TWI769672B - Data sharing authorization method, blockchain system, sharing device, and query device - Google Patents

Abstract

A data sharing authorization method is provided. The method includes receiving an authorization application for shared data from a query device, encrypting the shared data according to the authorization application to generate authorization information; receiving a query application for the shared data from the query device, and verifying whether the query application is authorized; sharing the encrypted shared data to the query device when the query application is authorized; and the query device decrypting the shared data according to a decryption rule. A blockchain system, a sharing device, and a query device are also provided.

Description

Data sharing authorization method, blockchain system, sharing device and query device

The invention relates to the technical field of blockchain, and in particular, to a data sharing authorization method, a blockchain system, a sharing device and a query device.

The blockchain is a new type of decentralized agreement that can securely store digital currency transactions or other information. The information on the blockchain cannot be forged or tampered with. The transaction confirmation on it is completed by all nodes on the blockchain. Consensus algorithms guarantee consistency. Based on this, many nodes store private data on the blockchain and encrypt it with a private key. However, since nodes can access data from each other, in the case of leakage of the private key, the query terminal can still access the private data on the node, thus reducing the security of data storage.

In view of this, it is necessary to provide a data sharing authorization method, a block chain system, a sharing device and an inquiry device, which do not need to provide the private key and the public key of the sharing terminal during data sharing.

A first aspect of the present invention provides a data sharing authorization method, comprising: receiving an authorization application for shared data from a query device, encrypting the shared data and generating authorization information according to the authorization application; For the query application of the shared data, verify whether the query application is authorized according to the authorization information; when the query application is authorized, the sharing the encrypted shared data to the query device; the query device decrypts the shared data according to a decryption rule.

Preferably, the authorization application includes a public key provided by the query device, and after receiving the authorization application for the shared data from the query device, the public key is used to encrypt the shared data, and the query After receiving the encrypted shared data, the device decrypts the shared data by using the private key corresponding to the public key.

Preferably, the authorization application further includes the client name and data information for requesting shared data, and the authorization information includes at least the authorization order number, the authorization object, the data information for requesting shared data, the valid time and the number of inquiries; the inquiry application at least Include the customer name and the authorization number.

Preferably, the step of receiving an inquiry application for the shared data from the inquiry device, and verifying whether the inquiry application is authorized according to the authorization information further comprises: judging whether the authorization number in the inquiry application is the same as the authorization number in the inquiry application. The authorization order number in the authorization information is the same; it is judged whether the customer name in the inquiry application is the same as the authorization object in the authorization information; and when it is determined that the authorization order number in the inquiry application is the same in the authorization information When the authorization number is the same, and the customer name in the inquiry application is the same as the authorization object in the authorization information, it is determined that the inquiry application is authorized.

The second aspect of the present invention provides a blockchain system applying the above-mentioned data sharing authorization method, at least one query device is connected to the blockchain system; the blockchain system is used for receiving the shared data sent by the query device. the authorization application, encrypt the shared data and generate authorization information according to the authorization application; the blockchain system is used to receive the inquiry application for the shared data sent by the inquiry device, and verify the authorization information according to the authorization information. Query whether the application is authorized, and if the verification is authorized, the blockchain system shares the encrypted shared data to the query device; the query device decrypts the shared data according to a decryption rule.

Preferably, the blockchain system further includes a first blockchain, a second blockchain and at least one common device; the common device receives an authorization application for common data sent by the query device, Read the shared data from the first blockchain according to the authorization application, encrypt the shared data, generate authorization information, and write the encrypted shared data and the authorization information into the first blockchain Two blockchains; the second blockchain receives the query application from the query device, and verifies whether the query application is authorized according to the authorization information, and if the verification is authorized, the second blockchain will go through The encrypted shared data is shared with the query device.

Preferably, the first blockchain stores the shared data provided by the shared device, the second blockchain stores the data information corresponding to the shared data, and the query device obtains from the second blockchain The data information to be queried, and according to the data information, an authorization application for the shared data is sent to the shared device that provides the shared data.

Preferably, the shared device encrypts the shared data with a private key and writes it into the first blockchain, and writes the data information corresponding to the shared data into the second blockchain.

