CN111427897A - Data storage management method on block chain - Google Patents
Data storage management method on block chain Download PDFInfo
- Publication number
- CN111427897A CN111427897A CN202010173174.3A CN202010173174A CN111427897A CN 111427897 A CN111427897 A CN 111427897A CN 202010173174 A CN202010173174 A CN 202010173174A CN 111427897 A CN111427897 A CN 111427897A
- Authority
- CN
- China
- Prior art keywords
- data
- request
- node
- block chain
- key
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/23—Updating
- G06F16/2379—Updates performed during online database operations; commit processing
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/27—Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
- G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- G06Q20/00—Payment architectures, schemes or protocols
- G06Q20/38—Payment protocols; Details thereof
- G06Q20/389—Keeping log of transactions for guaranteeing non-repudiation of a transaction
Landscapes
- Engineering & Computer Science (AREA)
- Business, Economics & Management (AREA)
- Theoretical Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Databases & Information Systems (AREA)
- Accounting & Taxation (AREA)
- Physics & Mathematics (AREA)
- Finance (AREA)
- General Business, Economics & Management (AREA)
- Strategic Management (AREA)
- Data Mining & Analysis (AREA)
- General Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computing Systems (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
- Storage Device Security (AREA)
Abstract
The invention discloses a data storage management method on a block chain, which particularly relates to the technical field of block chains and specifically comprises the following steps: the method comprises the steps that cloud servers matched with nodes in a block chain system are arranged, the number of the cloud servers is the same as that of the nodes in the block chain system, a single node is matched with a single cloud server, and the cloud servers are not communicated with one another; in the block chain system, a control block chain node divides data uploaded by a terminal into different data segments, wherein the data segments are manageable blocks; after the fragmentation is completed, the storage system encrypts each data fragment on the local system, and the control in the encryption process is controlled by all the content control programs of the data fragment, so that anyone who the content owner has a accident can not view and access the data in the data fragment. According to the invention, different data management operations are carried out through different verification modes and verification sequences, and the safety of data storage and management on the block chain can be improved.
Description
Technical Field
The present invention relates to the field of blockchain technology, and more particularly, to a method for storing and managing data on a blockchain.
Background
The block chain technology (also called as distributed book technology) is a decentralized distributed database technology, has the characteristics of decentralization, openness and transparency, no tampering, trustiness and the like, and is suitable for application scenes with high requirements on data reliability.
The transaction in the block data is generated by a user of the block chain, the user sends the transaction to a block chain node, the block chain node packs a plurality of transactions into a block, the block can be broadcasted and identified in the block chain network, after the block chain network identifies the block, the transaction in the block is identified, and the execution result of the transaction is stored in the state data. The block needs to be identified by a blockchain, and the state data is generated by executing transactions in the block, and the two types of data are directly or indirectly related to the blockchain identification and can be called as 'data on the chain'. Most of the existing block chain data management methods are simple and have low security performance in authorized access and management.
Disclosure of Invention
In order to achieve the purpose, the invention provides the following technical scheme: a method for storing and managing data on a block chain specifically comprises the following steps:
step one, setting cloud servers matched with nodes in a block chain system, wherein the number of the cloud servers is the same as that of the nodes in the block chain system, a single node is matched with a single cloud server, and the cloud servers are not communicated with one another;
step two, in the block chain system, controlling a block chain node to divide data uploaded by a terminal into different data segments, wherein the data segments are manageable blocks;
step three, after the fragmentation is completed, the storage system encrypts each data fragment on the local system, and the control in the encryption process is controlled by all the content control programs of the data fragment, so that anyone who has a content owner and is unexpected can not view and access the data in the data fragment;
fourthly, the blockchain system generates unique hash, namely an encrypted output character string with fixed length, according to the fragmented data fragments and the encrypted key, the storage system copies the encrypted data fragments, then distributes the copied data fragments to nodes in the whole blockchain system, and the positions and the number of the distributed nodes are determined by a content owner;
and fifthly, after the data fragments and the copied data fragments are distributed and stored, uploading the hash values generated by the data fragments and the secret keys to a cloud server of the block chain nodes originally corresponding to the data fragments.
