WO2019157810A1

WO2019157810A1 - Data transmission method and device and network node

Info

Publication number: WO2019157810A1
Application number: PCT/CN2018/103046
Authority: WO
Inventors: 张亮亮; 张向东; 常俊仁; 冯淑兰
Original assignee: 华为技术有限公司
Priority date: 2018-02-13
Filing date: 2018-08-29
Publication date: 2019-08-22
Also published as: CN110166411B; CN110166411A

Abstract

Disclosed are a data transmission method and device and a network node. The method comprises: a first node acquiring data information and key information of data recorded on a first blockchain; acquiring encrypted data according to the data information, and acquiring a key according to the key information of the data; and using the key to decrypt the encrypted data to acquire data. The method utilizes the characteristics of data sharing on a blockchain, such that a first node of a requester can directly acquire data information from any blockchain node of the blockchain, thereby reducing the burden of repeated transmission of data information on a core network or among multiple routes, and reducing transmission delays.

Description

Data transmission method, device and network node

The present application claims priority to Chinese Patent Application No. 201101151008.6, entitled "A Data Transmission Method, Apparatus, and Network Node", filed on February 13, 2018, the entire contents of In this application.

Technical field

The present application relates to the field of communications, and in particular, to a data transmission method, apparatus, and network node.

Background technique

In the current communication system, in order to reduce the delay of users to obtain services, a method of mobile edge calculation is proposed. That is, storing data to provide services to users near a user (such as a base station or router), but the provision of services or data is still subject to a monopoly of third parties.

In addition, the basic idea of the Content Delivery Network (CDN) is to avoid the bottlenecks and links on the Internet that may affect the speed and stability of data transmission, so that the content transmission is faster and more stable. By placing a layer of intelligent virtual network based on the existing Internet on the network, the CDN system can real-time based on network traffic and connection, load status, and distance and response time to users. The integrated information redirects the user's request to the service node closest to the user. The purpose is to enable users to obtain the required content in the vicinity, solve the congestion of the Internet network, and improve the response speed of users visiting the website.

But whether it is edge computing or content distribution network, in the current communication system, most of the services or data are concentrated in a certain central platform to provide services for users. In this model, there are two main problems: on the one hand, the providers of data and services are subject to monopoly platforms, and the interests of the providers of data or services cannot be truly protected. Another aspect is that the data is stored in the cloud center or the server. When the user obtains the service or data, the user needs to obtain the centralized access from the center. From the perspective of the network transmission, the same data is repeatedly transmitted in the network.

Therefore, in the process of directly providing the service and data provided by the provider to the user, how to ensure the security of the service or the provided data or service and at the same time reduce the network transmission load is a problem that a person skilled in the art needs to solve.

Summary of the invention

The present application provides a data transmission method, apparatus and network node, which can be applied to an Internet of Things scenario, and aims to achieve access and sharing of resources between network nodes.

In a first aspect, the present application provides a data transmission method, which may be applied to a data requesting party, such as a first node, the method comprising: the first node acquiring data information and data from a first blockchain node Key information, obtaining encrypted data according to the data information, obtaining a key according to the key information of the data, and decrypting the encrypted data by using the key to obtain data.

The data information includes: address information of the encrypted data or the encrypted data, and the address information of the encrypted data is used to indicate the location of the encrypted data.

The key information of the data includes key information of the encrypted data or address information of the stored encrypted data. It should be specially noted that the key information of the data can be generated by being encrypted by the public key of the first node.

The method provided by the present aspect utilizes the characteristics of data sharing on the blockchain, so that the requesting party, for example, the first node can directly obtain data information from any blockchain node of the blockchain, thereby reducing data information in the core network or The burden of repeated transmission between multiple routes, less transmission delay.

In addition, the first node obtains key information of the data through the first block chain node, and since the key information of the data is encrypted by the public key of the first node, the authorized first node can decrypt and read the data. Other nodes cannot decrypt and access the data, thereby increasing the security of data transmission.

In a possible implementation, the obtaining a key according to the key information of the data includes: when the key information of the data is an encrypted data key, the first node uses its own The private key decrypts the encrypted data key to obtain the key. or,

In another possible implementation manner, when the key information of the data is address information for storing the encrypted data key, the first node searches for the encrypted data key according to the address information, and The encrypted data key is decrypted using its own private key to obtain the key.

When the key information of the data is the encrypted data key or the address information of the data key, the data key is prevented from being sent in the plaintext in the network, thereby preventing the intermediate network node from directly obtaining the data key in the forwarding process. The security and reliability of data transmission are further improved.

In another possible implementation manner, the first node obtains key information of data from the first blockchain node, including: the first node obtains transaction index information, where the transaction index information includes a block number, One or more of a block height, a transaction index number, or a blockchain identifier; determining the first blockchain transaction based on the transaction index information, wherein the data is recorded in the first blockchain transaction Key information, obtaining key information of the data according to the first blockchain transaction; or, the first node sends the transaction index information to a relay node, and receiving the relay node according to the transaction The key information of the data fed back by the index information.

In this implementation manner, the first node can quickly find the first blockchain transaction matching the information according to the content in the transaction index information, such as the block number or the transaction index, and then quickly obtain the information recorded in the transaction. The key information of the data realizes fast acquisition of shared information on the blockchain, and the time consumption is shortened compared to the key information obtained from the data source node or the data provider.

In another possible implementation manner, the obtaining, by the first node, the data information includes: the first node receiving any blockchain node from the first blockchain, or any blockchain node of the second blockchain, Or the data information of the data source node; or the first node receives the data information from the relay node, the relay node is a node that pre-stores the data information; or the first node slave blockchain Extracting and obtaining the data information.

In this implementation manner, the first node may obtain the data information from any blockchain node that stores data information, and may also obtain the data from the relay node closest to the first node, thereby realizing fast acquisition of data information. Reduce transmission time and improve transmission and access efficiency.

In another possible implementation manner, the data information includes: encrypted data or address information of the encrypted data; the first node obtains the encrypted data according to the data information, and includes: when the data information is the encrypted data, the first node The encrypted data may be obtained directly from the data information; when the data information is address information of the encrypted data, the first node searches for the location of the encrypted data through the address information of the data, and obtains the encrypted data. In this implementation manner, the data or the data address is transmitted in the blockchain in an encrypted manner, which improves the security of the transmitted information.

In another possible implementation manner, the method further includes: the first node will obtain key information of the data from the first block chain node, and/or obtain an event of the data information. For the first transaction, it is recorded on the third blockchain.

Exemplarily, the first transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, and a transaction identifier of the blockchain node. Information, transaction index information, cross-chain identification, hash hash of data, data information hash, address information hash of encrypted data, or key information hash of data.

In another possible implementation manner, the method further includes: receiving, by the first node, a request message from the second node, where the request message includes first information, where the first information includes a data identifier, and the second node One or more of an identifier, a second node public key, or transaction index information; the first node according to one or more of the data identifier, the second node identifier, the second node public key, or the transaction index information The item acquires key information of the data information and/or the data; and transmits the key information of the data information and/or the data to the second node.

In another possible implementation manner, the method further includes: the first node obtaining the private key or the public key generation source of the first node according to the excitation response generated by the physical unclonable function PUF technology.

In another possible implementation manner, the method further includes: the first node generates an excitation response according to the physical unclonable function PUF technology, and uses at least one of the hash of the excitation and the excitation response as the identification information of the first node, So that the identification information of the first node is recorded on the blockchain; the transaction recorded on the blockchain includes one or more of the following: an incentive, a hash of the incentive response, a node identifier, and a time at which the response is generated. The public key of the node.

In another possible implementation manner, the method further includes: the first node obtains a hash of the data from the blockchain, obtains a hash of the decrypted data by using the decrypted data and a hash algorithm, and determines a hash of the data. Whether the hash of the decrypted data is the same, if the two values are the same, the data obtained by the first node is trusted data, and if not, the data obtained by the first node is the falsified data.

In a second aspect, the present application further provides a data transmission method, which is applied to a node on a blockchain, such as a first blockchain node, and the method includes: obtaining, by using the first information, the first blockchain node Key information requested by a node and/or key information of the data, wherein the first information includes one or more of a data identifier, a first node identifier, a public key of the first node, and transaction index information; Transmitting, by the first blockchain node, key information of the data information and/or data to the first node, so that the first node obtains encrypted data according to the data information, and key information according to the data The key is obtained, thereby enabling decryption and reading of the encrypted data using the key.

It should be noted that the key information of the data may be provided by a blockchain node on the first blockchain, and the data information may be provided by a blockchain node on the second blockchain. It is also possible that the key information and the data information of the data are all provided by the same blockchain node, and the present application does not specifically limit the blockchain node that provides the information to the first node.

With reference to the second aspect, in a possible implementation manner of the second aspect, the first blockchain node obtains the key information of the data by using the first information, including: the first blockchain node receives the first a request message forwarded by a node or a relay node, where the request message includes the first information; according to the data identifier in the first information, the first node identifier, the public key of the first node, or the transaction index information Searching for one or more of the transactions associated with the first information, the key information of the data being recorded in the transaction; and obtaining key information of the data from the transaction, thereby utilizing the area The blockchain consensus mechanism can quickly obtain key information of data and improve data transmission and access efficiency.

In a possible implementation, the searching for the transaction related to the first information further includes: obtaining, by the first blockchain node, a first identifier, determining, according to the first information and the first identifier, The transaction, wherein the first identifier comprises: a first blockchain node identifier, transaction identifier information of a first blockchain node, a second blockchain node identifier, transaction identifier information of a second blockchain node, or a cross-chain identifier or the like; the cross-chain identifier is used to connect the first block chain and the second block chain, and if the first block and the second block chain are the same block chain, the cross-chain Identifies the connection ID. The first identifier may be pre-stored in the first blockchain or acquired by other nodes.

In this implementation manner, adding the first identifier to the related transaction on the basis of the first information, the data information of the first node of the requesting party and/or the key information of the data may be accurately and quickly determined, thereby improving the accuracy of the search. Sex.

In another possible implementation manner, the first blockchain node obtains the data information requested by the first node by using the first information, where: the first blockchain node obtains the first information; according to the first information Obtaining the data information from the second blockchain or the relay node or the data source node, or the first blockchain node determines, according to the first information, that the first blockchain node stores the The data information finds and obtains the data information related to the first information.

In this implementation manner, if the first block link node stores the data information required by the first node, the data information is directly provided to the first node, thereby saving time acquired from other nodes and improving transmission efficiency.

With reference to the second aspect, in a still further implementation manner of the second aspect, before the first blockchain node obtains the key information of the data information and/or the data, the method further includes: The blockchain node generates transaction index information for determining a first blockchain transaction in which key information of the data is recorded, the transaction index information including a block number, a block height, and a transaction index One or more of the number or the blockchain identifier; the transaction index information is sent to the first node; or the first blockchain node sends the address information of the encrypted data requested by the first node to The first node or a relay node.

In a third aspect, the present application further provides a data transmission method, which is applied to a relay node, such as a base station, where the method includes: the relay node obtains a request message from the first node, where the request message includes the first information. The first information includes one or more of a data identifier, a first node identifier, a first node public key, and or transaction index information; and obtaining the data information and/or data density according to the first information. Key information; transmitting the key information of the data information and/or data to the first node.

In a possible implementation manner, the obtaining, by the relay node, the data information according to the first information includes: determining whether the first node has an access right; if yes, obtaining the data information; No, the access request of the first node is rejected, for example, a message indicating that the access is denied is fed back to the first node.

The relay node obtains the data information, specifically: the relay node obtains the data information from a local relay node if the data information is already stored; or, the data is not stored. In the case of information, the data information is obtained from a first blockchain, a second blockchain, or a data source node, and then forwarded to the first node.

In another possible implementation manner, the relay node obtains the key information of the data according to the first information, including: the relay node searching, according to the first information, whether there is any information related to the first information. Transaction in which the key information of the data is recorded; if so, indicating that the first node has access rights, and the relay node obtains key information of the data from the transaction; if not, Do not have access, refuse access. The relay node replies to the first node with a message for notifying the key information or the data information that the data is denied for the first node.

In another possible implementation manner, the obtaining, by the relay node, the key information of the data from the transaction, including: the relay node sending the request message to the first blockchain node; receiving The first blockchain node generates key information of the data fed back according to the request message, and the key information of the data is encrypted by the public key of the first node.

In another possible implementation, the relay node obtains the key information of the data information and/or the data according to the first information, including: the relay node obtains the first identifier, the first identifier The method includes: a first block chain node identifier, transaction identification information of a first block chain node, a second block chain node identifier, transaction identification information of a second block chain node, or a cross-chain identifier; The first information and the first identifier obtain key information of the data information and/or data.

In another possible implementation manner, the method further includes: the relay node sends the key information of the data information and/or data to the first node as a second transaction, and records the third blockchain. .

Exemplarily, the second transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, transaction index information, a first blockchain node identifier, and a first transaction Transaction identification information of a blockchain node, second blockchain node identifier, transaction identification information of the second blockchain node, cross-chain identification, data hash hash, data information hash, encrypted data address information hash or Key information hash of data, etc.

In a fourth aspect, the present application further provides a data transmission method, where the method is applicable to a data source node, where the data source node is configured to provide data information and key information of the data to the first node; specifically, the method The method includes: the key information generated by the data source node to generate data; and the key information of the data is recorded on the first blockchain, so that any one of the blockchain nodes on the first blockchain stores the confidentiality of the data. The key information is quickly provided to the first node of the requester, shortening the transmission delay and improving the transmission efficiency.

In another possible implementation manner, the data source node generates key information of the data, including: the data source node receives the request message forwarded from the first node or forwarded by the relay node, where the request message includes the first Information, the first information includes one or more of a data identifier, a first node identifier, or transaction index information, and the data source node determines a public key of the first node according to the first information, and uses the The public key of the first node encrypts the key of the data to generate key information of the data.

In another possible implementation, the data source section records the key information of the data on the first blockchain, including: the data source node sends the key information of the data to the first blockchain. a node to record key information of the data on the first blockchain by the first blockchain node; or the data source node broadcasts and stores the key information of the data to the first On the blockchain.

In another possible implementation, the method further includes: the data source node records, on the second blockchain, the encrypted data requested by the first node; or broadcasts and stores the encrypted data to the On the second blockchain, the data information includes encrypted data or address information of the encrypted data.

In another possible implementation, the data source node obtains the public key of the first node, and generates key information of the data according to the public key of the first node, specifically, the data source node uses the public key of the first node. Encrypting the key of the data to generate key information of the data; or the data source node encrypting the key of the data by using a public key of the first node, and storing the encrypted data A key, the address of the key storing the encrypted data is used as key information of the data. The key information of the data includes: an encrypted data key or address information storing an encrypted data key.

In a fifth aspect, the present application further provides a data transmission method, which is applied to a node on a second blockchain, such as a second blockchain node, where the node is used to provide data information for the first node, specifically, The method includes: the second block chain node acquires a request message from the first node, where the request message includes first information, where the first information includes one of a data identifier, a first node identifier, or transaction index information. And the second blockchain node determines, in the case that the first node has the access right, the data information required by the first node, and sends the data information to the first node, where the data information includes encryption Address information for data or encrypted data.

The second blockchain node and the relay node may be the same node, or may be the same as the foregoing first blockchain node, and may be different, which is not limited in this application.

In a sixth aspect, the present application further provides a data transmission device, where the device includes a receiving module, a processing module, and a sending module, and may further include a storage module, etc., each module in the device is configured to execute the first aspect to the foregoing Five aspects, and data transmission methods of various implementations in various aspects.