Preferably, the data information includes the data type, query parameters or/and data description of the shared data.

Preferably, the authorization application includes a public key provided by the query device, and the shared device encrypts the shared data and generates authorization information by using the public key; the query device receives the The encrypted shared data is decrypted with the private key corresponding to the public key.

Preferably, the authorization application further includes the client name and data information for requesting shared data, and the authorization information includes at least the authorization order number, the authorization object, the data information for requesting shared data, the valid time and the number of inquiries; the inquiry application at least Include the customer name and the authorization number.

A third aspect of the present invention provides a shared device, the shared device includes: a first processor; and a first memory, the first memory stores a plurality of program modules, the plurality of program modules are The first processor loads and executes the following method: receiving an authorization application for shared data from an inquiry device, encrypting the shared data and generating authorization information according to the authorization application; Write the encrypted shared data and the authorization information into a blockchain system, and the blockchain system receives a query application for the shared data from the query device, and shares the shared data according to the query application The encrypted shared data is given to the inquiry device.

A fourth aspect of the present invention provides a query device, the query device includes: a second processor; and a second memory, where a plurality of program modules are stored in the second memory, and the plurality of program modules are The second processor loads and executes the following method: sending an authorization request for the shared data, the shared data is encrypted according to the authorization request and generates authorization information, the encrypted shared data and the authorization information are written A blockchain system; sending a query application for the shared data, and receiving the encrypted shared data shared by the blockchain system according to the query application; decrypting the shared data according to a decryption rule.

The above-mentioned data sharing authorization method, blockchain system, sharing device and query device do not need to provide the private key and public key of the shared end when sharing data. Even if the private key of the shared end is leaked, the query end cannot use unauthorized In this case, the shared data is accessed through the private key of the shared terminal, which effectively guarantees the storage security of the data.

1: Shared device

11: The first processor

12: The first memory

13: The first computer program

2: Query device

21: Second processor

22: Second memory

23: Second computer program

3: Blockchain system

301: The First Blockchain

302: Second Blockchain

S1~S7: Steps

FIG. 1 is a schematic diagram of an application environment architecture of a data sharing authorization method provided by a preferred embodiment of the present invention.

FIG. 2 is a flowchart of a data sharing authorization method provided by Embodiment 1 of the present invention.

FIG. 3 is a schematic structural diagram of a blockchain system provided by Embodiment 2 of the present invention.

FIG. 4 is a schematic structural diagram of a sharing device provided in Embodiment 3 of the present invention.

FIG. 5 is a schematic structural diagram of a query apparatus according to Embodiment 4 of the present invention.

In order to more clearly understand the above objects, features and advantages of the present invention, the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present application and the features in the embodiments may be combined with each other in the case of no conflict.

In the following description, many specific details are set forth in order to facilitate a full understanding of the present invention, and the described embodiments are only some, but not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. The terms used herein in the description of the present invention are for the purpose of describing specific embodiments only, and are not intended to limit the present invention.

Please refer to FIG. 1 , which is a schematic diagram of an application environment architecture of a data sharing authorization method provided by a preferred embodiment of the present invention.

The data sharing authorization method of the present invention is applied to the sharing device 1 and the querying device 2, and the sharing device 1 and the querying device 2 are connected to each other through a network. The network may be a wired network or a wireless network, such as radio, wireless fidelity (Wireless Fidelity, WIFI), cellular and the like.

The shared device 1 , the query device 2 and other devices form a blockchain system 3 . The common device 1 and the query device 2 are both nodes of the blockchain system 3 . In this embodiment, the blockchain system 3 includes at least one blockchain for storing common data of each node and data information corresponding to the common data.

The sharing device 1 may be an electronic device installed with a data sharing authorization program, such as a personal computer, a server, etc., wherein the server may be a single server, a server cluster, or a cloud server. The sharing device 1 is used for sharing data.

The inquiring device 2 can also be an electronic device installed with a data sharing authorization program, such as a personal computer, a server, etc., for applying for inquiring about the shared data of the sharing device 1 .

