WO2020224246A1 - 基于区块链的数据管理方法、装置、设备和存储介质 - Google Patents
基于区块链的数据管理方法、装置、设备和存储介质 Download PDFInfo
- Publication number
- WO2020224246A1 WO2020224246A1 PCT/CN2019/121718 CN2019121718W WO2020224246A1 WO 2020224246 A1 WO2020224246 A1 WO 2020224246A1 CN 2019121718 W CN2019121718 W CN 2019121718W WO 2020224246 A1 WO2020224246 A1 WO 2020224246A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- data
- target data
- terminal
- user
- blockchain
- Prior art date
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/22—Indexing; Data structures therefor; Storage structures
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/20—Information retrieval; Database structures therefor; File system structures therefor of structured data, e.g. relational data
- G06F16/24—Querying
- G06F16/245—Query processing
- G06F16/2458—Special types of queries, e.g. statistical queries, fuzzy queries or distributed queries
- G06F16/2471—Distributed queries
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/602—Providing cryptographic facilities or services
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
Definitions
- This application relates to the field of blockchain, and in particular to blockchain-based data management methods, devices, equipment and storage media.
- Blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm, etc. That is, the blockchain is understood as a distributed ledger, and its essence is also a distributed database.
- the bottom layer of the blockchain uses a persistent Key-Value Database. As more and more data are stored in the blockchain, according to the current Key-Value The database storage method will make the data query efficiency in the blockchain low. How to improve the data query efficiency in the blockchain has become a technical problem that needs to be solved urgently.
- the main purpose of this application is to provide a blockchain-based data management method, device, equipment and storage medium, aiming to solve the technical problem of low data query efficiency in the blockchain.
- this application provides a blockchain-based data management method, which includes the following steps:
- a keyword corresponding to the operation request is obtained, where the keyword includes: data type, owner ID, service type and/or service ID ;
- the target data is processed according to the operation request.
- the method before the step of obtaining the keyword corresponding to the operation request when receiving the operation request for storing data in the blockchain sent by the terminal, the method includes:
- the initial data is used as the target data to be stored, and the user ID is used as the owner ID of the target data, and the data type, Business type and business identification;
- the present application also provides a data management device based on blockchain, and the data management device based on blockchain includes:
- the request receiving module is configured to, when receiving an operation request for storing data in the blockchain sent by the terminal, obtain a keyword corresponding to the operation request, where the keyword includes: data type, owner ID, business Type and/or business identification;
- the query judgment module is used to query the data stored in the blockchain, obtain the target data matching the keyword, and determine whether the user corresponding to the terminal has the operation authority of the target data;
- the data processing module is configured to process the target data according to the operation request when the user corresponding to the terminal has the operation authority of the target data.
- this application also provides a blockchain-based data management device
- the blockchain-based data management device includes: a memory, a processor, and computer-readable instructions stored on the memory and running on the processor, wherein:
- this application also provides a computer storage medium
- the computer storage medium stores computer readable instructions, and when the computer readable instructions are executed by a processor, the steps of the above-mentioned blockchain-based data management method are realized.
- the embodiment of the application proposes a blockchain-based data management method, device, equipment, and storage medium.
- the blockchain distributed data platform receives an operation request for data stored in the blockchain sent by the terminal, it obtains all The keywords corresponding to the operation request, where the keywords include: data type, owner ID, service type and/or service ID; query the data stored in the blockchain to obtain the matching keyword Target data, and determine whether the user corresponding to the terminal has the operation authority of the target data; when the user corresponding to the terminal has the operation authority of the target data, the target data is processed according to the operation request.
- the data type, owner ID, business type, and/or business ID corresponding to the operation request are obtained, so as to obtain the data type, owner ID, and business ID corresponding to the operation request.
- the type and/or business identifier queries the data stored in the blockchain, realizes multi-dimensional data query operations, and improves the efficiency of data query in the blockchain.
- FIG. 1 is a schematic diagram of the device structure of the hardware operating environment involved in the solution of the embodiment of the present application;
- FIG. 2 is a schematic flowchart of a first embodiment of a data management method based on blockchain in this application;
- FIG. 3 is a schematic diagram of functional modules of an embodiment of a data management device based on blockchain in this application.
- the essence of blockchain is also a distributed database.