In a possible design, the embodiment of the present application further provides another data transmission device, which is used to implement the function of the behavior of the first node in the foregoing method. The functions may be implemented by hardware or by corresponding software implemented by hardware. The hardware or software includes one or more modules corresponding to the above functions, and the modules may be software and/or hardware. For example, the hardware corresponding to the transceiver module may be a transceiver, and the hardware corresponding to the processing module may be a processor. Further, a memory may also be included.

In a seventh aspect, the application provides a network node, which may be a node requesting access to data, such as a first node, the network node comprising: a transceiver for obtaining data information and from a first blockchain Key information of the data of the node; a processor, configured to obtain the encrypted data according to the data information, and obtain a key according to the key information of the data, and decrypt the encrypted data by using the key to obtain data.

In a possible implementation manner, the key information of the data includes: an encrypted data key or address information storing an encrypted data key; the processor, specifically for the confidentiality of the data When the key information is the encrypted data key, decrypting the encrypted data key with a private key to obtain the key; or, the key information of the data is encrypted for the storage When the address information of the data key is obtained, the encrypted data key is obtained based on the address information, and the encrypted data key is decrypted using the private key to obtain the key.

In another possible implementation manner, the transceiver is specifically configured to obtain transaction index information, where the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier. The processor is specifically configured to determine, according to the transaction index information, the first blockchain transaction, where the key information of the data is recorded in the first blockchain transaction, according to the first zone Blockchain transaction obtaining key information of the data; or transmitting, by the transceiver, the transaction index information to a relay node, and receiving a key of the data fed back by the relay node according to the transaction index information information.

In another possible implementation manner, the transceiver is specifically configured to receive any blockchain node from the first blockchain, or any blockchain node of the second blockchain, or a data source node. The data information; or, receiving the data information from the relay node, the relay node is a node that pre-stores the data information; or extracting and obtaining the data information from the blockchain.

In another possible implementation, the data information includes: encrypted data or address information of the encrypted data; the processor is specifically configured to: when the data information is the encrypted data, from the data information Obtaining the encrypted data; or, when the data information is the address information of the encrypted data, searching and obtaining the encrypted data by using the address information of the data.

In another possible implementation, the processor is further configured to: obtain key information of the data from the first blockchain node, and/or obtain the data information as a first transaction. , recorded on the third blockchain.

In another possible implementation manner, the first transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, and a region. Transaction identification information, transaction index information, cross-chain identification, hash hash of data, data information hash, address information hash of encrypted data, or key information hash of data.

In an eighth aspect, the application further provides a network node, where the network node may be any node on the blockchain, for example, a first blockchain node, where the network node includes: a processor, configured to pass the first The information obtains the data information requested by the first node and/or the key information of the data, wherein the first information includes: one of a data identifier, a first node identifier, a public key of the first node, or transaction index information or a plurality of transceivers, configured to send the key information of the data information and/or data to the first node.

In another possible implementation, the processor is configured to receive, by using the transceiver, a request message that is forwarded from a first node or a relay node, where the request message includes the first information; And searching for a transaction related to the first information according to one or more of a data identifier, a first node identifier, a public key of the first node, and transaction index information in the first information, where the transaction records Key information of the data; and key information for obtaining the data from the transaction.

In another possible implementation, the processor is specifically configured to obtain a first identifier, and determining, according to the first information and the first identifier, that the first identifier of the transaction includes: a first block The chain node identifier, the transaction identifier information of the first blockchain node, the second blockchain node identifier, the transaction identifier information of the second blockchain node, or the cross-chain identifier.

In another possible implementation, the processor is specifically configured to obtain the first information, and obtain the foregoing information from a second blockchain or a relay node or a data source node according to the first information. Data information, or determining, according to the first information, that the data information is stored on the first blockchain node, and searching for and obtaining the data information related to the first information.

In another possible implementation, the processor is further configured to generate transaction index information, where the transaction index information is used to determine the record, before obtaining the key information of the data information and/or the data. a first blockchain transaction of key information of the data, the transaction index information including one or more of a block number, a block height, a transaction index number, and a blockchain identifier; using the transceiver The transaction index information is sent to the first node; or the address information of the encrypted data that the first node requests to access is sent to the first node or the relay node by using the transceiver.

In a ninth aspect, the application further provides a network node, where the network node may be a relay node, specifically, the network node includes: a transceiver, configured to obtain a request message from the first node, the request message Included in the first information, the first information includes one or more of a data identifier, a first node identifier, a public key of the first node, and transaction index information; and a processor, configured to obtain, according to the first information The key information of the data information and/or the data; the transceiver is further configured to send the key information of the data information and/or data to the first node.

In a possible implementation, the processor is specifically configured to determine, according to the first information, whether the first node has access rights; if yes, obtain data information; if not, reject the first node Access request;

In another possible implementation, the processor is specifically configured to: according to the first information, whether there is a transaction related to the first information, where the key information of the data is recorded in the transaction. If yes, the key information of the data is obtained from the transaction; if not, the access is denied.

In another possible implementation, the processor is specifically configured to send, by using a transceiver, the request message to the first blockchain node, and receive the first blockchain node according to the request message. The key information of the fed back data, the key information of the data is generated by being encrypted by the public key of the first node.

In another possible implementation, the processor is specifically configured to obtain a first identifier, and obtain key information of the data information and/or data according to the first information and the first identifier. The first identifier includes: a first blockchain node identifier, transaction identifier information of the first blockchain node, a second blockchain node identifier, transaction identifier information of the second blockchain node, or a cross-chain identifier.

In another possible implementation, the processor is further configured to send the key information of the data information and/or data to the first node as a second transaction, and record the third blockchain. on.

In a tenth aspect, the application further provides a network node, such as a data source node, for providing key information of data information and data for the first node; specifically, the network node includes: a processor, configured to generate Key information of the data; recording key information of the data on the first blockchain, so that any one of the blockchain nodes on the first blockchain stores the key information of the data and Quickly provide the first node to the requester, shortening the transmission delay and improving transmission efficiency.

In a possible implementation, the method further includes: a transceiver, configured to receive a request message forwarded from the first node or forwarded by the relay node, where the request message includes first information, where the first information includes a data identifier The one or more of the first node identifier or the transaction index information, where the processor is specifically configured to determine a public key of the first node according to the first information, and utilize a public key pair of the first node The key of the data is encrypted to generate key information of the data.

In another possible implementation, the processor is specifically configured to send, by using the transceiver, key information of the data to a first blockchain node to pass the first blockchain node. The key information of the data is recorded on the first blockchain; or the key information of the data is broadcasted and stored on the first blockchain.

In another possible implementation, the processor is further configured to record the encrypted data requested by the first node to be accessed on the second blockchain; or broadcast and store the encrypted data to the first On the two blockchain, the data information includes encrypted data or address information of the encrypted data.

In another possible implementation, the processor is further configured to: use a public key of the first node to encrypt a key of the data to generate key information of the data; or, by using a first node The public key encrypts the key of the data and stores the key of the encrypted data, and the address of the key storing the encrypted data is used as the key information of the data.

In an eleventh aspect, the present application further provides a computer storage medium, where the computer storage medium can store instructions, which can implement some or all of the implementation manners or embodiments of the data transmission method provided by the application. step.

Illustratively, the computer storage medium can be stored in a memory of the network node described above.

In a twelfth aspect, there is also provided, in the application, a computer program product comprising instructions which, when executed on a computer, cause the computer to perform the data transmission method of the above aspects.

In a thirteenth aspect, the present application further provides a data transmission system, including: a first node, a first blockchain node, and a relay node, and further includes a data source node and a second block chain node. , the second node, and so on.

The first node is configured to perform the method steps in the implementations of the foregoing first aspect and the first aspect; the first blockchain node is configured to perform the method steps in the implementations of the foregoing second aspect and the second aspect; The relay node is configured to perform the method steps in the foregoing third and third implementations; in addition, the data source node is configured to perform the method steps in the foregoing fourth and fourth implementations; The two-block chain node is used to perform the method steps in the implementations of the fifth and fifth aspects above.

It should be noted that each node in the data transmission system provided by the present application may be collectively referred to as a network node, and the network node may represent various network element devices, stations, base stations, user equipment UEs, terminals, and the like. In addition, the two concepts of the device and the node in the various embodiments of the present application are equivalent, that is, the device may refer to a node, a station, a UE, a network element device, a sensor, and the like.

The technical solution disclosed in the present application combines mobile edge computing and blockchain technology to provide services for users with low latency and low load, and also ensures data transmission security and data service provider. interest.

The data transmission method, device and network node provided by the application utilize the characteristics of data sharing on the blockchain, so that the requesting party, for example, the first node can directly obtain data information from any blockchain node of the blockchain, thereby reducing the data information. The burden of repeated transmission of data information between the core network or multiple routes reduces transmission delay and improves transmission efficiency.

And, the first node obtains key information of the data through the first block chain node, and since the key information of the data is encrypted by the public key of the first node, the authorized first node can decrypt and read the data, Other nodes cannot decrypt and access the data, thereby increasing the security of data transmission.

In addition, the blockchain node or the relay node verifies whether the first node has the access right according to the request message from the first node, and issues a transaction related to the request message, such as key information of the data, according to the verification result, and Nodes that do not have permission are denied access requests, which in turn improves the transmission efficiency while ensuring the rights of the data provider.

In addition, in the present application, after decrypting and accessing the data, the first node verifies the authenticity and integrity of the decrypted data by comparing the data hash on the acquired blockchain with the hash generated by the decrypted data. A node can determine whether the acquired data has been tampered with.

It should be noted that, in the foregoing aspects or implementation manners of the present application, a blockchain technology is further included, where the method includes: a first blockchain for recording key information of data; the second block The chain is used to record information of the data: the third block chain is used to record the first node to provide key information of the data to the second node.

The present application also provides a method for: in a scenario where multiple chains exist, different blockchains are used to process different things and record different information. In each blockchain, transactions are recorded information units, and one block includes multiple transactions, and multiple blocks are connected into one blockchain. Sometimes the different blockchains are related to each other, so the transactions are also related to each other. How to link multiple related transactions in a multi-chain scenario is very necessary. In the present invention, in the data sharing scenario, the encrypted data is shared to the Yth node for the node X, the key information of the encrypted data is recorded in the first blockchain, and the encrypted data information such as data The hash is recorded with a second blockchain, which can be used to record the node X to provide key information to the node Y, so the transactions of the three blockchains are associated, Therefore, identification is needed to associate them, facilitating multi-chain collaboration and cross-chain calling, while achieving traceability of relevant and diverse information.

Specifically, in a twelfth aspect, a method for applying a blockchain technique, the method comprising: the first blockchain and the second blockchain are the same blockchain; or The third blockchain and the second blockchain are the same blockchain; or the first blockchain and the third blockchain are the same blockchain; or the first blockchain, The second blockchain and the third blockchain are the same blockchain; in another possible implementation, the method further includes: trading of the first blockchain, and B of the second blockchain The transaction, the A transaction and the B transaction are related transactions, whereby the two blockchains use the cross-chain identification to associate the two transactions; or the first block transaction of the first block chain, the third block chain The C transaction, the A transaction and the C transaction are related transactions, whereby the two blockchains use the cross-chain identifier to associate the two transactions; or the second blockchain B transaction, the third The C-transaction of the blockchain, the B-transaction and the C-transaction are related transactions, whereby the two blockchains use the cross-chain identification to close the two transactions. Or; the first block transaction of the first blockchain, the second transaction of the second blockchain, and the third transaction of the third blockchain are related transactions, whereby the three blockchains utilize the cross-chain identification to Related transactions;

In another possible implementation manner, the method further includes: when the first blockchain and the second blockchain are the same blockchain, the A transaction, the B transaction is a related transaction, and the method is The connection identifier associates the related transaction; when the first blockchain and the third blockchain are the same blockchain, the A transaction, the C transaction is a related transaction, and the related transaction is associated by using the connection identifier. When the second blockchain and the third blockchain are the same blockchain, the Bth transaction, the Cth transaction is a related transaction, and the related transaction is associated by using a connection identifier; When the blockchain, the second blockchain, and the third blockchain are the same blockchain, the A transaction, the B transaction, and the C transaction are related transactions, and the related transaction is associated by using the connection identifier; In a possible implementation manner, the connection identifier and the cross-chain identifier are the same identifier.

In another possible implementation manner, the first blockchain is used to record key information of the data, and the first transaction of the first blockchain includes at least one of the following: a connection identifier, a cross-chain identifier, Identification information of the first node, the data identifier, the first node identifier, the device identifier of the first node, the public key of the first node, the key information of the data, the transaction index information, the time of accessing the data, the first blockchain node The identifier, the transaction identifier information of the first blockchain node, the hash hash of the data, the key information hash of the data, and the like.

Alternatively, the second blockchain is used to record information of the data, and the B-transaction of the second blockchain includes at least one item: a connection identifier, a cross-chain identifier, identification information of the first node, data identifier, a node identifier, a device identifier of the first node, a public key of the first node, transaction index information, a second block chain node identifier, a transaction identifier information of the second block chain node, a hash hash of the data, and a data information hash The address information hash of the encrypted data or the key information hash of the data, the stimulus, the hash of the stimulus response, the time when the response is generated, and the like.

Alternatively, the third blockchain is used to record that the node X provides key information and or data information to the node Y, and the C transaction of the third blockchain includes at least one of the following: a connection identifier, a cross-chain Identification, identification information of the first node, data identifier, first node identifier, public key of the first node, time of accessing the data, blockchain node identifier, transaction identifier information of the blockchain node, transaction index information, cross-chain Identification, data hash hash, data information hash, encrypted data address information hash, data key information hash, first node acquisition data information and data key information transaction, the first blockchain is the first node The key information of the data is provided, the second blockchain is key information for providing data to the first node, and the like.

The method described in this aspect may be implemented by a hardware, for example, the hardware may include a processor and a transceiver, wherein the processor performs a recording function in the above method, and the transceiver performs the above method notification function; or the method may also pass the software Execute the corresponding instructions to achieve. The hardware can be used stand-alone or as an integrated module in combination with other hardware devices. This embodiment can also be used in combination with other embodiments of the present invention. In this regard, the embodiments of the present invention are not specifically limited. As long as the technical problem of the present invention can be solved, that is, how to associate multiple related transactions in a multi-chain scenario to achieve convenient multi-chain cooperation and cross-chain calling in a multi-chain scenario, and at the same time realize a traceability effect of various related information. All belong to the scope of the invention to be protected.

DRAWINGS

1 is a schematic diagram of data transmission in a network provided by the present application;

2 is a schematic flowchart of a data transmission method according to an embodiment of the present application;

FIG. 3 is a signaling flowchart of a data transmission method according to an embodiment of the present application;

FIG. 4 is a signaling flowchart of another data transmission method according to an embodiment of the present application;

FIG. 5 is a signaling flowchart of still another data transmission method according to an embodiment of the present application;

FIG. 6 is a signaling flowchart of still another data transmission method according to an embodiment of the present application;

FIG. 7 is a schematic structural diagram of a data transmission apparatus according to an embodiment of the present application;

FIG. 8 is a schematic structural diagram of a network node according to an embodiment of the present disclosure.

Detailed ways

The above-mentioned objects, features, and advantages of the embodiments of the present application can be more clearly understood and understood by those skilled in the art. The program is explained in further detail.

