,
Each of memory node detects the difference of current data and data before, and to whether allowing data modification authorizes.
According to said process, based on multipoint cooperative mechanism, data modification is just only carried out in the case where whole memory nodes unanimously authorize,
Data tampering is effectively prevent, ensure that the security of data.
Below also by taking computer documents or stored-value card data as an example, the mistake of the data modification based on multipoint cooperative mechanism is sketched
Journey.
One of member node of high in the clouds node is according to the Data Identification or attribute information in data, for example, computer documents
Local device MAC Address, filename and file creation time etc. or stored-value card data stored value card numbering etc., determine data
It is corresponding to work as value node, such as work as value node 1.After value node receives data, according to data-addresses mapping algorithm, searching should
The memory node of data, such as node 1-5.Memory node 1-5 to whether allowing data modification authorized to produce authorization message,
And authorization message is added in data, to the data that authorization message is with the addition of when value node transmission.When value node judges to add
Whether the data of authorization message come from memory node 1-5, and whether judge data modification according to the authorized quantity of memory node
By that is, when value node counts authorized quantity, when authorized quantity is 5, judging repairing for computer documents or stored-value card data
Be changed to by, by amended data storage in memory node, if authorized quantity be less than 5, refusal change the data, to
Local device returns to modification failed message.
Now, if despiteful trojan horse program, hacker's tissue or some internal staff altered data on the local device,
Based on the multipoint cooperative mechanism of the present invention, in the case of the inwhole authorization data modifications of memory node 1-5, high in the clouds node can be refused
Modification data absolutely, so as to prevent the malice of trojan horse program, hacker's tissue or some internal staff to distort, improve the peace of data
Quan Xing.Meanwhile based on multipoint cooperative mechanism, just, believable performing environment is provided for transaction in assets, data circulation etc..
In addition, the multipoint cooperative mechanism of the present invention is equally applicable to the management such as the download of data, access operation, only in whole
The management such as download, the access of data are just allowed to grasp in the case that memory node unanimously authorizes or authorized quantity exceedes predetermined threshold
Make, so as to effectively prevent the leakage of data, ensure that the security of data.
Fig. 6 is the schematic diagram of the diagram data safety management system of the invention based on multipoint cooperative mechanism.The data safety
Management system is used to realize data managing method as described above, and the data safety management system includes local device, high in the clouds
Node and user side user equipment.The present invention can be user individually build above-mentioned data safety management system, also can with it is existing
Data platform or client slitless connection, increase high in the clouds node in available data platform or client, ensure that the peace of data
Quan Xing.
Wherein, local device is used to generate data, and sends data to high in the clouds node.Local device can be included but not
It is limited to any electronic equipment such as mobile terminal, computer, POS.Further, local device can be that multiple locals are set
Standby, these local devices are different types of local devices, and multiple local devices communicate with high in the clouds node.User side user sets
Standby is mobile terminal, the various user equipmenies such as computer that user commonly uses.
High in the clouds node is made up of multiple member nodes, for receiving the data from local device, and is based on multipoint cooperative
Mechanism is stored and managed to data.Wherein, as described above, for each data also exist corresponding to when value node and depositing
Store up node.Hereafter showing for each member node is described using node as the angle when value node, member node and memory node
Meaning property structure, can select which part or whole modules to realize data management side described above according to being actually needed
Method.
Wherein, member node can include receiving module 10, judge module 20, processing module 30, memory module 40 and hair
Send module 50.
Wherein, receiving module 10, for receiving data, data can be data from local device or come
From the data of other member nodes;
Judge module 20, whether the data for judging to receive are initial data, if so, then selecting working as the initial data
Value node, if it is not, that then searches the data of the reception works as value node;
Processing module 30, for determining the memory node of initial data, or for searching the storage section stated of the reception
Point;Processing module 30 is additionally operable to decide whether grant authorizations to produce authorization message;Processing module 30 is additionally operable to according to data-ground
Memory node corresponding to the mapping function searching data of location;Processing module 30 is additionally operable to operate based on the management of authorized quantity determination data
Whether pass through, etc..
Memory module 40, for data storage, in addition, memory module 40 is additionally operable to data storage-address mapping table.
Sending module 50, for sending data.For example, sending module can send data to other member nodes, also may be used
To send data to local device.
Alternatively, member node also includes encryption/decryption module, and encryption and decryption is carried out for the data to transmission or information.
Further, the data safety management system also includes gateway device, realizes the logical of local device and high in the clouds node
Letter.
Data managing method and system provided by the invention based on multipoint cooperative mechanism, the peace of data safety can be realized
Full purchase, effectively prevent the leakage of data, maliciously distorts or illegally consult, greatly ensure that the security of data, especially
It is to provide just, believable performing environment for transaction in assets, data circulation etc..Meanwhile the present invention is simple in construction, you can to use
Family individually builds above-mentioned data safety management system, also can with available data platform or client slitless connection, in available data
Increase new function in platform or client, improve the convenience of data management.
It should be understood by those skilled in the art that, embodiments of the invention can be provided as method, system or computer program
Product.Therefore, the present invention can use the reality in terms of complete hardware embodiment, complete software embodiment or combination software and hardware
Apply the form of example.Moreover, the present invention can use the computer for wherein including computer usable program code in one or more
The computer program production that usable storage medium is implemented on (including but is not limited to magnetic disk storage, CD-ROM, optical memory etc.)
The form of product.
Although preferred embodiments of the present invention have been described, but those skilled in the art once know basic creation
Property concept, then can make other change and modification to these embodiments.So appended claims be intended to be construed to include it is excellent
Select embodiment and fall into having altered and changing for the scope of the invention.
Obviously, those skilled in the art can carry out the essence of various changes and modification without departing from the present invention to the present invention
God and scope.So, if these modifications and variations of the present invention belong to the scope of the claims in the present invention and its equivalent technologies
Within, then the present invention is also intended to comprising including these changes and modification.