- the bottom layer uses a persistent Key-Value Database.
- the storage of data in the Key-Value database relies on the unique keyword Key, and this keyword Key is usually a string, according to the keyword Key To query the data stored on the blockchain.
- the business in the blockchain is very complex, and the Key-Value database has many limitations, such as the inability to query data based on multiple dimensions.
- This application provides a solution to obtain the owner ID, data type, business type and business identity of the target data to be written when writing data in the blockchain; and combine the owner identity, data type, business type and The business identifier is used as the key of the target data, and the key and the target data are associated and stored in the blockchain.
- multi-dimensional data query operations can be performed according to the owner identification, data type, business type, and business identification of the data, which optimizes the query operation.
- Figure 1 is a distributed server (also called a block data platform, a block chain system, a block chain node or a block chain-based data management Device, wherein the data management device based on the blockchain can be composed of a separate data management device based on the blockchain, or it can be formed by combining other devices and the data management device based on the blockchain) structure diagram.
- the data management device based on the blockchain can be composed of a separate data management device based on the blockchain, or it can be formed by combining other devices and the data management device based on the blockchain) structure diagram.
- the server in the embodiment of the present application refers to a computer that manages resources and provides services for users, and is generally divided into a file server, a database server, and an application-readable instruction server.
- the computer or computer system running the above software is also called a server.
- the server may include: a processor 1001, such as a central processing unit (Central Processing Unit, CPU), network interface 1004, user interface 1003, memory 1005, communication bus 1002, chipset, disk system, network and other hardware.
- the communication bus 1002 is used to implement connection and communication between these components.
- the user interface 1003 may include a display screen (Display) and an input unit such as a keyboard (Keyboard), and the optional user interface 1003 may also include a standard wired interface and a wireless interface.
- the network interface 1004 may optionally include a standard wired interface and a wireless interface (such as WIreless-FIdelity, WIFI interface).
- the memory 1005 may be a high-speed random access memory (random access memory, RAM), or stable memory (non-volatile memory), such as disk storage.
- the memory 1005 may also be a storage device independent of the aforementioned processor 1001.
- the server may also include a camera, RF (Radio Frequency, radio frequency) circuit, sensor, audio circuit, WiFi module; input unit, display screen, touch screen; network interface can be selected except WiFi, Bluetooth, probe, etc.
- RF Radio Frequency, radio frequency
- the server structure shown in FIG. 1 does not constitute a limitation on the server, and may include more or fewer components than shown in the figure, or a combination of certain components, or different component arrangements.
- the computer software product is stored in a storage medium (storage medium: also called computer storage medium, computer medium, readable medium, readable storage medium, computer readable storage medium, or directly called medium, etc., storage medium
- storage medium can be a non-volatile readable storage medium, such as RAM, magnetic disk, optical disk, and includes several instructions to make a terminal device (can be a mobile phone, computer, server, air conditioner, or network device, etc.) execute this application
- the memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module, and computer-readable instructions.
- the network interface 1004 is mainly used to connect to the back-end database and perform data communication with the back-end database;
- the user interface 1003 is mainly used to connect to the client (the client, also called the user terminal or the terminal, the embodiment of the application
- the terminal can be a fixed terminal or a mobile terminal, such as smart air conditioners with networking functions, smart lights, smart power supplies, smart speakers, self-driving cars, PCs, smart phones, tablets, e-book readers, portable computers, etc., terminals It contains sensors such as light sensors, motion sensors and other sensors, which will not be repeated here), to communicate with the client; and the processor 1001 can be used to call the computer-readable instructions stored in the memory 1005 and execute the following The steps in the blockchain-based data management method provided by the embodiment.
- This embodiment provides a blockchain-based data management method.
- This embodiment is applied to a distributed server as shown in FIG. 1, which is also called a blockchain data platform, a blockchain system, a node based on a blockchain or Blockchain data management equipment, the blockchain-based data management method in this embodiment, includes:
- a keyword corresponding to the operation request is obtained, where the keyword includes: data type, owner ID, service type and/or service ID ;
- the target data is processed according to the operation request.
- Step S01 When a data input request is received, initial data and user identification corresponding to the data input request are obtained.
- the block data platform When the block data platform receives the data input request, it obtains the initial data to be written corresponding to the data input request and the user identification carried in the data input request.