The technical solution provided by the present application solves the security problem that the user directly provides the service or data to the data providing direction. Specifically, referring to FIG. 1, a schematic diagram of data flow in a network is provided, where the network includes a data source node (source D) providing data parties, and a relay node (relay) capable of forwarding data or services, for example, Following the Node B and the relay node C, the request message for receiving and forwarding the user, and the feedback data to the requesting user, and at least one user.

When the requesting user A sends a request message to the data source node D to request access to the data, the request message is sequentially forwarded by at least one relay node (for example, the relay node B and the relay node C), and finally reaches the data source. Node D, after receiving the request message, the data source node D feeds back the corresponding data to the user A for the user A to access. At this time, when the user E sends a request message to the data source node D requesting access to the data, the request message from the user E is also forwarded by the relay node to the data source node D, and the data source node D receives the request message. Then feedback the result to user E.

In the process of data flow, both the request message and the data are forwarded through multiple relay nodes, so a certain delay is generated, and for users far away from the data source node, obtaining feedback results is time consuming. Long, in addition, the service that requires a large amount of forwarding and feedback data at the relay node also increases the transmission burden. On the other hand, the data source node guarantees the transmission security and the interests of the requesting party. When the data source node provides the data to the user A, that is, when the access right of the user A is allowed, the user E is denied to access the data again. Data cannot be accessed and shared between different users.

The technical solution provided by the following embodiments of the present application combines mobile edge computing and blockchain technology to provide services and data for users with low latency and low load, and also ensures data transmission security, and The interests of the business and data providers.

First, the basic concept of the blockchain technology is briefly introduced and explained in this application.

The technical solution of the present application relates to a blockchain, which is a distributed database, which originates from bitcoin and is the underlying technology of bitcoin. A blockchain is a string of data blocks generated using cryptographic methods. Each block contains information about a bitcoin network transaction for verifying the validity of its information (anti-counterfeiting) and generating the next block.

In a narrow sense, a blockchain is a chained data structure that combines data blocks in a sequential manner in chronological order, and cryptographically guaranteed non-tamperable and unforgeable distributed ledgers. Broadly speaking, blockchain technology uses blockchain data structures to validate and store data, use distributed node consensus algorithms to generate and update data, and use cryptography to ensure data transmission and access security, using automated scripts. The code consists of a smart contract to program and manipulate data in a completely new distributed infrastructure and computing paradigm.

Blockchain is mainly used to solve the trust and security problems of transactions, so the use of blockchain can propose the following technological innovations:

First, distributed ledger

The so-called distributed ledger means that transaction accounting is done by multiple nodes distributed in different places, and each node records the complete accounts, so they can all participate in supervising the legality of the transaction, and can also jointly testify for them. , thereby avoiding the possibility that a single biller is controlled or bribed to result in a false accounting situation. On the other hand, since there are enough nodes on the blockchain, that is, the number of nodes for accounting is large, in theory, unless all nodes are destroyed, the accounts will not be lost, thus ensuring the security of the account data.

Second, symmetric encryption and authorization technology

The so-called symmetric encryption and authorization technology can be considered that the transaction information stored in the blockchain is public, but the account identity information is highly encrypted, and the data can be accessed only when the data owner authorizes, thereby further ensuring data security. Sex and the privacy of the user.

Third, the consensus mechanism

The so-called consensus mechanism refers to how consensus is reached between all accounting nodes to determine the validity of a record. This is both a means of identification and a means of preventing tampering. Taking Bitcoin as an example, using the Proof of Work (PoW) algorithm, it is only possible to forge a record that does not exist if the accounting node of the whole network is controlled by more than 51%. When the number of nodes joining the blockchain is sufficient, the possibility of controlling forgery records is very low, so that fraud can be effectively prevented.

Fourth, smart contracts

The smart contract is based on trusted and non-tamperable data on the blockchain and can be automated to execute some predefined rules and terms.

In Bitcoin as an encrypted digital currency network, there are no centralized nodes, servers and databases. The operation and maintenance of the system is also independent of the management personnel. The network node strictly encapsulates the digital fingerprint of the specific time transaction into a block by the workload proof mathematical algorithm, and quickly broadcasts to the whole network, using hash technology to form a tight chain structure between the blocks. Form a highly secure public account book, the blockchain. Through blockchain technology, the encrypted digital currency system skillfully solves the "double flower" problem, faithfully records all transaction data, guarantees the formality and traceability of each record, and the traces of all transactions are extremely difficult to destroy. .

A blockchain is a data structure that is chained from back to front by blocks containing transactions. It can be stored as a file containing non-relative relationship records, or stored in a simple database.

A block is a containerized data structure of aggregated transactions that is contained in a blockchain. It consists of a block header containing metadata and a long list of transactions that immediately follow the body of the block.

Further, the block structure specifically includes: a block size, a block header, a transaction counter, and a transaction. Wherein, the transaction counter is used to record the number of transactions; the transaction is used to record transaction details, and the byte length is variable. A SHA256 cryptographic hash is performed on each block header to generate a hash value, and the corresponding block in the blockchain can be identified by this hash value.

The block header is composed of three sets of metadata, and the first set of metadata is a set of data referring to a hash value of the parent block, and the set of metadata is used to connect the block to the previous block in the blockchain. . The second set of metadata includes: difficulty, time stamp, and Nonce. The third set of metadata is the Merkle tree root, which is used to effectively summarize the data structure of all transactions in the block.

The transaction is used for the blockchain to record various types of information. For example, for the bitcoin network, the transaction is used to record how many bitcoins A gives to B; for example, for a device sharing network, the transaction is used to record that user A shares device X for user B, and the transaction contains the identifier of A, the identifier of B, and the device. The identification of X may even include the time, location, location information of the device, the effective time of sharing the device, and the like. Here, only the transactions in the blockchain are exemplified, but the present invention is not limited to the above two examples.

Further, the blockchain includes the following features:

Feature 1: Decentralization

The entire network has no centralized hardware or management organization. The rights and obligations between any nodes are equal, and the damage or loss of any node will not affect the operation of the whole system. Therefore, the blockchain system can be considered excellent. Robustness.

Feature 2: Go to trust

Participating in data exchange between each node in the whole system does not need to trust each other. The operating rules of the whole system are open and transparent, and all data contents are also public. Therefore, within the scope and time range specified by the system, the nodes are It is impossible and impossible to deceive other nodes.

Feature 3: Collective Maintenance

The data blocks in the system are maintained by all nodes with maintenance functions in the entire system, and these nodes with maintenance functions can be participated by anyone.

Feature 4: Reliable database

The entire system will be in the form of a sub-database, allowing each participating node to obtain a copy of the complete database. Unless the node can control more than 51% of the nodes in the whole system at the same time, the modification of the database on a single node is invalid, and the data content on other nodes cannot be affected. Therefore, the more nodes and the more computing power in the participating system, the stronger the computing power is. The higher the data security in the system.

Feature 5: Anonymity

Since nodes and nodes do not need to trust each other, there is no need to disclose identity between nodes and nodes, and each participating node in the system is anonymous.

The blockchain and blockchain system described in the present application can be applied to various networks (such as in the Internet of Things), and the block or blockchain nodes can be deployed on various network devices (such as IoT devices). . The network device includes industrial IoT devices, such as various industrial sensors, control modules, and the like; and may also be wearable devices, home appliances, home sensors, home control modules, etc., or base stations, enhanced base stations, or have scheduling Relay of functions, or devices with base station functions, etc. The base station may be an evolved Node B (eNB) in the LTE system, or may be a base station in other systems. The embodiment of the present application is not limited.

In addition, the foregoing various types of devices may be user equipment (UE), such as a mobile phone, a smart terminal, a multimedia device, a streaming media device, and the like. The UE may also be another wireless network device, such as a base station (Node B). Specifically, the form and type of the wireless network device are not limited herein.

The UE may communicate with one or more core networks via a radio access network (RAN), and the UE may also access the wireless network for communication by other means, and the UE may also directly perform wireless communication with other UEs. The embodiment does not limit this.

In the following various embodiments of the present application, each network device is collectively referred to as a network node, and the network node may be a first node, a second node that sends a request message, or may be a blockchain node on the blockchain. The forwarded relay node may also be a data source node. Further, the network node includes but is not limited to a station, a base station, a UE, and a terminal. In addition, the two concepts of the device and the node in the various embodiments of the present application are equivalent, that is, the device may refer to a node, a station, a UE, a network element device, a sensor, and the like.

The various technical solutions of the present application can be applied to the Internet of Things system, and the sharing and access of big data in the system is implemented by using the intelligent shared device as a carrier. However, the following embodiments include, but are not limited to, the foregoing technical scenarios.

In order to reduce the data transmission delay and load, and to protect the data provider's interests while ensuring data security, in the technical solution of various embodiments of the present application, the mobile edge calculation is combined with the blockchain technology, so that the requesting party can Information related to the data to be accessed, such as data information and key information of the data, is obtained from a block chain node that is closer to its location.

Specifically, as shown in FIG. 2, a data transmission method provided by the present application includes the following steps:

Step 201: The first node obtains data information and key information of data recorded on the first blockchain.

The data information is used to determine encrypted data to be accessed by the first node, where the data information includes encrypted data or address information of the encrypted data. The key information of the data is used to obtain a key, which is used to decrypt the encrypted data to obtain data to be accessed, and the key information of the data includes: the encrypted data key or the storage is encrypted The address information of the data key.

The data information can be obtained from the blockchain, or obtained by the edge device, and can also be obtained directly from the data source node, which is not specifically limited in this application. The key information of the data may be obtained from the blockchain, or may be obtained according to the indication information, such as the transaction index information, and may also be obtained by other means, such as obtaining from the edge device, etc., which is not limited in this application.

Step 202: Obtain encrypted data according to the data information, and obtain a key according to the key information of the data.

If the data information is encrypted data, the first node may obtain the encrypted data directly from the data information; if the data information is the address information of the encrypted data, the first node determines the address of the encrypted data according to the address information, and obtains the address through the address. The encrypted data.

Similarly, the process of obtaining the key by using the key information of the data includes: a possible manner, the first node decrypts the key information of the data by using the private key of the first node to obtain a key. .

Step 203: Decrypt the encrypted data by using the key to obtain data.

The method provided in this embodiment utilizes the characteristics of data sharing on the blockchain, so that the requesting party, for example, the first node can directly obtain data information from any blockchain node of the blockchain, thereby reducing data information in the core network. Or the burden of repeated transmission between multiple routes, less transmission delay.

Further, after the first node obtains the data, specifically, for example, the first node receives a request message of another node (for example, the second node) for requesting the same data, and the first node may provide the other node with the Data information or key information of the data.

The asymmetric encryption algorithm and the PUF technique involved in the method described in the present application are described in detail below.

In various embodiments of the present application, the key information of the data is generated by the private key or the public key of the first node through the incentive response in the PUF technology, thereby ensuring the security of the data related information transmitted in the blockchain network. .

Asymmetric encryption algorithm: The key of the asymmetric encryption algorithm is divided into a public key and a private key. The user or the system generates a pair of keys, one of which is disclosed as a public key, and the other is a private key. Under normal circumstances, when communicating, the sender encrypts the information by using the public key, and the receiver decrypts the information by using the private key to complete the communication. Of course, private key encryption can also be used to decrypt the public key. Since encryption and decryption use two different keys, this algorithm is also called an asymmetric encryption algorithm.

A common algorithm is, for example, an elliptic curve cryptographic algorithm, but the application is not limited to an elliptic curve cryptographic algorithm.

Hash algorithm: It is a cryptographic algorithm that can only encrypt and cannot decrypt. It can convert any length of information into a fixed length string. This string has two characteristics:

1. Even if the input value changes only a little, the hash value of the output will be different.

2. Only the exact same input value can get exactly the same output value.

3. There is no regularity between the input value and the output value, so the input value cannot be calculated from the output value. To find the specified output value, you can only use the enumeration method: constantly change the input value to find the output value that meets the condition.

The hash algorithm guarantees that the results cannot be derived backwards. For example, SHA256 is a member of the SHA (Secure Hash Algorithm) family.

PUF technology: Physical Unclonable Functions (PUF), its essence is a function, a certain input to this function, will get the corresponding output. The use of the inevitable difference in the manufacturing process of the chip (random physical properties) produces a unique excitation-response pair, which is reflected in the circuit structure, ie the symmetrical structure results in an asymmetrical result due to the manufacturing process. The main implementation methods of the current PUF technology may include:

Non-electronic PUF: optical PUF, paper PUF, CD PUF.

Analog Circuit PUF: Coating based PUF, threshold voltage based PUF, resistance based PUF.

Digital circuit PUF: arbiter PUF, ring oscillator PUF, SRAM-PUF, latch PUF, butterfly PUF.

The private key of the first node may be generated based on a PUF technology. Further, according to the asymmetric security algorithm, the private key of the first node may generate a public key. That is to say, the first node may obtain the device fingerprint information by using the PUF technology, and generate the private key of the first node by using the device fingerprint information. Further, the public key can be generated by the private key using an asymmetric key algorithm.

"The private key of the first node may be generated based on PUF technology": Specifically, according to "the PUF technology", an incentive is input for any one device/node, and an excitation response is generated. For different devices/nodes, the generated stimulus responses are different, and thus the [stimulus, stimulus response] combination becomes the fingerprint information of a device/node.

Optionally, the hash value of the excitation response is used as a public key generation source or a private key of the asymmetric key algorithm, that is, the first node private key may be expressed as [stimulus, response hash], or [responsive] Hash], or use the hash value of the stimulus response to generate a private key. After the private key of the first node is determined, the corresponding public key is generated according to the asymmetric key algorithm. The public key of the first node may be the node identifier of the first node or the address of the first node.

The public key of the first node/device is used to encrypt a key of the encrypted data to generate key information of the data; the corresponding private key is used to decrypt the key information of the data, and obtain the key information. Said key. The difference is that the public key of the first node/device is public information, that is, each blockchain node can obtain, and the private key is not public, only the first node/device itself.

The data transmission method provided by the present application is described and illustrated in detail below in conjunction with specific embodiments.

Embodiment 1

The technical solution of the present application is exemplified in the technical scenario of the smart shared device and/or the shared big data. This application scenario is only an example for understanding the technical solution of the present invention, and the present invention includes and is not limited thereto. .

As shown in FIG. 3, the application scenario may include the following devices: node U1 (representing UE1), node N1 (representing Node1), node D (representing data source node Data source), one or more blockchains, and each zone. The blockchain is composed of a plurality of blockchain nodes. The present invention is described by taking the above scenario as an example. However, the method provided in this embodiment includes, but is not limited to, the foregoing scenario.

This embodiment provides a data access method, which specifically includes the following steps:

Step 301: The first node (for example, the node U1) sends a first request message, where the first request message is used to request key information of the data information and/or the data.

The data information includes encrypted data or address information of the encrypted data, and the key information of the data includes: an encrypted data key or address information storing an encrypted data key, and key information of the data. Used to get the key.

The first request message includes first information, for example, the first information includes one or more combinations of a data ID, a first node identifier, or transaction index information.

The first node identifier may be the device identifier of the first node, the IP address of the first node, the public key of the first node, or other types of identifiers, which is not limited in this application, as long as the first node can be identified. All fall within the scope of protection of the present invention.

It should be particularly noted that the data identifier may be the same as or different from the first node identifier.

The transaction index information is used to determine a first blockchain transaction, wherein the first blockchain transaction records key information of the data, and further, the transaction index information includes: a block number One or more of the block height, the transaction index number, or the blockchain identifier.