In a preferred embodiment, the method further comprises: when the data request node sends a data lookup request, the node broadcasts the lookup request into the whole block chain system, the lookup request comprises the signature of an information requester, the identity verification of the requester and the request key of the requester, and the node in the block chain gives authority to the request of the request node according to the matching result of the request key.
In a preferred embodiment, the matching process of the request key specifically includes:
the request key of the data request node is a hash value generated by the requested data segment and the encryption key;
after the hash value is verified, the data request node can download the data segment corresponding to the hash value from any node in the block chain system, and seek the uploading node of the data segment corresponding to the hash value to obtain the encryption key of the data segment;
and the data request node refers to the downloaded data fragments through the encryption key.
In a preferred embodiment, a data requesting node is deleted from the blockchain system when its hash value verification fails.
In a preferred embodiment, the method further comprises: and after any node finishes one data request, re-encrypting the data segment related to the request, regenerating the hash value, uploading the hash value and distributing the hash value to the node for storage.
In a preferred embodiment, the data request point may further perform a data modification request, specifically:
the request key of the data request node is an encryption key of the request data fragment;
after passing the key verification, the data requesting node can download the data segment corresponding to the key at any node in the blockchain system, and can modify the data.
The invention has the technical effects and advantages that:
1. the server connected with the block chain link point in a single way is used for data storage on the chain, the stored data is segmented, the segmented data segments are encrypted, the encrypted key and the data segments generate a unique hash value, the identity of a data request node is verified by using the hash value, the data segments are downloaded, the encrypted key is used for data lookup, different data management operations are performed through different verification modes and verification sequences, and the safety of data storage and management on the block chain can be improved;
2. after the data request is completed every time, data related to the request in the block chain is re-encrypted, and a hash value is generated, so that malicious nodes can be effectively prevented from performing malicious modification of the next round through data access information of the previous round.
Detailed Description
The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.
Example 1
A method for storing and managing data on a block chain specifically comprises the following steps:
the method comprises the steps that cloud servers matched with nodes in a block chain system are arranged, the number of the cloud servers is the same as that of the nodes in the block chain system, a single node is matched with a single cloud server, and the cloud servers are not communicated with one another;
in the block chain system, a control block chain node divides data uploaded by a terminal into different data segments, wherein the data segments are manageable blocks;
after the fragmentation is completed, the storage system encrypts each data fragment on the local system, and the control in the encryption process is controlled by all the content control programs of the data fragment, so that anyone who has a content owner and is unexpected can not view and access the data in the data fragment;
the blockchain system generates unique hash, namely an encrypted output character string with fixed length, according to the fragmented data fragments and the encrypted key, the storage system copies the encrypted data fragments, then distributes the copied data fragments to nodes in the whole blockchain system, and the positions and the number of the distributed nodes are determined by a content owner;
after the data segments and the copied data segments are distributed and stored, the hash values generated by the data segments and the keys are uploaded to a cloud server of the block chain nodes corresponding to the data segments originally.
When a data request node sends a data lookup request, the node broadcasts the lookup request into the whole block chain system, the lookup request comprises a signature of an information requester, identity verification of the requester and a request key of the requester, and the node in the block chain gives authority to the request of the request node according to a matching result of the request key;
on the basis, the request key of the data request node is a hash value generated by the requested data segment and the encryption key;
after the hash value is verified, the data request node can download the data segment corresponding to the hash value from any node in the block chain system, and seek the uploading node of the data segment corresponding to the hash value to obtain the encryption key of the data segment;
and the data request node refers to the downloaded data fragments through the encryption key.
And when the hash value verification of the data request node is not passed, deleting the data request node from the blockchain system.