- the user identification refers to the identification information that uniquely determines the user's identity, for example, block The miner account of the chain.
- the triggering method of the data input request in this embodiment is not specifically limited, that is, the user manually triggers the data input request.
- the user inputs "125 service type xxx, service identification xxx" on the terminal to trigger the data input request, and the terminal sends the data input request Send to the block data platform
- the block data platform receives the data input request sent by the terminal, and obtains the "125 service type xxx, service identification xxx" in the data input request as the initial data corresponding to the data input request, and then the block data
- the platform obtains the user ID carried in the data input request; or, automatically triggers the data input request, for example, the user presets the automatic trigger condition of the data input request on the block data platform: when new data is obtained, then the block
- the block data platform determines that it meets the preset automatic trigger conditions, the block data platform automatically triggers the data input request, and the block data platform will obtain the new data as the initial data corresponding to the data input request.
- the block data platform obtains the identification
- the block data platform After the block data platform obtains the initial data and user ID, the block data platform needs to determine whether the user corresponding to the user ID has the data input authority. For example, the block data platform compares the obtained user ID with the preset ID set. The preset identifier is compared, and when there is a target identifier matching the user identifier in the preset identifier set, the block data platform determines that the user identifier corresponding to the user has the data input authority, and vice versa; another example is the block data platform data input request.
- the initial data carried in the data is encrypted by the terminal, that is, the terminal sends the encrypted initial data together with the data input request to the block data platform, and the block data platform decrypts the initial data.
- the block data platform determines that the user corresponding to the user ID has the data input authority, and vice versa.
- the block data platform determines that the user corresponding to the user ID does not have data input authority, and the block data platform sends prompt information to the terminal to prompt the terminal to correspond to the user.
- Step S02 When the user corresponding to the user identification has the data input authority, the initial data is used as the target data to be stored, and the user identification is used as the owner identification of the target data, and the information of the target data is obtained. Data type, business type and business identification.
- the block data platform determines that the user ID corresponding to the user has data input authority, uses the acquired initial data as the target data to be stored, and uses the user ID as the owner ID of the target data. Then, the block data platform Obtain the data type, business type and business identification of the target data.
- the data type refers to whether the data type is business data or organization information data, etc.
- the owner identification is used to identify the owner of the data, which is owned in the alliance chain
- the owner identifier can quickly locate the owner of the data
- the business type refers to the actual type or type of data in the actual business scenario
- the business identifier refers to the unique identifier of the business in a specific business scenario.
- Step S03 Use the owner ID, the data type, the service type and the service ID as keywords of the target data, and store the keyword in association with the target data in the area. Block chain.
- the block data platform uses the owner identification, data type, business type, and business identification as the keywords of the target data, and associates the keywords with the target data and stores them in the blockchain.
- the format of is no longer a single meaningless string, but a pre-defined data owner ID, data type, business type, and business ID.
- it can be based on the owner ID, data type, Business types and business identifiers realize multi-dimensional query and rapid query of blockchain data, specifically: To
- the blockchain-based data management method includes:
- Step S10 when receiving an operation request for storing data in the blockchain sent by the terminal, obtain a keyword corresponding to the operation request.
- the operation request can be a data update request, a data modification request, a data deletion request, etc.; the block data platform obtains the corresponding operation request Keyword.
- the triggering method of the operation request in this application is not specifically limited, that is, the operation request can be manually triggered by the user, for example, the user enters "xxx business data change" on the terminal and then clicks the preset button on the terminal , Trigger the operation request, the block data platform receives the operation request, and obtains the "xxx business” entered by the user in the operation request, the block data platform uses "xxx business" as the keyword corresponding to the operation request; or, the operation request It can also be automatically triggered.
- the user sets the operation request trigger condition in the block data platform in advance: automatically triggers the data update request when the storage data is updated; when the block data platform detects the storage data update, the block data The platform automatically triggers the data update request, and the block data platform uses the business type carried in the data update request as the key corresponding to the data update request.
- the keywords corresponding to the operation request in this embodiment include: data type, owner ID, service type and/or service ID.
- the data type includes service data, organization information data, and message data.
- Different types of data carry different Data type identification. For example, business data starts with “001", and organization information data starts with "002".