For example, the transaction index number is exemplified by the transaction index number X, and is used to indicate the serial number of the transaction in the block, for example, the Xth transaction.

For another example, the block number is exemplified by the block number Y, and is used to indicate that the block is the Yth block in the blockchain.

As another example, the block height is used to indicate the location of the block in the blockchain, that is, to indicate that the block is the number of blocks in the blockchain.

Exemplarily, the first node may send the first request message directly to the data source node.

Exemplarily, the first node may send the first request message to the relay node or a certain blockchain node, for example, may send the first request message to the first blockchain node, and through the relay node or The first block chain node obtains related data information and key information of the data, wherein the relay node and the first block chain node may be the same node or different nodes.

Step 302: After receiving the first request message sent by the first cut point, the first block chain node or the relay node sends a message to the data source node according to the content of the first request message, where the message includes the first A message for requesting data information and/or key information of data required by the first node.

The message sent by the first blockchain node may be the same as the first request message.

Step 303a: The data source node records the address information of the data or the data on the second blockchain or the second blockchain node. The data includes encrypted data that the first node requests to access.

Step 303b: The data source node obtains and encrypts a key (key) of the encrypted data that the first node requests to access by using the public key of the first node, and generates key information of the data.

Specifically, the data source node receives a request message sent by the first node or the relay node or the blockchain node, where the request message is used to request access to the data.

The data source node obtains the public key of the first node according to the message, and encrypts the key of the encrypted data that the first node requests to access by using the public key of the first node to generate key information of the data.

Specifically, the data source node encrypts the data, and then puts the encrypted data on the blockchain, or puts the storage address of the encrypted data on the blockchain. The blockchain may be a second blockchain or a first blockchain.

Step 304: The data source node records the key information of the data on the first blockchain.

Specifically, the step 304 includes: in a first implementation manner, the first blockchain node records the event of the key information of the data as a first transaction, and records and stores the information on the first blockchain; according to the consensus of the blockchain Each blockchain node on the first blockchain of the mechanism stores key information of the data, and when one of the blockchain nodes, for example, the first blockchain node receives the first node or the relay node sends the first When a message is requested, the key information of the data is sent to the first node.

In a second implementation manner, the data source node broadcasts the key information of the data as a first transaction of the first blockchain to the first blockchain node, so that the transaction is saved in the first blockchain. In the block.

Step 305: The first blockchain node obtains key information of the data, and sends the key information of the data to the first node.

Specifically, the first blockchain node may determine the first blockchain transaction by using the transaction index information, and obtain key information of the data from the first blockchain transaction. The transaction index information may be generated by the data source node and sent to the first blockchain node or the relay node.

Alternatively, the first blockchain node or the data source node directly sends the key information of the data to the first node.

Alternatively, the first blockchain node or the data source node first sends the key information of the data to the relay node, and then the relay node sends the key information of the data to the first node.

It should be noted that the sequence of step 304 and step 304 is not limited in the embodiment, that is, the method may first perform step 304, and the data source node may first record the key information or transaction index information of the data. On the first blockchain, and then performing step 301, when the first block chain node or the relay node receives the first request message from the first node, the key information or transaction of the data in the blockchain is performed. The index information is sent to the first node.

Step 306: The first node obtains key information of the data recorded on the first blockchain, and decrypts the key information of the data by using the private key of the first node to obtain a key (key ).

Exemplarily, the first node receives the transaction index information sent by the first node, determines a first blockchain transaction according to the transaction index information, and records the key information of the data in the first blockchain transaction. The first node obtains key information of the data from the first blockchain transaction.

The transaction index information may include at least one or a combination of a block number, a block height, a transaction index number, or a blockchain identifier, and the transaction index information may be The first block chain node is generated and can also be generated by the data source node and sent to the first block chain node.

Exemplarily, the first node may directly obtain the key information of the data sent by the first blockchain node, or may also be the key information that the first node acquires the data from the first blockchain.

Step 307: The first node obtains data information from the second blockchain node, where the data information includes: encrypted data or address information of the encrypted data, and may also have a mapping relationship with the address of the encrypted data. Information, etc.

In addition, the first node may obtain the data information in any of the following different manners, specifically:

The first node may obtain data information from the first blockchain or the second blockchain; or

The first node receives data information sent by the first blockchain node, where the first blockchain node may be any node in the first blockchain; or

The first node receives data information sent by the relay node or the data source node.

In the above manner of acquiring the data information, the first blockchain and the second blockchain may be the same or different. The data information obtained from the blockchain, the blockchain node, or the relay node may be provided by the data source node, including: the data source node stores the generated data information in a second blockchain Up, or a node on the second blockchain, and then the second blockchain node sends the data information to the first node.

Specifically, the obtaining, by the first node, the data information includes:

The first node obtains transaction index information, and determines a blockchain transaction according to the transaction index information, wherein the blockchain transaction is recorded on a first blockchain or a second blockchain, and the zone The data information is recorded in the blockchain transaction; the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier.

Exemplarily, the first node sends transaction index information to the relay node, and receives data information that is sent by the relay node according to the transaction index information.

In addition, the first node may obtain the data information in other manners, which is not limited by the embodiment of the present application.

In this embodiment, the first node acquires data information according to the transaction index information, and can prevent the encrypted data or the address information of the encrypted data from being directly transmitted in the network, and is easily stolen, and the data information is further improved by using the transaction index information. Security of the transmission.

Step 308: The first node obtains encrypted data according to the data information, and decrypts the encrypted data by using a key to obtain data.

For example, the data information may be encrypted data to be accessed, or address information corresponding to the encrypted data. Further, if the data information is encrypted data, when the first node receives the data information, Obtaining the encrypted data; if the data information is address information of the encrypted data, the address stored by the data may be encrypted by determining the address information, and then the encrypted data is obtained by using the address.

The first node decrypts the obtained encrypted data by using the key obtained by decrypting in step 306 to obtain data to be accessed.

The method provided in this embodiment utilizes a data consensus mechanism on the blockchain, so that the requesting party, that is, the first node, can obtain data information from the blockchain or any node on the blockchain, thereby reducing data information in the core network or The burden of repeated transmission between multiple routes reduces transmission delay and improves transmission efficiency.

And, the first node obtains key information of the data from the blockchain, and since the key information of the data is encrypted by the public key of the first node, the authorized first node can decrypt and read With this data, other nodes cannot decrypt and access the data, thereby improving the security of data transmission.

Exemplarily, the method may further include:

Step 309: The first node obtains the data information and the key information obtained from the blockchain as a transaction event, and records it on the third blockchain. The transaction event may be referred to as a first transaction event or a first transaction. Further, the first node may broadcast the first transaction event to any node of the third blockchain to record the first transaction event on the third blockchain.

The first transaction event recorded on the third blockchain may include one or more of the following: a data identifier, a device identifier accessing the data, a time of accessing the data, transaction index information, and a first blockchain. The identifier, the second blockchain identifier, the transaction identifier information of the first blockchain, the transaction identifier information of the second blockchain, the third blockchain identifier, or the transaction identifier information of the third blockchain. The transaction identifier information of the blockchain includes: a block number of the transaction and/or an index of the transaction.

Similarly, after the data source node determines the encrypted data to be accessed requested by the first node, the encrypted data or the data information of the encrypted data may also be recorded, stored, and stored in the second blockchain. on.

According to the three transactions in the first blockchain, the second blockchain, and the third blockchain according to the embodiment of the present application, the following distinction can be made:

The first blockchain: a transaction that records key information of data.

Second blockchain: A transaction that records data information.

The third blockchain: records the event transaction, for example, records the key information of the first blockchain node providing data for the first node, and the second blockchain node provides the first node with data information.

The transaction recorded by the first blockchain includes one or more of the following: a connection identifier, a cross-chain identifier, identification information of the first node, a data identifier, a first node identifier, a device identifier of the first node, and a first The public key of the node, the key information of the data, the transaction index information, the time of accessing the data, the identifier of the first block chain node, the transaction identification information of the first block chain node, the hash hash of the data, and the key information of the data Hash and so on.

The transaction recorded by the second blockchain includes one or more of the following: a connection identifier, a cross-chain identifier, identification information of the first node, a data identifier, a first node identifier, a device identifier of the first node, and a first The public key of the node, the transaction index information, the second block chain node identifier, the transaction identifier information of the second block chain node, the hash hash of the data, the data information hash, the address information hash of the encrypted data, or the key information of the data Hash, stimulus, hash of stimulus response, time to generate response, etc.

The transaction recorded by the third blockchain includes one or more of the following: a connection identifier, a cross-chain identifier, identification information of the first node, a data identifier, a first node identifier, a public key of the first node, and access data. Time, blockchain node identifier, transaction chain identification information of the blockchain node, transaction index information, cross-chain identification, data hash hash, data information hash, encrypted data address information hash, data key information hash, The first node acquires the transaction of the key information of the data information and the data, the first blockchain provides the key information of the data for the first node, and the key information of the second blockchain for providing the data for the first node.

The hash hash of the data recorded in the blockchain transaction is used to verify the authenticity and integrity of the data transmission. Specifically, for example, after decrypting the data, the first node obtains the hash of the decrypted data according to the hash algorithm. The first node also retrieves the data hash from the blockchain (eg, the second blockchain). Further, the first node compares the hash of the data with the hash of the decrypted data, and if the two values are inconsistent, the data obtained by the first node is falsified data; or, if the two values are consistent, the first The data obtained by a node is trusted data.

The first blockchain, the second blockchain, and the third blockchain may be the same blockchain. When all three transactions are recorded on the same blockchain, the identifier may be identified, for example, Connect the logo to connect.

When the first blockchain, the second blockchain, and the third blockchain are three different blockchains, the three associated transactions may be connected by a cross-chain identifier, that is, by cross-chaining The identity establishes an association.

Still another possibility is that the third blockchain recording the event transaction may be the same as the first blockchain or the second blockchain, for example, the first blockchain transaction Recording: an transaction of the key information of the data and an event transaction in which the first blockchain node provides key information for the first node; the two blockchain transaction records: a transaction of data information and an event transaction in which the second blockchain node provides data information for the first node, then two transactions in the first blockchain for the first node may be identified by a connection Establishing an association, two transactions in the second blockchain for the first node may also be associated by a connection identifier, for the first node, the first blockchain and the second blockchain Transactions in these two blockchains can be linked by cross-chain identification.

In a nutshell, associated transactions in the same blockchain are associated with a connection identifier, and associated transactions in different blockchains are associated with a cross-chain identity. The connection identifier and the cross-chain identifier may be two different identifiers, or the connection identifier and the cross-chain identifier may be the same identifier, thereby being in the same blockchain and different blockchains. Establish a connection relationship with related transactions.

In addition, it should be noted that, in this embodiment, the relay node may be a blockchain node, such as a first blockchain node, and then perform the method steps of the first blockchain node. The relay node may also be an edge device node, for example, the base station Node1 (N1 for short), for receiving and forwarding related information of the first node, and sending various feedback information in the blockchain network to the first node. .

In addition, exemplarily, a node on the second blockchain, for example, a second blockchain node, a node for storing or recording the data information may be the same node as the data source node. It can also be a different node. In addition, when the first blockchain and the second blockchain are the same blockchain, the first blockchain node and the second blockchain node may be the same node, or Is a different node. Similarly, the first blockchain node and the data source node may be the same node or different nodes, which is not limited in this application.

Exemplarily, the method of the present application further includes:

The first node verifies the decrypted data, and specifically includes:

The first node obtains a data hash, wherein the first node may be obtained from a provider second blockchain or a second blockchain node of the data information, and may also be obtained from a data source node or other nodes.

The data hash includes: a hash hash of the data requested to be accessed, a data information hash, an address information hash of the encrypted data, a key information hash of the data, and the like.

The first node determines whether the accessed data is tampered with according to the data hash.

Specifically, the first node in step 308 uses the decrypted data to obtain a hash of the decrypted data according to the hash algorithm; the first node compares the hash of the data with the hash of the decrypted data, and if the two values are consistent, the first The data obtained by one node is trusted data. If the two values are inconsistent, the data obtained by the first node is the data that has been tampered with.

In the following step 305, in the embodiment, before the first blockchain node sends the key information of the data to the first node, the first node obtains the key information of the data to be described in detail. The specific process includes:

The first blockchain node receives a request message sent by the first node or a relay node, where the request message includes first information; the first information includes a data identifier, a first node identifier, or a transaction index. Any of the information.

The first blockchain node searches for the first information according to one or more of a data identifier, a first node identifier, a public key of the first node, or transaction index information in the first information. A transaction in which key information of the data is recorded.

Specifically, the method includes searching for the transaction in any of the following ways:

In the first way, the transaction related to the data identification is searched according to the data identifier; or

a second manner, searching for a transaction related to the first node identifier according to the first node identifier; or

In a third mode, the transaction related to the first node identifier is searched according to the public key of the first node; or

In a fourth manner, the transaction related to the transaction index information is searched according to the transaction index information, where the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier; or

a fifth manner, searching for a transaction related to the first node identifier according to two or more of a data identifier, a first node identifier, a public key of the first node, and transaction index information; or

In the sixth mode, based on the foregoing five methods, the condition of the first identifier is added to improve the accuracy of the search. Specifically, the first block chain node obtains a first identifier, where the first identifier includes: a first block chain node identifier, a transaction identifier information of the first block chain node, a second block chain node identifier, and a second The transaction identification information, the connection identifier or the cross-chain identification of the blockchain node, and the like, determining the transaction according to the first information and the first identifier. The first identifier may be pre-stored on the blockchain, or the first blockchain node may be obtained from the data source node.

In addition, the related information may be searched for by other means or by adding new information, thereby providing the first node with key information of the data. Specifically, the other methods are not limited in this application.

In this embodiment, the first blockchain node can quickly find the first blockchain that matches the information by using the data identifier or the first node identifier or the transaction index information included in the first information, and the first identifier. Transaction, and then quickly obtain the key information of the data through the information recorded in the transaction, thereby realizing the rapid acquisition of the shared information on the blockchain, compared to the key information obtained from the data source node or the data provider, Reduced time.

Similarly, the process of searching for the data information required by the first node by the first block chain node or other nodes, such as the second block chain node or the data source node, may also be referred to any of the foregoing first to sixth methods. The transaction is not described in this embodiment.

Embodiment 2

This embodiment provides a data transmission method, and the method can be used for a node that does not apply for accessing data for the first time, for example, a process in which the first node initiates data access to the blockchain network. The method may also be performed on the basis of the first embodiment. After the first node applies for accessing data for the first time, the first node in this embodiment initiates an access request for the same data. In addition, the method can also be performed separately, and the first node initiates a data access request to the blockchain node.

This embodiment is based on the method step of the first node requesting access to data for the first time in the first embodiment, and the first node requests access to the same data for detailed description.

First, according to the description of the first embodiment, the first blockchain is used to record key information of data. Specifically, the key information of the data has been recorded as a transaction of the first blockchain and recorded in the first blockchain. For example, for the data that the first node needs to access, the key information of the corresponding data has been recorded as a through transaction in the first blockchain.

The third blockchain can be used to record key information for node X to provide data information and/or data for node Y. Specifically, the "node X provides the key information of the node Y for the data information and/or the data" event as the transaction of the third blockchain, in order to facilitate understanding and differentiation, the transaction of the third blockchain (may be called Specifically for the event transaction, the following may be included: "Node X provides data information for node Y", or may be "Node X provides key information for node Y", "Node X provides data information for node Y and Key information"). For example, for the embodiment, the first node needs to access the data, and the relay node provides the first node with the data information and/or the key information of the data as the third blockchain transaction (also called event transaction) recorded in the area. In the blockchain.