Example 1

Please refer to FIG. 2 , which is a flowchart of a data sharing authorization method provided by Embodiment 1 of the present invention. According to different requirements, the order of the steps in the flowchart can be changed, and some steps can be omitted.

S1, the shared data is encrypted by the first private key and written into the blockchain system 3.

In this embodiment, the shared data is customer order information. The first private key is a random number set by the sharing device 1, which is a 256-bit binary number. S1 specifically includes: the sharing device 1 generates a first public key by using an encryption algorithm with the first private key, encrypts the shared data based on the first public key, and encrypts the encrypted data. The data is written into the blockchain system 3.

S2, write the data information corresponding to the shared data into the blockchain system 3.

In this embodiment, the data information includes at least the data type, query parameters and/or data description of the shared data. Wherein, the query parameter is a query parameter supported by the shared data, and the queryer can send the query parameter and the corresponding setting value to the shared device 1 through the query device 2 . It should be noted that the data information on the blockchain system 3 is public information, which can be accessed by any query device.

In this embodiment, as shown in FIG. 3 , the blockchain system 3 includes a first blockchain 301 and a second blockchain 302 . The first blockchain 301 is used to store the shared data provided by the shared device 1 , and the second blockchain 302 stores data information corresponding to the shared data. Preferably, the shared device 1 writes the encrypted shared data into the first blockchain 301 of the blockchain system 3 , and writes the data information corresponding to the shared data into the blockchain system 3 . The second blockchain 302 .

S3: Receive an authorization application for shared data from the query device 2, encrypt the shared data according to the authorization application, and generate authorization information.

In this embodiment, the query device 2 obtains the data information to be queried from the blockchain system 3, preferably from the second blockchain 302, and sends the shared data according to the data information. application for authorization. In this embodiment, the authorization application includes the client name of the inquiring device 2 , the data information for requesting shared data, and the second public key of the inquiring device 2 . For example, the data type in the data information is battery product order, the query parameter is A12222222, and the second public key is calculated by the query device 2 using SECP256K1 (elliptic curve algorithm) using its second private key generated by processing.

In the first embodiment, the query device 2 sends the authorization application for the shared data to the blockchain system 3 . The blockchain system 3, preferably the second blockchain 302 receives the authorization application, and obtains the authorization request from the first public key according to the data information in the authorization application and the first public key of the shared device 1. The blockchain 301 decrypts to obtain the corresponding shared data.

For example, when the data type is a battery product order and the query parameter is A12222222, the second blockchain 302 recognizes that the query parameter is an order number according to the format of the query parameter, so that the query parameter is an order number from the first query parameter. The shared data obtained by a blockchain 301 is the order data with the order number A12222222 in the battery product order.

Further, the blockchain system 3 encrypts the shared data according to the second public key of the query device 2, and generates the authorization information. In this embodiment, the authorization information at least includes an authorization order number, an authorization object, an effective time, and a number of inquiries. The authorization information is a smart contract between the sharing device 1 and the query device 2 . For example, the authorization order number in the authorization information is B100000, the authorization object is customer B, the valid time is 2020-8-1 00:00:00, and the number of inquiries is 5.

Further, the blockchain system 3 writes the encrypted shared data and the authorization information, and sends the authorization number in the authorization information to the inquiry device 2 . Preferably, the blockchain system 3 writes the encrypted shared data and the authorization information into the second blockchain 302 .

In the second embodiment, the inquiry device 2 sends the authorization application for the shared data to the shared device 1 . The sharing device 1 receives the authorization application, and determines corresponding sharing data according to the data information in the authorization application. Further, the sharing device 1 encrypts the sharing data according to the public key of the querying device 2, and generates the authorization information. Further, the shared device 1 writes the encrypted shared data and the authorization information into the blockchain system 3, preferably the second blockchain 302, and writes the encrypted shared data and the authorization information into the blockchain system 3, preferably the second blockchain 302. The authorization number is sent to the inquiry device 2 .