- Each data stored in the blockchain has a corresponding owner ID.
- the owner of the data can be determined; the type of business can be set according to specific needs, such as invoice type and order type And commodity buying and selling types, etc.; in a specific business scenario, each piece of data has a unique business ID, but multiple business scenarios may have the same business ID. Therefore, to find a unique piece of data in the blockchain, the operation request can carry one or more of the data type, owner ID, service type, and service ID contained in the keyword. That is, the keyword Key of each data in the blockchain can be connected by a fixed separator, which can be "-", ",", etc., for example, target data: 1523 (data type a, owner ID b, business type c, business identification d).
- Step S20 Query the data stored in the blockchain, obtain target data matching the keyword, and determine whether the user corresponding to the terminal has the operation authority of the target data.
- the block data platform obtains the keywords, query the data stored in the blockchain according to the obtained keywords, specifically, including:
- Step a comparing the keyword with a preset keyword corresponding to each data stored in the blockchain, and using the same data as the preset keyword as the first data;
- Step b When the number of the first data is not less than two, sending a prompt message to the terminal to prompt the terminal to input a new keyword corresponding to the user;
- Step c Receive a new keyword sent by the terminal, and compare the new keyword with a preset keyword corresponding to the first data until the target data corresponding to the operation request is obtained.
- the block data platform compares the keywords in the operation request with the preset keywords corresponding to each data stored, and the block data platform uses the data with the same preset keywords and the keywords corresponding to the operation request as the first data ; Then, the block data platform obtains the number of data of the first data; when the number of first data is not less than two, the block data platform sends a prompt message to the terminal to prompt the terminal to enter a new keyword corresponding to the user; The block data platform receives the new keyword sent by the terminal, and compares the new keyword with the preset keyword corresponding to the first data until the unique target data corresponding to the operation request is obtained.
- the block data platform obtains all data corresponding to the data type in the blockchain according to the keyword; when the amount of data obtained is multiple, the block data platform sends a prompt message
- the terminal user enters a new keyword: service ID, and the terminal sends the service ID to the block data platform, and the block data platform screens the target data corresponding to the operation request from multiple data according to the new keyword: service ID.
- the block data platform After the block data platform obtains the target data, the block data platform needs to determine whether the user corresponding to the terminal has the operation authority for the target data to determine whether to execute the operation request, wherein the block data platform performs authority judgment steps including :
- the block data platform returns the target data to the terminal, the terminal encrypts the target data with its private key, and the terminal signs the encrypted target data to obtain the signed target data, and the terminal returns the signed target data to Block data platform.
- the public key corresponding to the private key is stored in the blockchain. After the block data platform receives the encrypted target data, it uses the public key to decrypt the target data. If the public key can be used to successfully decrypt the target data, the block data platform determines that the corresponding user of the terminal has the operation authority of the target data; if the public key cannot be used to decrypt the target data, the block data platform determines that the corresponding user of the terminal does not have the target data Data operation authority.
- encryption algorithms include but are not limited to MD5 and hash algorithms.
- each user has a corresponding public and private key pair, the public key is stored in the smart contract of the blockchain, and the private key is stored by the terminal.
- the blockchain can also correspond to different private keys according to different operation requests.
- the user's public-private key pair there is a public key and multiple sub-private keys corresponding to the public key. For example, after the terminal encrypts the target data with the update sub-private key corresponding to the data update request, if the blockchain can successfully decrypt the target data with the public key, the block data platform determines that the corresponding user of the terminal has the update authority to update the target data.
- Step S30 when the corresponding user of the terminal has the operation authority of the target data, process the target data according to the operation request.
- the block data platform determines that the terminal corresponding to the user has the operation authority of the target data
- the block data platform processes the target data according to the operation request.
- the operation request is an update operation request
- the block data platform updates the target data according to the update operation request.
- the blockchain distributed data platform when the blockchain distributed data platform receives an operation request, it obtains the data type, owner ID, business type, and/or service ID corresponding to the operation request, so as to obtain the data type, owner ID,
- the business type and/or the business identifier query the data stored in the blockchain, realize multi-dimensional data query operations, and improve the efficiency of data query in the blockchain.