For the present embodiment, for example, the first node needs to access certain data, which is data that has been encrypted. Thus the first node needs to obtain the data, as well as the key of the data. In this embodiment, the first node obtains the data by finally obtaining the data information of the data and the key information of the data, thereby finally decrypting the encrypted data according to the two pieces of information.

Specifically, as shown in FIG. 4, the method includes the following steps:

Step 401a: Recording the key information of the data as a transaction of the first blockchain in the first blockchain. For example, the data source node records the key information of the data on the first blockchain.

Specifically, for the data that the first node needs to access, the key information of the data is key information of data that the first node needs to access, and is recorded in the first blockchain. And the key information of the data may be generated by the data source node encrypting the data key (key) by using the public key of the first node.

Further, the key information of the data includes an encrypted data key (key) or address information of the encrypted data key.

Step 401b: Record data information (including address information of data or data) and data hash hash on the second blockchain. For example, the data source node records the data or data-related address information as a transaction, and records it in the second. On the blockchain node.

The data information is encrypted data requested by the first node, or address information of the encrypted data.

The information recorded in the second blockchain may further include one or more of the following: a data identifier, a first node identifier, a device identifier of the first node, a public key of the first node, transaction index information, and a second region. The block chain node identifier, the transaction identifier information of the second block chain node, the data information hash, the address information hash of the encrypted data or the key information hash of the data, the stimulus, the hash of the stimulus response, the time when the response is generated, and the like.

Alternatively, the transaction of the second blockchain may include one or more of the following: a connection identifier, a cross-chain identifier, identification information of the first node, a data identifier, a first node identifier, a device identifier of the first node, and a Public key of a node, transaction index information, second block chain node identifier, transaction identification information of the second block chain node, data information hash, address information hash of encrypted data, or key information hash of data, incentive, incentive The hash of the response, the time the response was generated, and so on. That is, the content of the transaction of the second blockchain may contain one or more of the above information.

The data hash, the data hash hash, and the data hash are the same meaning in the present invention. The three words can be collectively referred to as the hash of the data.

Step 402: The first node sends a request message to the relay node. The request message may be used to request access to certain data or the data information and/or key information requesting the data.

The data information may be encrypted data or address information of the encrypted data.

The key information of the data may be an encrypted data key or address information storing an encrypted data key.

The request message includes first information, where the first information includes one or more of a data identifier, a first node identifier, a first node public key, or transaction index information that the first node requests to access.

Exemplarily, the second request message may further include the first identifier, where the first identifier includes transaction identifier information, a blockchain node identifier, a connection identifier, or a cross-chain identifier of the blockchain node.

Illustratively, the relay node may be the node closest to the first node, and the relay node may be a node on the blockchain.

Step 403a: The relay node receives the request message, and searches for a transaction related to the first information according to the first information carried in the request message, and obtains corresponding data from the transaction. Key information.

Specifically, the process of the relay node searching for the related transaction and the key information of the obtained data may refer to the specific description of step 305 in the first embodiment.

Exemplarily, the relay node searches, according to the first information, whether there is a transaction related to the first information, where the key information of the data is recorded; if yes, from the transaction The key information of the data is obtained; if not, the access is denied.

Further, the relay node obtains the key information of the data from the transaction, including: the relay node sends the request message to the first blockchain node, the first block The chain node receives key information of the data fed back according to the request message.

Exemplarily, the relay node may further search for the key information of the data information and the data according to the first identifier and the first information, where the first identifier includes: a first blockchain The node identifier, the transaction identifier information of the first blockchain node, the second blockchain node identifier, the transaction identifier information of the second blockchain node, or the cross-chain identifier.

Step 403b: The relay node determines whether the first node has access rights.

Specifically, determining whether the first node has the right to access the data includes: determining whether there is a transaction related to the first information requested by the first node on the blockchain, that is, determining whether the first node acquires the corresponding data. The key information, if there is a related transaction, or obtains the key information of the data, indicates that the first node has access rights; otherwise, it does not have access rights.

The method further includes: the relay node, when determining that the first node does not have the access right, feeding back a message to the first node, where the message is used to notify the first node that the data acquisition fails, or the message includes the first node There is no permission to access the content of this data.

In addition, it can also be judged by other means, for example, whether the first node has access rights by the data source node.

Step 404a: If there is access authority, the relay node may provide data information for the first node. Specifically, when the data information is provided, it is determined whether the data information is stored locally at the first node.

Step 405a: If stored, directly send the data information to the first node.

Step 405b: If the first node does not store the data information, the relay node may acquire the data information from other nodes.

Illustratively, the relay node sends the request message to the second blockchain node, and the second block chain node determines, according to the first information carried in the request message, the first information. Data information and send the data information to the relay node.

Exemplarily, in step 405b, the first node may further obtain the data information from the data source node or the first blockchain or other neighboring relay nodes.

Exemplarily, the relay node sends the request message to the data source node, where the data source node determines the related data information according to the first information carried in the request message, and the data is Information is sent to the relay node.

Step 406: The data information sent by the relay node to the first node and the key information of the data.

Step 407: The first node obtains the encrypted data according to the data information, and decrypts the key information of the acquired data by using a private key of the first node to obtain a key, and then uses the key pair to Encrypted data is decrypted to obtain access data.

The process in which the first node obtains the encrypted data by using the data information, and obtains the key by using the key information of the data, and decrypts the obtained data is the same as that in the first embodiment, and may refer to step 306 and step 308 of the first embodiment. This embodiment will not be described again.

The method provided in this embodiment utilizes a data consensus mechanism of a blockchain. For a node that is not first accessed, for example, the first node may directly obtain key information of data information and data from an edge device that is closer to the distance, such as a relay node. Therefore, the first node can be prevented from obtaining the information from the data source node that is far away, resulting in a long transmission delay, and can also avoid repeated transmission of data between the core network or the relay node.

In addition, the relay node verifies whether the first node has access rights according to the request message from the first node, and issues a transaction related to the request message, such as key information of the data, according to the verification result. The node that does not have permission is denied access request, which improves the transmission efficiency and guarantees the rights of the data provider.

In addition, it should be noted that the relay node may be the same as or different from the first blockchain node, and the relay node may be an edge device, such as a base station.

Exemplarily, the method described in this embodiment further includes:

Step 408: The first node records, as a block transaction, a "relay node providing data information of the first node and key information of the data" as a blockchain, which is recorded on the blockchain. Specifically, "recorded on a blockchain", the blockchain may be a first blockchain or a third blockchain, or a new blockchain.

The event transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, transaction index information, a first blockchain node identifier, and a first blockchain node. Transaction identification information, second blockchain node identifier, transaction identification information of the second block chain node, cross-chain identification, data hash hash, data information hash, encrypted data address information hash or data key information Hash and so on.

According to the above, the description and distinction between the three transactions involved in the embodiment and the relationship between the blockchains are as follows:

First blockchain: a transaction that records key information of data;

Second blockchain: a transaction that records data information;

The third blockchain: recording event transactions, including: recording key information of the first blockchain node providing data for the first node, and the second blockchain node providing data information for the first node (Embodiment 1), and The relay node in this embodiment provides the first node with data information and key information of the data.

Among them, the relationship between each blockchain and the recorded transaction is:

If the first blockchain, the second blockchain, and the third blockchain are the same blockchain, that is, all three transactions are recorded on the same blockchain, then the various blocks on the blockchain Transactions can be connected by a connection identifier. If the three blockchains are different blockchains, then the three associated transactions can be connected by a cross-chain identity.

Further, the transaction of the first blockchain is used to record key information of the data to ensure data security and access rights. The transaction of the first blockchain includes information such as: data identification, device identification, data key information, data hash, and the like.

The second blockchain is used to record the number information to ensure traceability of the data transaction; the second blockchain transaction records information including: data identification, device identification, and transaction of the first blockchain.

The third blockchain is used to provide key information for the first node and the first node with data information and/or data. The transaction of the third blockchain includes: data identification, device identification, data address, data hash, transaction identification information of the first blockchain, and transaction identification information of the second blockchain.

In addition, an event transaction in which the “relay node provides the first node with the data information and the key information of the data” may also be recorded on the first blockchain and the second blockchain respectively, for example, the relay node An event transaction for providing key information of the data for the first node is recorded on the first blockchain, and an event transaction for providing the relay node with the data information for the first node is recorded on the second blockchain.

In this embodiment, the process of obtaining the key information of the data information and/or the data according to the request message from the first node is specifically implemented in the following manner:

Manner 1: The relay node reads, according to the first information, the key information of the data in the first blockchain, where the key information of the data is data that the first node needs to access. Data key information;

If the relay node obtains the data key information, the first node has the right to access the data, whereby the relay node transmits the data information and the key information of the data to the first node.

If the relay node is not able to obtain the key information of the data from the first blockchain, it is determined that the first node does not have access rights, and the relay node does not provide the data for the first node. Further, when the relay node is not able to obtain the data key information from the first blockchain, the method further includes: the relay node may send a message to the first node to notify the first node to request data failure, or notify the first The node does not have access to the data, or the notification denies providing data to the first node.

Manner 2: The relay node sends a request message to the first blockchain node according to the first information, and is used to request the data key information, where the data key information is a data that the first node needs to access. Corresponding key information.

If the message fed back to the relay node by the first blockchain node includes the key information of the data, it indicates that the first node has the right to access the data, and then the relay node provides the first node with the data information and The key information of the data, for example, the relay node sends the data information and the key information of the data to the first node.

If the message that the first blockchain node feeds back to the relay station does not include the key information of the data, or feeds back a message that fails to find content such as access rights, the first node does not have access rights and cannot obtain the message. Data information. Then, the method further includes: the relay node sends a feedback message to the first node, where the feedback message is used to notify the first node that the data request fails, or does not have access to the data, or denies access and the like.

It should be noted that the “first node” in the various embodiments of the present application may be the same node or the different node in the first embodiment, in order to correspond to various possible technical solutions of the present application. For example, the "first node" is used as an example. It can be understood that the second node or the third node may be named. This application does not limit this.

Embodiment 3

The embodiment further provides a data transmission method. Referring to FIG. 5, the method includes a three-part process, namely, an A part, a B part, and a C part, wherein the A part method describes a process in which the first node (U1) requests access to data. The Part B method describes the process by which the second node (U2) requests access to the data, and the Part C method describes the process by which the third node (U3) requests access to the data.

Wherein, the three parts of the method flow can be independently executed, or a combination of two or two, for example, the combination of the A part and the B part, the combination of the B part and the C part, or the combination of the A part, the B part and the C part. This is not limited.

The method steps of each part of the flow in this embodiment are described and introduced below.

Part A process

The method flow of Part A describes the process by which the first node U1 requests access to data.

Specifically, as shown in FIG. 5, it includes:

Step A1: The data source node (for example, the data provider) records the information of the data as a transaction on the first blockchain.

The key information of the data may be an encrypted data key (key), or address information stored by the data key, etc.; specifically, the key information of the data is an encrypted data key (key): For example, the key of the data is encrypted by using a public key of the device accessing the data (for example, the public key of the node U1), and the key information of the data is recorded as a transaction. On a blockchain.

Step A2: The node U1 sends a request message to the node N1, and the request message is used to request access to the data.

The request message includes at least one of the following: a data identifier (Data ID), a node U1 identifier (or a device identifier of the first node), a public key of the node U1 or transaction index information, and may further include a first area. The identification of the blockchain, etc.

Step A3: The node N1 (for example, the node Node1) receives the node U1 to send a request message, and obtains the key information of the data corresponding to the data requested by the node U1 according to the content carried in the request message.

A possible implementation manner is that the node N1 searches for a transaction (the transaction) related to the identifier of the data and the identifier of the node U1 in the first blockchain according to the data identifier and the identifier of the node U1 in the request message, if any Corresponding transaction records, the key information of the corresponding data is obtained from the first blockchain.

The method further includes: determining, by the node N1, whether key information of the data corresponding to the data requested by the node U1 to access the data is recorded in the blockchain, and if there is key information of the data recorded by the transaction, indicating that the node U1 has the access right; Otherwise, there is no permission to access the data.

In addition, the key information of the data of the node U1 may be searched according to other information in the request message, for example, the transaction index information. For details, refer to the description in the first embodiment and the second embodiment, and details are not described herein again.

Step A4: The node N1 obtains key information of the data from the first blockchain.

Step A5: After receiving the request message sent by the node U1, the node N1 sends the data request message to the second blockchain or the second blockchain node.

The data request message may include, for example, one or more of a data identifier, a node U1 identifier, a public key of the node U1, transaction index information, or a first blockchain identifier.

For details, refer to the request messages of other embodiments.

Step A6: After receiving the request message from the node N1, the second blockchain node verifies the access authority of the node U1, and sends the data requested by the node U1 to the node N1.

Exemplarily, the method for verifying the access authority is: determining whether the node N1 or the first block chain has a transaction, and recording the data identifier or the device identifier of the node U1, that is, determining whether there is a node on the blockchain. The key information of the data required by U1. If there is a transaction, or the node N1 obtains the key information of the data, it indicates that the node U1 has the access right; otherwise, it does not have the access right.

The data is data information, and the data information includes encrypted data or address information storing the encrypted data.

Step A7: The node N1 transmits the data information and the key information of the data to the node U1.

Step A8: The node U1 receives the key information of the data information and the data from the node N1, obtains a key (key) for accessing the data through the key information of the data, and decrypts the encrypted data by using the key. Access the data.

Part B process

The process of requesting access to data by the node U2 to the blockchain is described in the process of Part B. The key information for providing data information and data to the node U2 in the process may be from the same node.

Specifically, the process includes:

Step B1: The data source node records the key information of the data on the first blockchain, and the key information of the data is generated by encrypting the data key requested by the node U2 by using the public key of the node U2.

Step B2: The node U2 sends a request message to the node N1, where the request message includes one or more of a data identifier, a public key of the node U2, a node U2 identifier (node U2ID), or transaction index information.

Step B3: After receiving the request message, the node N1 determines, according to the data identifier carried in the request message, that the data requested by the node U2 is stored on the node N1.

Specifically, after receiving the request message from the node U2, the node N1 determines whether the node U2 has the data access authority. Specifically, the implementation manner is: the node N1 determines whether the key information of the data required by the node U2 can be obtained. If yes, node U2 has access rights; otherwise, it does not have access rights.

When it is determined that the node U2 has the access right, the node N1 further determines whether the data information required by the node U2 is stored locally; if the data information is stored, the data information may be directly provided to the node U2; For storage, data information can be obtained from other nodes first, and then the data information is sent to node U2.

In addition, the node N1 queries the related transaction according to the request message, and obtains key information of the encrypted data of the data. Specifically, the node N1 searches for a related transaction in the first blockchain according to the content in the request message, and the key information of the data is recorded in the transaction.

Step B4: The node N1 obtains key information of the data from the first blockchain.

Steps B5 and B6: The node N1 transmits the data information and the key information of the data to the node U2.

Step B7: The node U2 obtains a data key (key) accessing the data by using the key information of the data, and decrypts the encrypted data according to the data key key to obtain the access data.

Step B8: Node N1 will provide data information and data key information for node U2 as a transaction, which is recorded on the third blockchain.