In the third embodiment, the query device 2 sends the authorization application for the shared data to the blockchain system 3 . The blockchain system 3 preferably receives the authorization application for the second blockchain 302, and sends the authorization application to the shared device 1 for confirmation. If the sharing device 1 authorizes the querying device 2 to query the shared data, a confirmation message is sent to the blockchain system 3 . When the blockchain system 3 receives the confirmation information sent by the shared device 1, the first public key of the shared device 1 is obtained from the first blockchain according to the data information in the authorization application and the first public key of the shared device 1. 301 Decrypt to obtain the corresponding shared data. Further, the blockchain system 3 encrypts the shared data according to the second public key of the query device 2, and generates the authorization information. Further, the blockchain system 3 writes the encrypted shared data and the authorization information, and sends the authorization number in the authorization information to the inquiry device 2 . Preferably, the blockchain system 3 writes the encrypted shared data and the authorization information into the second blockchain 302 .

In other embodiments, the authorization information includes a public part and a private part. The private part is encrypted and written into the second blockchain 302, and the public part is directly written into the second blockchain 302. The second blockchain 302 is described and set as public. In this embodiment, the disclosed part at least includes an authorization number.

S4: Receive an inquiry application for the shared data from the inquiry device 2, and verify whether the inquiry application is authorized according to the authorization information.

In this embodiment, the query device 2 generates the query application according to the customer name and the authorization number, and sends the generated query application to the blockchain system 3, preferably the second Blockchain 302.

When receiving the query application, the blockchain system 3 verifies whether the query application is authorized according to the authorization information. Specifically, by judging whether the authorization number in the inquiry application is the same as the authorization number in the authorization information, and judging whether the customer name in the inquiry application is the same as the authorization object in the authorization information, Determine whether the query application is authorized. When it is determined that the authorization order number in the inquiry application is the same as the authorization order number in the authorization information, and the customer name in the inquiry application is the same as the authorization object in the authorization information, it is determined that the inquiry application is authorized , and then the flow goes to S5. When it is determined that the authorization order number in the inquiry application is different from the authorization order number in the authorization information, and/or the customer name in the inquiry application is different from the authorization object in the authorization information, determine the inquiry application Not authorized, then the flow goes to S7.

S5 , share the encrypted shared data to the query device 2 .

In this embodiment, when the query application is authorized, the blockchain system 3 obtains the encrypted data corresponding to the authorization number and the customer name in the query application from the second blockchain 302 data, and share the encrypted shared data to the query device 2, that is, send the encrypted shared data to the query device 2.

S6, the query device 2 decrypts the shared data according to a decryption rule.

In this embodiment, the decryption rule is that the query device 2 decrypts the shared data by using the second private key corresponding to the second public key. That is, the inquiry device 2 is connected to After receiving the encrypted shared data, decrypt the shared data by using the second private key corresponding to the second public key.

S7, sending prompt information to the inquiry device 2 to reject the inquiry application.

The data sharing authorization method provided by the present invention does not need to provide the private key and public key of the shared end when performing data sharing, so even if the private key of the shared end is leaked, the query end cannot use the private key of the shared end without authorization. The key accesses shared data, which effectively guarantees the storage security of the data.

Embodiment 2

Please refer to FIG. 3 , which is a schematic diagram of an application environment architecture of the data sharing authorization method provided by Embodiment 3 of the present invention.

The blockchain system 3 includes, but is not limited to, a first blockchain 301 , a second blockchain 302 , at least one common device 1 and at least one query device 2 .

The shared device 1 encrypts the shared data with the first private key and writes it into the blockchain system 3 .

In this embodiment, the shared data is customer order information. The first private key is a random number set by the sharing device 1, which is a 256-bit binary number. S1 specifically includes: the sharing device 1 generates a first public key by using an encryption algorithm with the first private key, encrypts the shared data based on the first public key, and encrypts the encrypted data. The data is written into the blockchain system 3.

The shared device 1 also writes the data information corresponding to the shared data into the blockchain system 3 .

In this embodiment, the data information includes at least the data type, query parameters and/or data description of the shared data. Wherein, the query parameter is the query parameter supported by the shared data, and the queryer can send the query parameter and the corresponding setting value to the shared data through the query device 2 Use device 1. It should be noted that the data information on the blockchain system 3 is public information, which can be accessed by any query device.