- the block data platform records the operation information to facilitate the retrospection and analysis of the data stored in the blockchain. Specifically, it includes:
- Step S40 when it is detected that the target data processing is completed, the processing information corresponding to the target data is acquired.
- the block data platform adds an operation tag to the target data.
- the block data platform determines that the target data processing is completed.
- the block data platform obtains the target data
- the processing information includes: operation time point, operation user ID and operation type, so that the block data platform adds the operation information to the corresponding target data, specifically:
- Step S50 Use the processing information as a Value value, and store the Value value in association with the target data in the blockchain.
- the block data platform uses the acquired processing information as the Value value, and stores the Value value in association with the target data in the blockchain, that is, the current blockchain Key-Value
- the Value value in the database only records the data corresponding to the keyword. According to the Value value, it is impossible to determine whether the target data is new data or modified data, and it is also impossible to determine who is the user who modified the modified data.
- the block data platform uses the operation information as the Value value, which makes the data traceability in the blockchain more accurate.
- the block data platform can also perform target data analysis based on the Value value.
- This embodiment is a refinement of step S20 in the first embodiment.
- two ways of judging whether the corresponding user of the terminal has the target data operation authority are specifically given.
- Implementation mode 1 Blockchain performs user based on user signature Authority judgment, that is,
- Step S21 Feed the target data back to the terminal, so that the terminal can encrypt the target data with a private key.
- the block data platform feeds back the target data to the terminal, so that the terminal uses the private key to encrypt the target data.
- the terminal signs the encrypted target data to obtain the signed target data, and the terminal returns the signed target data To the block data platform.
- the digital signature of the terminal in this embodiment that is, the asymmetric encryption algorithm needs to have both a public key and a private key when using it.
- the public key corresponds to the private key. If the public key is used in the process of encrypting data, then only Use the corresponding private key to decrypt. Conversely, if a private key is used when encrypting data, only the corresponding public key can be used to decrypt it.
- Step S22 When receiving the encrypted target data sent by the terminal, a decryption public key is determined according to a preset smart contract, and the target data is decrypted according to the public key.
- the block data platform When the block data platform receives the encrypted target data sent by the terminal, the block data platform presses a preset smart contract (the preset smart contract is a computer-readable instruction set in advance to run on a copyable and shared ledger, which can be Processing information, receiving, storing and sending value) determine the decryption public key, and decrypt the target data according to the public key.
- a preset smart contract is a computer-readable instruction set in advance to run on a copyable and shared ledger, which can be Processing information, receiving, storing and sending value
- Step S23 When the target data is successfully decrypted, it is determined that the user corresponding to the terminal has the operation authority of the target data.
- the block data platform When the block data platform successfully decrypts the target data, the block data platform determines that the corresponding user of the terminal has the operation authority of the target data.
- Implementation method 2 When the terminal performs an encryption operation, the target data and the timestamp are encrypted together, that is,
- step S24 the target data is fed back to the terminal, so that the terminal can perform an encryption operation on the time stamp of the current time and the target data together.
- the block data platform feeds back the target data to the terminal, so that the terminal can encrypt the current time stamp and target data together. That is, when encrypting target data in this embodiment, the terminal encrypts the target data together with the time stamp. It can be understood that the time point at which the terminal encrypts the target data can be determined by the time stamp.
- Step S25 When receiving the encrypted target data sent by the terminal, perform a decryption operation on the target data to obtain the time stamp, and calculate the time and the time at which the terminal encrypts the target data according to the time stamp. The time interval of the current time.
- the block data platform When the block data platform receives the encrypted target data sent by the terminal, the block data platform decrypts the target data to obtain the included timestamp, and the block data platform calculates the time when the terminal encrypts the target data according to the timestamp. The block data platform calculates the time interval between the time stamp and the current time.
- the block data platform compares the calculated time interval with a preset time threshold (the preset time threshold refers to the preset decryption time interval, which can be set according to specific needs, for example, set to 10s) to compare As a result, the authority is determined, that is,
- Step S26 When the time interval is less than a preset time threshold, it is determined that the user corresponding to the terminal has the operation authority of the target data.
- the block data platform determines that the terminal corresponding user has the operation authority of the target data.
- the block data platform determines that the terminal corresponding user does not have all Regarding the operation authority of the target data, in this embodiment, the accuracy of authority determination can be guaranteed.