Part C process

The process of requesting access to data by the node U3 to the blockchain is described in the C-part process, in which key information for providing data information and data to the node U3 may come from different nodes.

Specifically, the process includes:

Step C1: The data source node records the key information of the data on the first blockchain, and the key information of the data is generated by encrypting the data key requested by the node U3 by using the public key of the node U3.

Step B2: The node U2 sends a request message to the node U2, where the request message includes one or more of a data identifier, a public key of the node U3, a node U3 identifier (node U3ID), or transaction index information.

Illustratively, the node U2 is a node that is closer to the node U3.

Step C2: The node U2 receives the request message sent by the node U3, and provides the corresponding data information to the node U3.

Specifically, the process of the node U2 providing the data information to the node U3 is the same as the step B2 to the step B5 in the process of the B part, and may refer to the specific steps in the process of the B part, and details are not described in detail.

Step C3: Node U3 obtains data key information from node N1.

Specifically, a possible implementation manner is that the node U3 sends a request message to the node N1, and the request message is used for requesting key information of the data. The node N1 searches for a transaction related to the data identifier and the node U3 device identifier in the first blockchain according to the request message, and obtains key information of the data from the record of the transaction, and the node N1 densifies the data. The key information is sent to node U3.

For example, the process may also refer to step 2 to step 5 of the part B process.

Step C4: The node U3 receives the data information from the node U2, and the key information of the data from the node N1, and obtains a data key (key) for accessing the data through the key information of the data, and according to the data key The key key decrypts the encrypted data to obtain the access data.

Step C5: Node U2 will provide data information for node U3 as a transaction, recorded on the third blockchain.

Step C6: The node N1 records the key information of the data for the node U3 as a transaction and records it on the third blockchain.

The transaction in the third blockchain records: a data identifier requested by the third node, a third node identifier, a public key of the third node, and a data address/address information of the third node requesting access to the data, Data/address information hash, transaction index information, transaction identification information of the first blockchain, connection identifier or cross-chain identification.

The method provided in this embodiment, after a node in the network, for example, the node U2 accesses and stores the data information, when another node adjacent thereto, for example, the node U3 requests to access the same data again, the node U2 can directly provide the node U3. Data or data information, thereby preventing node U3 from requesting data from a remote data source node, and saving repeated transmission time and load of data between the core network or multiple network devices, thereby improving transmission efficiency.

In addition, by encrypting the data key by using the device public key of the requesting node, other nodes can be prevented from accessing and reading the data in the transmission, thereby further ensuring the security of data transmission, and only in the data source node or the blockchain. When the transaction is recorded, the permission permission is issued, so the transmission efficiency is improved and the rights of the data source node are guaranteed.

In the above three parts of the method flow from A to C, in the part A process, U1 first initiates a data access request to the blockchain network, and the first block chain node searches for and provides corresponding data according to the request message sent by the node U1. Key information, likewise, the second block chain node provides data information related to the data for the first node, and sends the data information to the node U1, wherein the relay node N1 is closer to the first node Save the data information.

In the part B process, the node U2 initiates a data access request to the blockchain network. If the related data information is stored on the relay node N1, and the node U2 has the data access right, the relay node may store the stored data information. The key information of the data obtained by the first blockchain transaction is provided to the node U2, that is, the data information requested by the node U2 and the key information of the data are all from the same node N1, thereby improving the transmission efficiency and reducing. delay.

Before the relay node N1 provides the data information to the node U2, the identity of the node U2 is verified according to the key information of the data recorded on the blockchain, and the access request is rejected for the node that does not have the access right. In addition, the transmission delay is reduced while ensuring the benefit of the data source provider.

In the part C process, the node U3 initiates a data access request to the blockchain network, and the requested message is received by the node U2 that is closer to the location. Since the node U2 records and stores the data information, the node U3 can have access rights on the verification node U3. In the case of the data, the corresponding data information is sent, and the first blockchain node is notified to provide the key information of the corresponding data for the node U3.

In the C part process, the data information obtained by the node U3 is from the node U2, and the key information of the data is from the first blockchain or the first blockchain node, and the information of different nodes is provided.

In addition, it should be noted that, in the various embodiments of the present application, only three blockchains are involved, namely, a first blockchain: a transaction for key information for recording data; and a second blockchain: for A transaction that records data information, and a third blockchain: used to record event transactions, and understandably, more or fewer blockchains can be included to record individual transactions in the network and identify or cross-connect through the connection The chain identification is associated with each transaction. This application does not specifically limit the number of blockchains and the transaction content of each blockchain record.

In addition, it should be noted that the present application may include more embodiments according to the different combinations of the above three parts A to C, for example, the part A process and the part B process are combined into one embodiment, or the part A process and the C part. The combination of the processes, or the combination of the B-part process and the C-part process, is not exemplified herein.

Embodiment 4

In a specific embodiment, as shown in FIG. 6, a transmission system includes: a terminal device, an access node, and the access node may be a relay node, an access device, or a mobile edge computing (Mobile Edge Computing). , MEC) device, at least one blockchain, and thus a data source node, such as node D.

This embodiment provides a data access authority control method, where the method includes:

Step 601: The data source node stores the encrypted data that needs to be provided in the access node.

Step 602: The terminal device initiates a process of interacting with the data provider to obtain data access rights when the service or data needs to be acquired. The data provider interacts with the terminal device to enable the terminal device to gain access to the data.

Step 603A: The data provider records the access control authority of the terminal device on the first blockchain. The access control authority may be represented as key information.

Specifically, since the data provider interacts with the terminal device in step 602, the terminal device obtains access rights to the data. Thereby, the data provider encrypts the key of the encrypted data by using the public key of the terminal device, and the encrypted key is recorded as the information of the first blockchain of the key information on the first blockchain.

The key information includes: an encrypted key, a hash of the encrypted key, and a key

Step 603B: The data provides that the data information of the terminal device is on the second blockchain.

The data information includes at least one of the following: a hash of the data, an encrypted data hash, an encrypted data, and an address of the encrypted data. Specifically, the data information includes at least one of the following: encrypted data that the first node needs to access, address information of the encrypted data, or a hash of the encrypted data, the data hash;

The key information of the data includes at least one of the following: an encrypted data key, address information of the encrypted data key, a hash of the encrypted data key, and a hash of the key address.

Step 604: The user equipment obtains blockchain transaction index information related to the data it wants to access.

The blockchain transaction index information includes: a block height, a block number, a blockchain identifier, and a transaction index number, and may also include a data identifier, a terminal device identifier, or a blockchain node identifier that the terminal device requests to access. .

Step 605: The user equipment sends a request message to the access device, where the request message is used to request key information of the data.

The first information includes one or more of a data identifier, a first node identifier, a first node public key, or transaction index information.

Specifically, the terminal device selects an access node in a direct or indirect manner. Illustratively, the access node is a device that is closest to the location of the terminal device, and then sends the request message to the access node.

Step 606: After receiving the request message, the access node checks whether the terminal device has the access right according to the transaction index information carried in the request message through the access control blockchain (for example, the first blockchain).

Specifically, the access node may obtain, by using an access control blockchain node, key information of whether the data is saved in the blockchain.

According to the transaction index information, if a corresponding transaction is found in the first blockchain, and the transaction is used to record data key information of data that the terminal device needs to access, it indicates that the terminal device has access rights; otherwise, The terminal device does not have access to the data.

Step 607: If the access node confirms that the terminal device has the access right, the access node provides the key information and/or the encrypted data to the terminal device.

Specifically, this step is to provide the key information and the encrypted data as an example to illustrate the invention: if the access node confirms that the terminal device has the access right, the access node determines whether the access node saves the encrypted data, if the save The access node provides the key information and the encrypted data obtained from the first blockchain to the terminal device.

Regarding how the access node judges that the access node even saves the encrypted data, for example, the access node may determine whether the encrypted data is saved according to the first information provided in the request message.

Step 609: The terminal device acquires key information of the encrypted data and the data, decrypts the key information of the data by using the private key of the terminal device to obtain a key, and performs the encrypted data by using the decrypted key. Decrypt, get access to the data.

Step 610: The terminal device obtains a hash of the data from the second blockchain. The second blockchain is used to record data information.

The data information includes at least one of the following: a hash of the data, an address of the data, a hash of the encrypted data, an encrypted data, a storage address of the data, and the like.

Step 611: The terminal device obtains the hash of the decrypted data by using the decrypted data and the hash algorithm, and determines whether the hash of the data and the hash of the decrypted data are the same. If the two values are the same, the data obtained by the terminal device is Reliable data, if not the same, the data obtained by the terminal device is the data that has been tampered with.

Step 612: The terminal device provides the access node to the terminal device to provide data as a transaction, and records the data on the third blockchain.

Specifically, in the case that detecting that the data has not been tampered with, the terminal device provides the access node to the terminal device to provide data as a transaction, and records the data on the third blockchain.

The transaction of the third blockchain includes at least one of the following: a connection identifier, a cross-chain identifier, a terminal device identifier, a data identifier, a public key of the terminal device, a time for accessing the data, a blockchain node identifier, and a blockchain. The transaction identification information of the node, the transaction index information, the hash hash of the data, the data information hash, the address information hash of the encrypted data, the key information hash of the data, the access node identifier, the access node information, and the like.

In this embodiment, after decrypting and accessing the data, the terminal device compares the data hash on the acquired blockchain with the hash generated by the decrypted data to verify the authenticity and integrity of the decrypted data, so that the first node It is possible to judge the reliability of the acquired data.

In this embodiment, the data source node stores the data in the access device, so that the requesting terminal device can obtain data from the nearest access device or the blockchain, and reduce the repeated transmission of data between the core network or multiple routes. Burden, less transmission delay, and improved transmission efficiency.

At the same time, the access device uses the access control permission query information to verify the access authority of the terminal device, and then delivers the service and data after the terminal device has the access right, thereby ensuring the rights of the data source node.

The transactions recorded in the first blockchain and the third blockchain in this embodiment include: a first blockchain for recording key information of data, and a second blockchain for recording data. Information, the third blockchain is used to record transactions in which a node (eg, an access node) provides data information to a terminal device.

The present application further provides a data transmission apparatus for implementing the method described in, for example, FIG. 3 to FIG. 6. As shown in FIG. 7, the apparatus includes: a transceiver module 701, a processing module 702, and a storage module 703. Includes other modules or units.

The transceiver module 701 is configured to obtain data information and key information of data recorded on the first blockchain;

The processing module 702 is configured to obtain encrypted data according to the data information received by the transceiver module 701, obtain a key according to the key information of the data received by the transceiver module, and encrypt the encryption by using the key The data is decrypted to obtain the data.

In a possible implementation, the processing module 702 is specifically configured to use the private key to encrypt the key information when the transceiver module receives the data as the encrypted data key. The data key is decrypted to obtain the key; or, when the key information of the data received by the transceiver module 701 is the address information of the stored data key, the obtained address information is obtained according to the address information. The encrypted data key, and the encrypted data key is decrypted using a private key to obtain the key.

In a possible implementation, the transceiver module 701 is specifically configured to obtain transaction index information, where the transaction index information includes one of a block number, a block height, a transaction index number, or a blockchain identifier. Multiple

The processing module 702 is specifically configured to determine, according to the transaction index information acquired by the transceiver module 701, the first blockchain transaction, where the key information of the data is recorded in the first blockchain transaction, according to the The first blockchain transaction obtains key information of the data; or

The transceiver module 701 is configured to send the transaction index information to a relay node, and receive key information of the data that is forwarded by the relay node according to the transaction index information.

In a possible implementation manner, the transceiver module 701 is specifically configured to obtain the data information from a first blockchain or a second blockchain; or receive any block of the first blockchain. The data information sent by the link node or any blockchain node of the second block chain; or receiving the data information sent by the relay node or the data source node.

The processing module 702 is specifically configured to determine, according to the transaction index information obtained by the transceiver module, a blockchain transaction, where the blockchain transaction is recorded on a first blockchain or a second blockchain. And the data information is recorded in the blockchain transaction;

Alternatively, the transceiver module 701 is specifically configured to send the transaction index information to the relay node, and receive data information that is sent by the relay node according to the transaction index information.

In a possible implementation manner, the processing module 701 is specifically configured to: when the data information is the encrypted data, obtain the encrypted data from the data information; or, in the data information When the address information of the data is encrypted, the encrypted data is searched for and obtained by the address information of the data.

In a possible implementation manner, the processing module 702 is further configured to record, as a first transaction, an event that obtains data information and key information of the data, on a blockchain;

The first transaction includes: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, a transaction index information, and a cross One or more of the chain identifier, the hash hash of the data, the data information hash, the address information hash of the encrypted data, or the key information hash of the data.

In a possible implementation manner, the transceiver module 701 is further configured to receive a request message from a second node, where the request message includes first information, where the first information includes a data identifier, and a second node identifier. One or more of the second node public key or the transaction index information; the processing module 702 is further configured to: according to one of the data identifier, the second node identifier, the second node public key, or the transaction index information Key or multiple key information for obtaining data information and/or data;

The transceiver module 701 is further configured to send the key information of the data information and/or data to the second node.

In a possible implementation, the processing module 702 is further configured to obtain a private key or a public key generation source of the first node according to an excitation response generated by the physical unclonable function PUF technology.

In a possible implementation, the processing module 702 is further configured to generate an excitation response according to the physical unclonable function PUF technology, and use at least one of the hash of the excitation and the excitation response as the identification information of the first node, so that The identification information of the first node is recorded on a blockchain; the transaction recorded on the blockchain includes one or more of the following: an incentive, a hash of the stimulus response, a node identifier, a time or a node to generate a response Public key.

The physical device corresponding to the processing module may be a processor, and the physical device corresponding to the receiving module is a receiver, and the physical device corresponding to the sending module is a transmitter, or may also be a transceiver.

In addition, the data transmission device can also be applied to a blockchain node on any blockchain, including:

The processing module 702 is configured to obtain, by using the first information, the data information requested by the first node and/or the key information of the data, where the first information includes: the data identifier, the first node identifier, and the public key of the first node Or one or more of the transaction index information;

The transceiver module 701 is configured to send the data information and/or key information of the data acquired by the processing module to the first node or the relay node.

In a possible implementation manner, the transceiver module 701 is further configured to receive a request message sent by the first node or the relay node, where the request message includes the first information;

The processing module 702 is specifically configured to: search and locate one or more of a data identifier, a first node identifier, a first node public key, or transaction index information in the first information received by the transceiver module. a first information-related transaction in which key information of the data is recorded;

The transceiver module 701 is further configured to obtain key information of the data from a record of the transaction.

In a possible implementation manner, the processing module 702 is specifically configured to determine the transaction according to the first information and the first identifier, where the first identifier includes at least one blockchain node identifier, at least one region. One or more of the transaction identification information or the cross-chain identification of the blockchain node.

In a possible implementation, the transceiver module 701 is specifically configured to receive a second blockchain, or a relay node, or a data source node according to the data identifier, the first node identifier, or the transaction index information. The one or more feedbacks of the data information; or for obtaining the stored data information if it is determined that the data information is locally stored according to the first information; the data information includes encrypted data or Encrypted data address information.

In a possible implementation manner, the processing module 702 is further configured to generate transaction index information, where the transaction index information is used to determine a first blockchain transaction, where the first blockchain transaction records the Key information of the data, the transaction index information including one or more of a block number, a block height, a transaction index number, or a blockchain identifier.