In this embodiment, the first blockchain 301 is used to store the shared data provided by the shared device 1 , and the second blockchain 302 stores data information corresponding to the shared data. Preferably, the shared device 1 writes the encrypted shared data into the first blockchain 301 of the blockchain system 3 , and writes the data information corresponding to the shared data into the blockchain system 3 . The second blockchain 302 .

The blockchain system 3 is configured to receive an authorization application for shared data from the query device 2, encrypt the shared data according to the authorization application, and generate authorization information.

In this embodiment, the query device 2 obtains the data information to be queried from the blockchain system 3, preferably from the second blockchain 302, and sends the shared data according to the data information. application for authorization. In this embodiment, the authorization application includes the client name of the inquiring device 2 , the data information for requesting shared data, and the second public key of the inquiring device 2 . For example, the data type in the data information is battery product order, the query parameter is A12222222, and the second public key is calculated by the query device 2 using SECP256K1 (elliptic curve algorithm) using its second private key generated by processing.

In the first embodiment, the query device 2 sends the authorization application for the shared data to the blockchain system 3 . The blockchain system 3, preferably the second blockchain 302 receives the authorization application, and obtains the authorization request from the first public key according to the data information in the authorization application and the first public key of the shared device 1. The blockchain 301 decrypts to obtain the corresponding shared data.

For example, when the data type is a battery product order and the query parameter is A12222222, the second blockchain 302 recognizes that the query parameter is an order number according to the format of the query parameter, so that the query parameter is an order number from the first query parameter. The shared data obtained by a blockchain 301 is the order data with the order number A12222222 in the battery product order.

Further, the blockchain system 3 encrypts the shared data according to the second public key of the query device 2, and generates the authorization information. In this embodiment, the authorization information at least includes an authorization order number, an authorization object, an effective time, and a number of inquiries. The authorization information is a smart contract between the sharing device 1 and the query device 2 . For example, the authorization order number in the authorization information is B100000, the authorization object is customer B, the valid time is 2020-8-1 00:00:00, and the number of inquiries is 5.

Further, the blockchain system 3 writes the encrypted shared data and the authorization information, and sends the authorization number in the authorization information to the inquiry device 2 . Preferably, the blockchain system 3 writes the encrypted shared data and the authorization information into the second blockchain 302 .

In the second embodiment, the inquiry device 2 sends the authorization application for the shared data to the shared device 1 . The sharing device 1 receives the authorization application, and determines corresponding sharing data according to the data information in the authorization application. Further, the sharing device 1 encrypts the sharing data according to the second public key of the querying device 2, and generates the authorization information. Further, the shared device 1 writes the encrypted shared data and the authorization information into the blockchain system 3, preferably the second blockchain 302, and writes the encrypted shared data and the authorization information into the blockchain system 3, preferably the second blockchain 302. The authorization number is sent to the inquiry device 2 .

In the third embodiment, the query device 2 sends the authorization application for the shared data to the blockchain system 3 . The blockchain system 3 preferably receives the authorization application for the second blockchain 302, and sends the authorization application to the shared device 1 for confirmation. If the sharing device 1 authorizes the querying device 2 to query the shared data, a confirmation message is sent to the blockchain system 3 . When the blockchain system 3 receives the confirmation information sent by the shared device 1, the first public key of the shared device 1 is obtained from the first blockchain according to the data information in the authorization application and the first public key of the shared device 1. 301 Decrypt to obtain the corresponding shared data. Further, the blockchain system 3 according to the second query device 2 The public key encrypts the shared data and generates the authorization information. Further, the blockchain system 3 writes the encrypted shared data and the authorization information, and sends the authorization number in the authorization information to the inquiry device 2 . Preferably, the blockchain system 3 writes the encrypted shared data and the authorization information into the second blockchain 302 .

In other embodiments, the authorization information includes a public part and a private part. The private part is encrypted and written into the second blockchain 302, and the public part is directly written into the second blockchain 302 and set as public. In this embodiment, the disclosed part at least includes an authorization number.

The blockchain system 3 is further configured to receive an inquiry application for the shared data from the inquiry device 2, and verify whether the inquiry application is authorized according to the authorization information.