Example 2
The method comprises the steps that cloud servers matched with nodes in a block chain system are arranged, the number of the cloud servers is the same as that of the nodes in the block chain system, a single node is matched with a single cloud server, and the cloud servers are not communicated with one another;
in the block chain system, a control block chain node divides data uploaded by a terminal into different data segments, wherein the data segments are manageable blocks;
after the fragmentation is completed, the storage system encrypts each data fragment on the local system, and the control in the encryption process is controlled by all the content control programs of the data fragment, so that anyone who has a content owner and is unexpected can not view and access the data in the data fragment;
the blockchain system generates unique hash, namely an encrypted output character string with fixed length, according to the fragmented data fragments and the encrypted key, the storage system copies the encrypted data fragments, then distributes the copied data fragments to nodes in the whole blockchain system, and the positions and the number of the distributed nodes are determined by a content owner;
after the data segments and the copied data segments are distributed and stored, uploading hash values generated by the data segments and the secret keys to a cloud server of block chain link points originally corresponding to the data segments;
different from embodiment 1, the data request point may further perform a data modification request, specifically:
when the data request node sends a data query request, the node broadcasts the query request into the whole block chain system, and the query request comprises the signature of an information requester, the identity verification of the requester and a request key of the requester;
the request key of the data request node is an encryption key of the request data fragment;
after passing the key verification, the data requesting node can download the data segment corresponding to the key at any node in the blockchain system, and can modify the data.
Further, the following limitation is made, after any node completes one data request, the data segment related to the request is re-encrypted, the hash value is re-generated and uploaded, and the node is distributed for storage, so that a malicious node is prevented from performing the next round of malicious data modification by using the data request information of the previous round.
And finally: the above description is only for the purpose of illustrating the preferred embodiments of the present invention and is not to be construed as limiting the invention, and any modifications, equivalents, improvements and the like that are within the spirit and principle of the present invention are intended to be included in the scope of the present invention.
Claims (6)
1. A method for storing and managing data on a block chain specifically comprises the following steps:
step one, setting cloud servers matched with nodes in a block chain system, wherein the number of the cloud servers is the same as that of the nodes in the block chain system, a single node is matched with a single cloud server, and the cloud servers are not communicated with one another;
step two, in the block chain system, controlling a block chain node to divide data uploaded by a terminal into different data segments, wherein the data segments are manageable blocks;
step three, after the fragmentation is completed, the storage system encrypts each data fragment on the local system, and the control in the encryption process is controlled by all the content control programs of the data fragment, so that anyone who has a content owner and is unexpected can not view and access the data in the data fragment;
fourthly, the blockchain system generates unique hash, namely an encrypted output character string with fixed length, according to the fragmented data fragments and the encrypted key, the storage system copies the encrypted data fragments, then distributes the copied data fragments to nodes in the whole blockchain system, and the positions and the number of the distributed nodes are determined by a content owner;
and fifthly, after the data fragments and the copied data fragments are distributed and stored, uploading the hash values generated by the data fragments and the secret keys to a cloud server of the block chain nodes originally corresponding to the data fragments.
2. The method of claim 1, further comprising: when the data request node sends a data lookup request, the node broadcasts the lookup request into the whole block chain system, the lookup request comprises the signature of an information requester, the identity verification of the requester and the request key of the requester, and the node in the block chain gives authority to the request of the request node according to the matching result of the request key.
3. The method of claim 2, wherein the matching process of the request key comprises:
the request key of the data request node is a hash value generated by the requested data segment and the encryption key;
after the hash value is verified, the data request node can download the data segment corresponding to the hash value from any node in the block chain system, and seek the uploading node of the data segment corresponding to the hash value to obtain the encryption key of the data segment;
and the data request node refers to the downloaded data fragments through the encryption key.
4. The method of claim 3, wherein the method further comprises: and when the hash value verification of the data request node is not passed, deleting the data request node from the blockchain system.
5. The method for managing data storage on a blockchain according to any one of claims 1 to 4, further comprising: and after any node finishes one data request, re-encrypting the data segment related to the request, regenerating the hash value, uploading the hash value and distributing the hash value to the node for storage.