In addition, the data transmission apparatus provided in this embodiment may implement the steps and functions of the relay node of the foregoing method, and the relay node N1 is taken as an example, and the apparatus is specifically configured to:

The transceiver module 701 is configured to obtain a request message from the first node, where the request message includes first information, where the first information includes a data identifier, a first node identifier, or transaction index information;

The processing module 702 is configured to obtain key information of the data information and/or data according to the first information obtained by the transceiver module 701;

The transceiver module 701 is further configured to send the key information of the data information and/or data to the first node.

In an implementation manner of this embodiment, the processing module 702 is specifically configured to confirm whether the first node has access rights; if yes, obtain data information; if not, reject the access request of the first node;

The obtaining the data information specifically includes: the device obtaining the data information from a local storage module if the data information is already stored; or, if the data information is not stored, Obtaining the data information from the first blockchain, the second blockchain, or the data source node.

In another implementation manner of this embodiment, the processing module 702 is specifically configured to: the relay node searches, according to the first information, whether there is a transaction related to the first information, where the transaction records The key information of the data; if so, the key information of the data is obtained from the transaction; if not, the access is denied.

In another implementation manner of this embodiment, the transceiver module 701 is further configured to send the request message to the first blockchain node, and the transceiver module 701 is further configured to receive the first blockchain node. And according to the key information of the data fed back by the request message, the key information of the data is generated by being encrypted by the public key of the first node.

In another implementation manner of this embodiment, the processing module 702 is specifically configured to obtain key information of the data information and/or data according to the first information and the first identifier. The first identifier includes: a first blockchain node identifier, transaction identifier information of the first blockchain node, a second blockchain node identifier, transaction identifier information of the second blockchain node, or a cross-chain identifier.

In another implementation manner of this embodiment, the processing module 702 is further configured to send the key information that sends the data information and/or data to the first node as a second transaction, and record the third block. On the chain.

The second transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, transaction index information, a first blockchain node identifier, and a first zone. Transaction identification information of the block chain node, second block chain node identifier, transaction identification information of the second block chain node, cross-chain identification, data hash hash, data information hash, encrypted data address information hash or data Key information hash, etc.

In addition, the data transmission apparatus provided in this embodiment may implement the steps and functions of the data source node of the foregoing method, and the node D is taken as an example, and the apparatus is specifically configured to:

The processing module 702 is configured to generate key information of the data, and record key information of the data on the first blockchain, so that any one of the blockchain nodes on the first blockchain stores the data. The key information is quickly provided to the first node of the requester, shortening the transmission delay and improving the transmission efficiency.

In an implementation manner of this embodiment, the processing module 702 is specifically configured to receive, by using the transceiver module 701, a request message that is forwarded from the first node or forwarded by the relay node, where the request message includes the first information, according to the The first information is used to determine a public key of the first node, and the key of the data is encrypted by using the public key of the first node to generate key information of the data, where the first information includes a data identifier and a first node. One or more of the identification, the public key of the first node, or the transaction index information.

In another implementation manner of this embodiment, the processing module 702 is specifically configured to send, by using the transceiver module 701, key information of the data to the first blockchain node, to use the first blockchain node to The key information of the data is recorded on the first blockchain; or the key information of the data is broadcasted and stored on the first blockchain.

In another implementation manner of this embodiment, the processing module 702 is further configured to record the encrypted data requested by the first node to be accessed on the second blockchain; or broadcast and store the encrypted data to the On the second blockchain, the data information includes encrypted data or address information of the encrypted data.

The data transmission apparatus provided in this embodiment utilizes the data consensus feature on the blockchain, so that the requesting party, for example, the first node can directly obtain data information from any blockchain node of the blockchain, thereby reducing the data information in the core. The burden of repeated transmission between the network or multiple routes, less transmission delay, and improved transmission efficiency.

Corresponding to the device embodiment of the present application, the present application also provides a network node. The network node may be a network element device, a site, a blockchain node, a data source node, a base station, a UE, an MEC device, a terminal, and the like in the foregoing embodiments. A data transmission method for implementing the respective nodes in the above various embodiments.

Specifically, as shown in FIG. 8, the network node includes a transceiver 801 (transmitter/receiver), a processor/controller 802, and a memory 803. In addition, more or fewer components may be included, or a combination may be included. These components, or different component arrangements, are not limited in this application.

The transceiver 801 may include a receiving module and a sending module, configured to implement communication transmission between each network element or node in the transmission system, such as sending and receiving data, signaling, request messages, and the like.

Further, the transceiver 801 may include a wireless local area network (WLAN) module, a Bluetooth module, a baseband module, and the like, and a radio frequency (RF) circuit corresponding to the communication module. For wireless network communication, Bluetooth communication, infrared communication, and/or cellular communication system communication, such as wideband code division multiple access (WCDMA) and/or high speed downlink packet access (high speed downlink packet access) , HSDPA).

The processor 802 is a control center of a network node, and connects various parts of the entire terminal device by using various interfaces and lines, by running or executing software programs and/or modules stored in the memory 803, and calling and storing in the memory 803. The instructions are executed to perform the method steps of the various embodiments of Figures 2-6.

Further, the processor 802 may be composed of an integrated circuit (IC), for example, may be composed of a single packaged IC, or may be composed of a plurality of packaged ICs that have the same function or different functions. For example, the processor 802 may include only a CPU, or may be a combination of a GPU, a digital signal processor (DSP), and a control chip (eg, a baseband chip) in the transceiver module. In various implementations of the present application, the CPU may be a single computing core or may include multiple computing cores.

The memory 803 may include a volatile memory, such as a random access memory (RAM), and may also include a non-volatile memory, such as a flash memory. A hard disk drive (HDD) or a solid-state drive (SSD); the memory may also include a combination of the above types of memories. Programs or code may be stored in the memory, and the processor may implement the functions of the network node by executing the program or code.

In various embodiments, all of the functions of the transceiver module shown in FIG. 7 may be implemented by the transceiver 801 of the network node, or by the transceiver 801 controlled by the processor 802; the functions to be implemented by the processing module shown in FIG. It can be implemented by the processor 802.

The memory 803 is configured to store instructions or various information, such as a request message, a first identification, a first information, a first transaction, a second transaction, a third transaction, and the like.

In a specific implementation, the present application further provides a computer storage medium, wherein the computer storage medium may store a program, and the program may include some or all of the steps in each embodiment of the data transmission method provided by the application. The storage medium may be a magnetic disk, an optical disk, a ROM, a RAM, or the like.

The terminal described in the present application is used for the data transmission between the device to device (D2D), the network element to the device, and the network element to the network element. A blockchain node can be a network element or a device.

An exemplary storage medium is coupled to the processor to enable the processor to read information from, and write information to, the storage medium. Of course, the storage medium can also be an integral part of the processor. The processor and the storage medium can be located in an ASIC. Additionally, the ASIC can be located in the user equipment. Of course, the processor and the storage medium may also reside as discrete components in the user equipment.

Those skilled in the art will appreciate that in one or more examples described above, the functions described herein can be implemented in hardware, software, firmware, or any combination thereof. When implemented in software, the functions may be stored in a computer readable medium or transmitted as one or more instructions or code on a computer readable medium. Computer readable media includes both computer storage media and communication media including any medium that facilitates transfer of a computer program from one location to another. A storage medium may be any available media that can be accessed by a general purpose or special purpose computer.

The terminal device according to the embodiment of the present invention may be a device that provides voice and/or data connectivity to a user, a handheld device with a wireless connection function, or other processing device connected to a wireless modem. The wireless terminal can communicate with one or more core networks via a Radio Access Network (RAN), which can be a mobile terminal, such as a mobile phone (or "cellular" phone) and a computer with a mobile terminal. For example, it may be a portable, pocket, handheld, computer built-in or in-vehicle mobile device that exchanges language and/or data with a wireless access network. For example, personal communication service (PCS, Personal Communication Service) telephone, cordless telephone, Session Initiation Protocol (SIP) telephone, Wireless Local Loop (WLL) station, Personal Digital Assistant (PDA, Personal Digital Assistant), etc. . A wireless terminal may also be called a system, a subscriber unit, a subscriber station, a mobile station, a mobile station, a remote station, an access point, or an access point. Remote Terminal, Access Terminal, User Terminal, User Agent, User Device, or User Equipment.

The network device involved in the embodiments of the present invention may be a base station, or an access point, or may refer to a device in the access network that communicates with the wireless terminal through one or more sectors on the air interface. The base station can be used to convert the received air frame to the IP packet as a router between the wireless terminal and the rest of the access network, wherein the remainder of the access network can include an Internet Protocol (IP) network. The base station can also coordinate attribute management of the air interface. For example, the base station may be a base station (BTS, Base Transceiver Station) in GSM or CDMA, or may be a base station (NodeB) in WCDMA, or may be an evolved base station (eNB or e-NodeB, evolutional Node B) in LTE. This application is not limited.

In addition, the present application further provides a transmission system for implementing data sharing and access authority control between network nodes, the system including a first node, at least one blockchain, and the plurality of zones on the blockchain The block chain node may further include a relay node and a data source node, wherein the relay node and the data source node may be a certain block chain node.

Specifically, each node in the transmission system is configured to perform the method steps as shown in FIGS. 2 to 6:

Step 1: The data source node will generate key information of the data, and record the key information of the data on the first blockchain;

Step 2: The first node generates a request message, where the request message includes: one or more of a data identifier or a first node identifier or transaction index information;

Step 3: The first node sends the request message, specifically, the first node may send the request message to a relay node, such as an MEC device, or to the first blockchain node, for example, The relay node is the same node as the first blockchain node. The request message is used to request access to data and data key information for the first node.

Step 4: The relay node obtains a request message from the first node, where the request message includes first information, where the first information includes a data identifier, a first node identifier, a public key of the first node, or transaction index information. One or more of the data; obtaining key information of the data information and/or data according to the first information.

Exemplarily, a specific implementation manner is: the relay node obtains the data information from a local database, or from the first blockchain node or other, if the first node has the access right. The node obtains the data information.

In addition, the process of obtaining the key information of the data by the relay node may specifically include: the relay node sending the request message to the first blockchain node; the first blockchain node receiving the request message, according to the Determining, in the transaction, the data related to the first information by one or more of a data identifier carried in the request message, a first node identifier, a public key of the first node, or transaction index information. Key information; obtaining key information of the data from the transaction.

Illustratively, the first blockchain node may further search for and obtain key information of the data according to the first identifier and the first information, where the first identifier includes: a first blockchain node identifier, and a first Transaction identification information of the blockchain node, second blockchain node identifier, transaction identification information of the second blockchain node, or cross-chain identification.

The first block chain node transmits key information of the found data to the relay node, and the relay node receives key information of data from the first block chain node.

Step 5: The relay node sends the data information and the key information of the data to the first node.

The data information includes: encrypted data requested by the first node or address information of the encrypted data; the key information of the data includes: an encrypted data key or address information storing the encrypted data key.

Step 6: The first node receives the data information from the relay node and the key information of the data, obtains the encrypted data according to the data information, and obtains the key according to the key information of the data.

Specifically, the first node obtains the encrypted data from the data information, or the first node searches for and obtains the encrypted data by using the address information of the data.

Exemplarily, the obtaining, by the first node, the key information of the data includes: obtaining, by the first node, transaction index information, where the transaction index information includes a block number, a block height, a transaction index number, and a blockchain identifier. One or more; determining, according to the transaction index information, the first blockchain transaction, wherein the key information of the data is recorded in the first blockchain transaction, obtained according to the first blockchain transaction Key information of the data.

The first node decrypts the encrypted data key using the private key of the first node to obtain the key.

Step 7: The first node decrypts the encrypted data by using the key to obtain data.

The data information and the key information of the data may be provided by the same blockchain node, for example, the first blockchain node, and may also be provided by different nodes, for example, the key information of the data is first. The blockchain node provides the data information provided by the second blockchain node or provided by the data source node.

In step 8, the first node obtains the obtained key information of the data and the data information as a first transaction, and records it on the blockchain.

The first transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, Transaction index information, cross-chain identification, hash hash of data, data information hash, address information hash of encrypted data, or key information hash of data.

Exemplarily, the key information that sends the data information and/or data to the first node may be recorded by the relay node as a second transaction on the third blockchain.

The method further includes:

Step 9: The second node sends a second request message to the relay node closest to the second node, where the second request message includes one or more of the second node identifier, the data identifier of the requested access, or the transaction index information. .

The relay node may be a blockchain node or an accessed MEC device, such as a base station serving a second node.

Step 10: The relay node receives the second request message from the second node, and verifies whether the second node has the access right according to the identifier information carried in the second request message.

Step 11: If yes, obtain the data information of the data information and data requested by the second node on the local or blockchain node, and send the information to the second node.

Specifically, the process of obtaining the key information of the data information and the data refers to the processes in the foregoing steps 4 to 6, or the method flow of the foregoing Embodiment 1 and Embodiment 2, and details are not described herein again.

Step 12: The second node receives key information of data information and data from the relay node, obtains encrypted data according to the data information, and obtains a key according to key information of the data; and uses the key pair The encrypted data is decrypted to obtain data.

The data requested by the first node and the second node may be the same or different.

Moreover, the method further includes the second node or the relay node or the first block chain node generating a transaction and recording on the third blockchain.

The transaction includes one or more of the following: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, and a transaction index. Information, cross-chain identification, hash hash of data, data information hash, address information hash of encrypted data, or key information hash of data.

The system provided in this embodiment utilizes the characteristics of data sharing on the blockchain, so that the requesting party, for example, the first node can directly obtain data information from any blockchain node of the blockchain, thereby reducing data information in the core network. Or the burden of repeated transmission between multiple routes, less transmission delay, and improved transmission efficiency.

When the data requested by the second node is stored in the nearest edge device, the encrypted data can be obtained directly from the edge device, further saving the transmission delay.

In addition, the block chain node or the relay node verifies whether the requesting node has access rights according to the request message from the first node or the second node, and issues a transaction related to the request message according to the verification result, for example, data. The key information, and the node that does not have the permission to reject the access request, thereby improving the transmission efficiency and ensuring the rights of the data provider.

For a detailed description of various implementations of the methods provided by the system, refer to the description of the method in the foregoing embodiment, and details are not described herein again.

The terms "first", "second", "third", etc. (if present) in the specification and claims of the present application and the above figures are used to distinguish similar objects, and are not necessarily used to describe a particular order. Or prioritization. It is to be understood that the data so used may be interchanged where appropriate so that the embodiments described herein can be implemented in a sequence other than what is illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or units is not necessarily limited to Those steps or units may include other steps or units not explicitly listed or inherent to such processes, methods, products or devices.

It should be noted that “one or more” of the above-mentioned various aspects of the present application includes one item, and also includes two or more items.

The methods and steps of the various embodiments may be referred to and referenced from each other. It can be understood that the textual expressions of the “the embodiment” or the “this embodiment” of the present application include, but are not limited to, one of the Embodiments may also refer to other embodiments.

Those skilled in the art can clearly understand that the technology in the embodiments of the present application can be implemented by means of software plus a necessary general hardware platform. Based on such understanding, the technical solution in the embodiments of the present application may be embodied in the form of a software product in essence or in the form of a software product, and the computer software product may be stored in a storage medium such as a ROM/RAM. , a diskette, an optical disk, etc., including instructions for causing a computer device (which may be a personal computer, server, or network device, etc.) to perform the methods described in various embodiments of the present application or portions of the embodiments.

The same and similar parts between the various embodiments in this specification can be referred to each other. In particular, for the above various embodiments of the present application, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant points can be referred to the description in the method embodiment.