In this embodiment, the query device 2 generates the query application according to the customer name and the authorization number, and sends the generated query application to the blockchain system 3, preferably the second Blockchain 302.

When receiving the query application, the blockchain system 3 verifies whether the query application is authorized according to the authorization information. Specifically, by judging whether the authorization number in the inquiry application is the same as the authorization number in the authorization information, and judging whether the customer name in the inquiry application is the same as the authorization object in the authorization information, Determine whether the query application is authorized. When it is determined that the authorization order number in the inquiry application is the same as the authorization order number in the authorization information, and the customer name in the inquiry application is the same as the authorization object in the authorization information, it is determined that the inquiry application is authorized . When it is determined that the authorization order number in the inquiry application is different from the authorization order number in the authorization information, and/or the customer name in the inquiry application is different from the authorization object in the authorization information, determine the inquiry application Not authorized, and send a prompt message to the inquiry device 2 to reject the inquiry application.

The blockchain system 3 is also used for sharing the encrypted common data to the query device 2 when the query application is authorized.

In this embodiment, when the query application is authorized, the blockchain system 3 obtains the encrypted data corresponding to the authorization number and the customer name in the query application from the second blockchain 302 data, and share the encrypted shared data to the query device 2, that is, send the encrypted shared data to the query device 2.

The query device 2 decrypts the shared data according to a decryption rule.

In this embodiment, the decryption rule is that the query device 2 decrypts the shared data by using the second private key corresponding to the second public key. That is, after receiving the encrypted shared data, the query device 2 decrypts the shared data by using the second private key corresponding to the second public key.

Embodiment 3

Please refer to FIG. 4 , which is a schematic structural diagram of a sharing device according to Embodiment 3 of the present invention.

The shared device 1 includes, but is not limited to, a first processor 11 , a first memory 12 and a first computer program stored in the first memory 12 and executable on the first processor 11 13, such as data sharing authorization programs. When the first processor 11 executes the first computer program 13, some steps in the data sharing authorization method are implemented.

Specifically, the shared device 1 is connected to the blockchain system 3 . The first processor 11 implements the following methods when executing the first computer program 13: receiving an authorization application for shared data from the query device 2, encrypting the shared data and generating authorization information according to the authorization application; The encrypted shared data and the authorization information are written into the blockchain system 3, and the blockchain system 3 receives the query application for the shared data from the query device 2, and shares it according to the query application The encrypted common data is given to the inquiry device 2 .

Exemplarily, the first computer program 13 may be divided into one or more modules/units, the one or more modules/units are stored in the first memory 12, and are The processor 11 executes. The one or more modules/units may be a series of computer program instruction segments capable of accomplishing specific functions, and the instruction segments are used to describe the execution process of the first computer program 13 in the common device 1 .

Those skilled in the art can understand that the schematic diagram is only an example of the shared device 1, and does not constitute a limitation to the shared device 1, and may include more or less components than the one shown, or combine some components, or different Components, for example, the shared device 1 may also include input and output devices, network access devices, bus bars, and the like.

Embodiment 4

Please refer to FIG. 5 , which is a schematic structural diagram of a query apparatus according to Embodiment 3 of the present invention.

The query device 2 includes, but is not limited to, a second processor 21 , a second memory 22 and a second computer program stored in the second memory 22 and running on the second processor 21 23, such as data sharing authorization programs. When the second processor 21 executes the second computer program 23, some steps in the data sharing authorization method are implemented.

Specifically, the query device 2 accesses the blockchain system 3 . The second processor 21 implements the following method when executing the second computer program 23: sending an authorization application for the shared data to the shared device 1 or the blockchain system 3, and the shared device 1 or the blockchain system 3 according to The authorization application encrypts the shared data and generates authorization information, and the encrypted shared data and the authorization information are written into the blockchain system 3; an inquiry application for the shared data is sent, and according to the The query application receives the encrypted shared data shared by the blockchain system 3; decrypts the shared data according to a decryption rule.

Those skilled in the art can understand that the schematic diagram is only an example of the query device 2, and does not constitute a limitation on the query device 2, and may include more or less components than the one shown, or combine some components, or different Components, for example, the query apparatus 2 may also include input and output devices, network access devices, bus bars, and the like.