6. The method of claim 4, wherein the method further comprises: the data request point can also perform a data modification request, specifically:
the request key of the data request node is an encryption key of the request data fragment;
after passing the key verification, the data requesting node can download the data segment corresponding to the key at any node in the blockchain system, and can modify the data.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010173174.3A CN111427897A (en) | 2020-03-13 | 2020-03-13 | Data storage management method on block chain |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202010173174.3A CN111427897A (en) | 2020-03-13 | 2020-03-13 | Data storage management method on block chain |
Publications (1)
Publication Number | Publication Date |
---|---|
CN111427897A true CN111427897A (en) | 2020-07-17 |
Family
ID=71553767
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202010173174.3A Withdrawn CN111427897A (en) | 2020-03-13 | 2020-03-13 | Data storage management method on block chain |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN111427897A (en) |
Cited By (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN113434905A (en) * | 2021-07-05 | 2021-09-24 | 网易(杭州)网络有限公司 | Data sharing method and device, computer equipment and storage medium |
CN113591162A (en) * | 2021-09-29 | 2021-11-02 | 金蝶软件(中国)有限公司 | Block chain evidence storing method and device and computer equipment |
CN114006690A (en) * | 2021-01-04 | 2022-02-01 | 北京八分量信息科技有限公司 | Data authorization method of block chain |
-
2020
- 2020-03-13 CN CN202010173174.3A patent/CN111427897A/en not_active Withdrawn
Cited By (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114006690A (en) * | 2021-01-04 | 2022-02-01 | 北京八分量信息科技有限公司 | Data authorization method of block chain |
CN113434905A (en) * | 2021-07-05 | 2021-09-24 | 网易(杭州)网络有限公司 | Data sharing method and device, computer equipment and storage medium |
CN113591162A (en) * | 2021-09-29 | 2021-11-02 | 金蝶软件(中国)有限公司 | Block chain evidence storing method and device and computer equipment |
CN113591162B (en) * | 2021-09-29 | 2022-02-15 | 金蝶软件(中国)有限公司 | Block chain evidence storing method and device and computer equipment |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN111427897A (en) | Data storage management method on block chain | |
CN109257334B (en) | Block chain-based data uplink system, method and storage medium | |
US12052259B2 (en) | Blockchain folding | |
CN110837491B (en) | Block chain financial big data processing system and method | |
CN108696356B (en) | Block chain-based digital certificate deleting method, device and system | |
KR102179497B1 (en) | System for Data Storing and Managing based on Multi-cloud and Driving method thereof | |
DE102017202424A1 (en) | Controlled secure code authentication | |
CN113422688B (en) | Rapid auditing method for cloud storage data | |
CN108173827B (en) | Block chain thinking-based distributed SDN control plane security authentication method | |
CN104580487A (en) | Mass data storage system and processing method | |
CN104219232B (en) | Method for controlling file security of block distributed file system | |
EP3292495B1 (en) | Cryptographic data | |
CN112632639B (en) | Distributed trusted log management method based on blockchain | |
CN109347643B (en) | Ethernet-based user center system security supervision method and device | |
KR102330005B1 (en) | Hybrid blockchain system for efficient content change and deletion and XGS injection method using hybrid blockchain | |
CN112699416B (en) | File storage method, file verification method and electronic equipment | |
CN113326533B (en) | Electronic license service system and method based on blockchain and distributed file storage | |
WO2024088082A1 (en) | Method and device for auditing data integrity, and storage medium | |
CN109918451B (en) | Database management method and system based on block chain | |
CN110188545B (en) | Data encryption method and device based on chained database | |
CN115865320A (en) | Block chain-based security service management method and system | |
CN112101945B (en) | Method and system for supervising block chain content | |
CN108876378A (en) | Publicly-owned chain data enciphering back-up method | |
CN109067849A (en) | Method of data synchronization based on block | |
CN110569669A (en) | Data credible destroying method and system for cloud storage |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
WW01 | Invention patent application withdrawn after publication |
Application publication date: 20200717 |
|
WW01 | Invention patent application withdrawn after publication |