The embodiments of the present application described above are not intended to limit the scope of the present application.

Claims

A data transmission method, characterized in that the method comprises:

The first node obtains data information and key information of data recorded on the first blockchain;

Obtaining encrypted data according to the data information, and obtaining a key according to the key information of the data;

The encrypted data is decrypted using the key to obtain data.
The method according to claim 1, wherein the obtaining the key according to the key information of the data comprises:

When the key information of the data is the encrypted data key, the first node decrypts the encrypted data key by using a private key to obtain the key; or

When the key information of the data is the address information of the stored data key, the first node obtains an encrypted data key according to the address information, and encrypts the encrypted key with a private key The data key is decrypted to obtain the key.
The method according to claim 1 or 2, wherein the first node obtains key information of data recorded on the first blockchain, including:

The first node obtains transaction index information, where the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier;

Determining, according to the transaction index information, the first blockchain transaction, the key information of the data is recorded in the first blockchain transaction, and the key of the data is obtained according to the first blockchain transaction Or the first node sends transaction index information to the relay node, and receives key information of the data fed back by the relay node according to the transaction index information.
The method according to any one of claims 1-3, wherein the obtaining, by the first node, the data information comprises any one of the following:

Obtaining the data information from the first blockchain or the second blockchain;

Receiving the data information sent by any blockchain node of the first blockchain or any blockchain node of the second blockchain;

Receiving the data information sent by the relay node or the data source node.
The method according to any one of claims 1 to 4, wherein the obtaining, by the first node, the data information comprises:

The first node obtains transaction index information, where the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier, and determines a blockchain according to the transaction index information. a transaction, wherein the blockchain transaction is recorded on a first blockchain or a second blockchain, and the data information is recorded in the blockchain transaction;

or,

The first node sends transaction index information to the relay node, and receives data information that is sent by the relay node according to the transaction index information.
The method according to any one of claims 1 to 5, wherein the first node obtains encrypted data according to the data information;

When the data information is the encrypted data, the first node obtains the encrypted data from the data information;

or,

When the data information is address information of the encrypted data, the first node searches for and obtains the encrypted data by using the address information of the data.
The method according to any one of claims 1 to 6, wherein the method further comprises:

The first node records, as a first transaction, an event of obtaining data information and key information of the data, and is recorded on a blockchain;

The first transaction includes: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, a transaction index information, and a cross One or more of the chain identifier, the hash hash of the data, the data information hash, the address information hash of the encrypted data, or the key information hash of the data.
The method according to any one of claims 1 to 7, wherein the method further comprises:

The first node receives a request message from the second node, where the request message includes first information, where the first information includes one of a data identifier, a second node identifier, a second node public key, or transaction index information. Multiple

The first node acquires key information of the data information and/or the data according to one or more of the data identifier, the second node identifier, the second node public key, or the transaction index information;

The first node sends the key information of the data information and/or data to the second node.
The method of any of claims 1-8, wherein the method further comprises:

The first node obtains the private key or public key generation source of the first node according to the excitation response generated by the physical unclonable function PUF technology.
The method according to any one of claims 1 to 9, wherein the method further comprises:

The first node generates an excitation response according to the physical unclonable function PUF technology, and uses at least one of the hashes of the excitation and the excitation response as the identification information of the first node, so that the identification information of the first node is recorded in the blockchain. The transaction recorded on the blockchain includes one or more of the following: an incentive, a hash of the stimulus response, a node identifier, a time at which the response was generated, or a public key of the node.
A data transmission method, characterized in that the method comprises:

The first block chain node obtains the data information requested by the first node and/or the key information of the data according to the first information, where the first information includes the data identifier, the first node identifier, the public key of the first node, or the transaction index. One or more of the information;

The first blockchain node sends the data information and/or the key information of the data to the first node or the relay node.
The method according to claim 11, wherein the first block chain node obtains key information of the data requested by the first node according to the first information, including:

The first blockchain node receives a request message sent by the first node or the relay node, where the request message includes the first information;

The first blockchain node searches for a transaction related to the first information according to one or more of a data identifier, a first node identifier, a first node public key, or transaction index information in the first information. The key information of the data is recorded in the transaction;

The first blockchain node obtains key information of the data from a record of the transaction.
The method of claim 12 wherein said finding a transaction associated with said first information comprises:

Determining, by the first blockchain node, the transaction according to the first information and the first identifier, where the first identifier includes at least one blockchain node identifier, transaction identifier information of at least one blockchain node, or a cross-chain One or more of the identifiers.
The method according to any one of claims 11 to 13, wherein the data information comprises address information of encrypted data or encrypted data;

The first blockchain node obtains the data information requested by the first node according to the first information, including:

The first blockchain node receives the second blockchain, or the relay node, or the data source node returns the data according to one or more of the data identifier, the first node identifier, or the transaction index information. information;

or,

The first blockchain node acquires the stored data information if it is determined that the data information is locally stored according to the first information.
The method according to any one of claims 11 to 14, wherein the method further comprises:

Transmitting, by the first blockchain node, transaction index information, where the transaction index information is used to determine a first blockchain transaction, wherein the first blockchain transaction records key information of the data, the transaction index The information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier.
A data transmission method, characterized in that the method comprises:

The relay node receives a request message from the first node, where the request message includes first information, where the first information includes: one of a data identifier, a first node identifier, a first node public key, and transaction index information. Or more than one;

The relay node acquires key information of the data information and/or the data according to one or more of the data identifier, the first node public key, the first node identifier, or the transaction index information;

The relay node transmits the key information of the data information and/or data to the first node.
The method according to claim 16, wherein the step of the relay node acquiring the data information comprises:

The relay node detects whether the relay node stores the data information;

The relay node stores the data information, and the data information is obtained from the relay node;

The data information is not stored in the relay node, the data information is acquired from the blockchain, or the data information sent by the blockchain node or the data source node is received.
The method according to claim 17, wherein before detecting whether the relay node stores the data information, the method further comprises:

The relay node detects whether to acquire key information of data recorded by the blockchain;

If the key information of the data is obtained, determining that the first node has access rights;

If the key information of the data is not obtained, it is determined that the first node does not have access rights.
The method according to any one of claims 16 to 18, wherein the relay node is based on one or more of the data identifier, the first node identifier, the first node public key or the transaction index information. Obtain key information for the data, including:

The relay node searches for a transaction related to the first information according to one or more of the data identifier, the first node identifier, the first node public key, or the transaction index information, where the transaction records Key information of the data;

If the transaction related to the first information is found, the key information of the data is obtained from the record of the transaction; or

If the transaction related to the first information is not found, rejecting the access request of the first node or replying to the first node, to notify the refusal to provide the key information or the data information for the first node .
The method according to claim 19, wherein said obtaining key information of said data from said record of said transaction comprises:

Sending, by the relay node, the request message to a first blockchain node;

The relay node receives key information of the data that is forwarded by the first blockchain node according to the request message.
The method according to any one of claims 16 to 20, wherein the relay node acquires data according to at least one of the data identifier, the first node identifier, the first node public key or the transaction index information. Key information for information and/or data, including:

The relay node acquires key information of the data information and/or the data according to the first identifier, and one or more of the data identifier, the first node identifier, the first node public key, or the transaction index information,

The first identifier includes one or more of at least one blockchain node identifier, transaction identifier information of at least one blockchain node, or a cross-chain identifier.
The method according to any one of claims 16 to 21, further comprising:

The relay node sends the key information of the data information and/or data to the event of the first node as a second transaction, which is recorded on the blockchain.

The second transaction includes: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, a transaction index information, and a cross One or more of the chain identifier, the hash hash of the data, the data information hash, the address information hash of the encrypted data, or the key information hash of the data.
A data transmission device, comprising:

a transceiver module, configured to obtain data information and key information of data recorded on the first blockchain;

a processing module, configured to obtain encrypted data according to the data information received by the transceiver module, obtain a key according to the key information of the data received by the transceiver module, and perform the encrypted data by using the key Decrypt to get the data.
The device according to claim 22, wherein

The processing module is specifically configured to: when the key information of the data received by the transceiver module is the encrypted data key, decrypt the encrypted data key by using a private key to obtain the secret Key; or, when the key information of the data received by the transceiver module is the address information of the stored data key, obtaining the encrypted data key according to the address information, and using the private key pair The encrypted data key is decrypted to obtain the key.
A device according to claim 23 or 24, wherein

The transceiver module is specifically configured to obtain transaction index information, where the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier;

The processing module is configured to determine, according to the transaction index information acquired by the transceiver module, the first blockchain transaction, where the key information of the data is recorded in the first blockchain transaction, according to the first a blockchain transaction obtains key information of the data; or,

The transceiver module is configured to send the transaction index information to a relay node, and receive key information of the data that is forwarded by the relay node according to the transaction index information.
A device according to any of claims 23-25, wherein

The transceiver module is specifically configured to obtain the data information from a first blockchain or a second blockchain; or receive any blockchain node or a second blockchain of the first blockchain The data information sent by a blockchain node; or receiving the data information sent by the relay node or the data source node.
A device according to any one of claims 23-26, wherein

The transceiver module is specifically configured to obtain transaction index information, where the transaction index information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier;

The processing module is specifically configured to determine, according to the transaction index information obtained by the transceiver module, a blockchain transaction, where the blockchain transaction is recorded on a first blockchain or a second blockchain, And the data information is recorded in the blockchain transaction;

or,

The transceiver module is specifically configured to send the transaction index information to a relay node, and receive data information that is sent by the relay node according to the transaction index information.
The device according to any one of claims 23 to 27, wherein the processing module is configured to obtain the encrypted data from the data information when the data information is the encrypted data; Alternatively, when the data information is the address information of the encrypted data, the encrypted data is searched for and obtained by the address information of the data.
A network node according to any of claims 23-28, characterized in that

The processing module is further configured to record, as a first transaction, an event that obtains data information and key information of the data, on a blockchain;

The first transaction includes: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, a transaction index information, and a cross One or more of the chain identifier, the hash hash of the data, the data information hash, the address information hash of the encrypted data, or the key information hash of the data.
A device according to any one of claims 23-29, wherein

The transceiver module is further configured to receive a request message from the second node, where the request message includes first information, where the first information includes a data identifier, a second node identifier, a second node public key, or transaction index information. One or more of them;

The processing module is further configured to obtain key information of the data information and/or the data according to one or more of the data identifier, the second node identifier, the second node public key, or the transaction index information;

The transceiver module is further configured to send the key information of the data information and/or data to the second node.
Device according to any of claims 23-30, characterized in that

The processing module is further configured to obtain a private key or a public key generation source of the first node according to an excitation response generated by the physical unclonable function PUF technology.
Device according to any of claims 23-30, characterized in that

The processing module is further configured to generate an excitation response according to the physical unclonable function PUF technology, and use at least one of the hashes of the excitation and the excitation response as the identification information of the first node, so that the identification information of the first node is Recorded on the blockchain; the transactions recorded on the blockchain include one or more of the following: incentives, hashes of the stimulus response, node identification, time at which the response was generated, or the public key of the node.
A data transmission device, comprising:

a processing module, configured to obtain, by using the first information, data information requested by the first node and/or key information of the data, where the first information includes: a data identifier, a first node identifier, a public key of the first node, or One or more of the transaction index information;

And a transceiver module, configured to send the data information and/or key information of the data acquired by the processing module to the first node or the relay node.
The device according to claim 33, wherein

The transceiver module is further configured to receive a request message sent by the first node or the relay node, where the request message includes the first information;

The processing module is configured to perform, according to one or more of the data identifier, the first node identifier, the first node public key, or the transaction index information in the first information received by the transceiver module, a first information related transaction in which key information of the data is recorded;

The transceiver module is further configured to obtain key information of the data from a record of the transaction.
The device of claim 34, wherein

The processing module is specifically configured to determine the transaction according to the first information and the first identifier, where the first identifier includes at least one blockchain node identifier, transaction identifier information of at least one blockchain node, or a cross-chain One or more of the identifiers.
A device according to any of claims 33-35, characterized in that

The transceiver module is specifically configured to receive the second blockchain, or the relay node, or the data source node, according to one or more of the data identifier, the first node identifier, or the transaction index information. Information; or for obtaining the stored data information if it is determined that the data information is locally stored according to the first information; the data information includes address information of the encrypted data or the encrypted data.
A device according to any of claims 33-36, characterized in that

The processing module is further configured to generate transaction index information, where the transaction index information is used to determine a first blockchain transaction, wherein the first blockchain transaction records key information of the data, and the transaction index The information includes one or more of a block number, a block height, a transaction index number, or a blockchain identifier.
A data transmission device, comprising:

a transceiver module, configured to receive a request message from the first node, where the request message includes first information, where the first information includes one of a data identifier, a first node identifier, a first node public key, or transaction index information. Item or items;

a processing module, configured to obtain key information of the data information and/or the data according to one or more of the data identifier, the first node identifier, the first node public key, or the transaction index information obtained by the transceiver module;

The transceiver module is further configured to send the key information that the processing module acquires the data information and/or data to the first node.
The device of claim 38, wherein

The processing module is further configured to detect whether the relay node stores the data information;

The transceiver module is configured to: when the processing module detects that the data information is stored, acquire the data information from the database; when the processing module detects that the data information is not stored, The data information is obtained on the blockchain, or the data information sent by the blockchain node or the data source node is received.
The device of claim 39, wherein

The processing module is further configured to: detect whether to obtain key information of data recorded by the blockchain, and if the key information of the data is obtained, determine that the first node has access authority; otherwise, the access is not Permissions.
A device according to any of claims 38-40, wherein

The processing module is configured to search for a transaction related to the first information according to one or more of the data identifier, the first node identifier, the public key of the first node, or the transaction index information, where the transaction The key information of the data is recorded therein;

The processing module is specifically configured to: obtain, by using the record of the transaction, key information of the data in the case that the first information related transaction is found; if the first information is not found, In the case of a transaction, the access request of the first node is rejected or a message is sent to the first node for notifying the denial of providing the key information or the data information for the first node.
The device according to claim 41, wherein

The transceiver module is configured to send the request message to a first blockchain node, and receive key information of the data that is sent by the first blockchain node according to the request message.
Apparatus according to any of claims 38-42, wherein

The processing module is configured to acquire data information and/or data confidentiality according to the first identifier, and one or more of the data identifier, the first node identifier, the public key of the first node, or the transaction index information. Key information,

The first identifier includes one or more of at least one blockchain node identifier, transaction identifier information of at least one blockchain node, or a cross-chain identifier.
Device according to claims 38-43, characterized in that

The processing module is further configured to: send the key information that sends the data information and/or data to the first node as a second transaction, and record the data on the blockchain.

The second transaction includes: a data identifier, a first node identifier, a public key of the first node, a time of accessing the data, a blockchain node identifier, a transaction identifier information of the blockchain node, a transaction index information, and a cross One or more of the chain identifier, the hash hash of the data, the data information hash, the address information hash of the encrypted data, or the key information hash of the data.
A computer readable storage medium, comprising instructions, when executed on a computer, causing a computer to perform the method of any one of claims 1 to 10, or causing a computer to perform as claimed in claim 11 The method of any of the preceding claims, wherein the computer is caused to perform the method of any one of claims 16 to 22.
A computer program product, characterized in that, when it is run on a computer, causing a computer to perform the method of any one of claims 1 to 10, or causing a computer to perform any of claims 11 to 15 The method, or causing a computer to perform the method of any one of claims 16 to 22.