The so-called first processor 11 and the second processor 21 may be a central processing unit (Central Processing Unit, CPU), and may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), dedicated integrated circuits (Application Specific Integrated Circuit, ASIC), off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor, etc. The first processor 11 is the control center of the shared device 1, and uses various interfaces and lines to connect various parts of the entire shared device 1, and the first processor 11 is the control center of the shared device 1. The second processor 21 is the control center of the inquiring device 2 , and uses various interfaces and lines to connect various parts of the entire inquiring device 2 .

The first memory 12 and the second memory 22 can be used to store the computer programs and/or modules/units, and the first processor 11 is stored in the first memory 12 by running or executing The computer program and/or module/unit of the device, and the data stored in the first memory 12 are called to realize various functions of the shared device 1 . The second processor 21 implements the query by running or executing computer programs and/or modules/units stored in the second memory 22 and calling data stored in the second memory 22 Various functions of device 2. The first memory 12 and the second memory 22 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating device, an application program required for at least one function (such as a sound playback function, an image The data storage area can store data (such as audio data, phone book, etc.) created according to the use of the shared device 1 or the inquiry device 2. In addition, the first memory 12 and the second memory 22 may be volatile memories, and may also include non-volatile memories, such as hard disks, memory, plug-in hard disks, smart memory cards (Smart Memory Cards). Media Card, SMC), Secure Digital (SD) card, Flash Card (Flash Card), at least one disk memory device, flash memory device, or other memory device.

The data sharing authorization method, blockchain system, sharing device and query device provided by the present invention do not need to provide the private key and public key of the shared end when sharing data, so even if the private key of the shared end is leaked, the query end cannot In the case of unauthorized access to the shared data through the private key of the shared terminal, the storage security of the data is effectively guaranteed.

It will be apparent to those skilled in the art that the present invention is not limited to the details of the above-described exemplary embodiments, but that the present invention may be embodied in other specific forms without departing from the spirit or essential characteristics of the invention. Therefore, the embodiments should be considered in all respects as exemplary and not restrictive, and the scope of the present invention is defined by the appended claims rather than the foregoing description, and is therefore intended to fall within the scope of the application. All changes within the meaning and scope of equivalents to the scope of the patent are included in the present invention. Any reference signs in the patentable scope should not be construed as limiting the claimed scope. Furthermore, it is clear that the word "comprising" does not exclude other units or steps and the singular does not exclude the plural. Plural units or devices stated in the scope of the device application can also be realized by software or hardware by the same unit or device. The terms first, second, etc. are used to denote names and do not denote any particular order.

To sum up, the present invention complies with the requirements of an invention patent, and a patent application can be filed in accordance with the law. However, the above descriptions are only the preferred embodiments of the present invention, and for those who are familiar with the art of the present invention, equivalent modifications or changes made in accordance with the spirit of the present invention should all be covered within the scope of the following patent application.

S1~S7: Steps

Claims (11)

A data sharing authorization method is applied to a block chain system, the block chain system includes a first block chain and a second block chain, and the improvement is that the method includes: An authorization application for the shared data stored on the first blockchain, wherein the authorization application includes the data information obtained by the query device from the second blockchain for requesting the shared data and the first data of the query device. Two public keys; the shared device reads the shared data from the first blockchain according to the authorization application, and uses the second public key to encrypt the read shared data and Generating authorization information, wherein the shared data is encrypted by the shared device with a first private key and written into the first blockchain, and the data information is obtained by the query device from the second area The public information obtained on the blockchain, the authorization information is the smart contract of the blockchain system; receive the query application for the shared data from the query device, and verify whether the query application is obtained according to the authorization information. Authorization; when the query application is authorized, share the encrypted shared data to the query device; the query device decrypts the shared data by using the second private key corresponding to the second public key . The data sharing authorization method according to claim 1, wherein the authorization application further includes the client name, and the authorization information at least includes the authorization order number, the authorization object, the data information for requesting the shared data, the valid time and the number of inquiries; The query application at least includes the customer name and the authorization number. The data sharing authorization method according to claim 2, wherein the step of receiving an inquiry application for the shared data from the inquiry device, and verifying whether the inquiry application is authorized according to the authorization information further comprises: judging Whether the authorization number in the inquiry application is the same as the authorization number in the authorization information; determine whether the customer name in the inquiry application is the same as the authorization object in the authorization information; and When it is determined that the authorization number in the inquiry application is the same as the authorization number in the authorization information, and the customer name in the inquiry application is the same as the authorization object in the authorization information, it is determined that the inquiry application has been obtained authorized. A block chain system applying a data sharing authorization method, the improvement is that the block chain system includes a first block chain and a second block chain, and at least one inquiry device and at least one sharing device are connected to the block chain system. ; the sharing device is configured to receive an authorization application for the shared data stored on the first blockchain sent by the query device, wherein the authorization application includes the query device from the second blockchain The obtained data information requesting the shared data and the second public key of the query device; the shared device reads the shared data from the first blockchain according to the authorization application, and uses the The second public key encrypts the read shared data and generates authorization information, wherein the shared data is encrypted by the shared device with the first private key and written into the first block The data information is the public information obtained by the query device from the second blockchain, and the authorization information is the smart contract of the blockchain system; the blockchain system is used to receive all The query application for the shared data sent by the query device, verify whether the query application is authorized according to the authorization information, and if the verification is authorized, the blockchain system will share the encrypted shared data to the query device. ; the query device decrypts the shared data by using the second private key pair corresponding to the second public key. The blockchain system of claim 4, wherein the shared device also writes the encrypted shared data and the authorization information into the second blockchain; the second blockchain receives The query application of the query device, and verify whether the query application is authorized according to the authorization information, and if the verification is authorized, the second blockchain will share the encrypted shared data with the query device. The blockchain system according to claim 5, wherein the second blockchain stores data information corresponding to the shared data, and the query device obtains data to be queried from the second blockchain data information, and send an authorization application for the shared data to the shared device that provides the shared data according to the data information. The blockchain system of claim 6, wherein the shared device encrypts the shared data with a private key and writes it into the first blockchain, and writes the data information corresponding to the shared data into the second blockchain. The blockchain system of claim 6, wherein the data information includes the data type, query parameters or/and data description of the shared data. The blockchain system according to claim 8, wherein the authorization application further includes the client name, and the authorization information at least includes the authorization order number, the authorization object, the data information of the requested shared data, the valid time and the number of inquiries; The query application at least includes the customer name and the authorization number. A shared device, wherein the shared device comprises: a first processor; and a first memory, in which a plurality of program modules are stored, and the plurality of program modules are stored by the first processor Loading and executing the following method: receiving an authorization application from the query device for the shared data stored on the first blockchain of the blockchain system, wherein the authorization application includes the query device from the blockchain system. The data information for requesting the shared data and the second public key of the query device obtained by the second blockchain; read the shared data from the first blockchain according to the authorization application, and use The second public key encrypts the read shared data and generates authorization information, wherein the shared data is encrypted by the shared device with the first private key and written into the first area block chain, the data information is the public information obtained by the query device from the second block chain, and the authorization information is the smart contract of the block chain system; Authorization information is written into the blockchain system, and the blockchain system receives the query application for the shared data from the query device, and shares the encrypted shared data to the query according to the query application device. A query device, wherein the query device comprises: a second processor; and a second memory, in which a plurality of program modules are stored, and the plurality of program modules are stored by the second processor Loading and executing the following method: sending an authorization application for the shared data stored on the first blockchain of the blockchain system, the authorization application including the query device from the second blockchain of the blockchain system The obtained data information requesting the shared data and the second public key of the query device, encrypting the shared data according to the second public key and generating authorization information, the encrypted shared data and the Authorization information is written into the blockchain system, wherein the shared data is encrypted by the shared device with a first private key and written into the first blockchain, and the data information is obtained from the query device from The public information obtained on the second blockchain, the authorization information is the smart contract of the blockchain system; send a query application for the shared data, and receive the blockchain according to the query application The encrypted shared data shared by the system; the shared data is decrypted by using the second private key corresponding to the second public key.

Images