- an embodiment of the present application also proposes a blockchain-based data management device, the blockchain-based data management device includes:
- the request receiving module is configured to, when receiving an operation request for storing data in the blockchain sent by the terminal, obtain a keyword corresponding to the operation request, where the keyword includes: data type, owner ID, business Type and/or business identification;
- the query judgment module is used to query the data stored in the blockchain, obtain the target data matching the keyword, and determine whether the user corresponding to the terminal has the operation authority of the target data;
- the data processing module is configured to process the target data according to the operation request when the user corresponding to the terminal has the operation authority of the target data.
- the block chain-based data management device includes:
- the input request obtaining module is configured to obtain the initial data and user ID corresponding to the data input request when the data input request is received;
- the information acquisition module is configured to use the initial data as the target data to be stored and the user identifier as the owner identifier of the target data when the user corresponding to the user identifier has the data input authority, and obtain the The data type, business type and business identification of the target data;
- the association saving module is configured to use the owner ID, the data type, the service type, and the service ID as keywords of the target data, and save the keyword and the target data in association with In the blockchain.
- the block chain-based data management device includes:
- the operation information acquisition module is configured to acquire processing information corresponding to the target data when it is detected that the processing of the target data is completed, where the processing information includes: operation time point, operation user identification, and operation type;
- the update saving module is configured to use the processing information as a Value value, and store the Value value in association with the target data in the blockchain.
- the query judgment module 20 includes:
- the first comparison unit is configured to compare the keywords with preset keywords corresponding to each data stored in the blockchain, and use data with the same preset keywords as the keywords as the first data;
- a sending prompt unit configured to send prompt information to the terminal when the number of the first data is not less than two, so as to prompt the terminal to input a new keyword corresponding to the user;
- the second comparison unit is configured to receive a new keyword sent by the terminal, and compare the new keyword with a preset keyword corresponding to the first data until the operation request corresponding to the operation request is obtained Target data.
- the query judgment module 20 includes:
- the first encryption unit is configured to feed back the target data to the terminal, so that the terminal uses a private key to encrypt the target data;
- the first decryption unit is configured to determine a decryption public key according to a preset smart contract when receiving the encrypted target data sent by the terminal, and perform a decryption operation on the target data according to the public key;
- the first determining unit is configured to determine that the user corresponding to the terminal has the operation authority of the target data when the target data is successfully decrypted.
- the query judgment module 20 includes:
- the second encryption unit is configured to feed back the target data to the terminal, so that the terminal can encrypt the target data with the current time stamp and the target data;
- the second decryption unit is configured to perform a decryption operation on the target data to obtain the timestamp when receiving the encrypted target data sent by the terminal, and calculate the terminal to encrypt the target according to the timestamp The time interval between the time of the data and the current time;
- the second determining unit is configured to determine that the user corresponding to the terminal has the operation authority of the target data when the time interval is less than a preset time threshold.
- the block chain-based data management device further includes:
- the sending prompt module is configured to send prompt information to the terminal when the user corresponding to the terminal does not have the operation authority of the target data, so as to prompt that the user corresponding to the terminal does not currently have the operation authority.
- each functional module of the blockchain-based data management device can refer to the various embodiments of the blockchain-based data management method of this application, which will not be repeated here.
- the embodiment of the present application also proposes a computer storage medium.
- the computer storage medium stores computer readable instructions, and when the computer readable instructions are executed by the processor, the operations in the blockchain-based data management method provided in the foregoing embodiments are implemented.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Data Mining & Analysis (AREA)
- Databases & Information Systems (AREA)
- Fuzzy Systems (AREA)
- Mathematical Physics (AREA)
- Probability & Statistics with Applications (AREA)
- Computational Linguistics (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Computer Hardware Design (AREA)
- Computer Security & Cryptography (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
- Storage Device Security (AREA)
Abstract
Description
Claims (20)
- 一种基于区块链的数据管理方法,其特征在于,所述基于区块链的数据管理方法包括以下步骤:在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字,其中,所述关键字包括:数据类型、所属者标识、业务类型和/或业务标识;查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据,并判断所述终端对应用户是否具有所述目标数据的操作权限;在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据;其中,所述在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字的步骤之前,包括:在接收到数据输入请求时,获取所述数据输入请求对应的初始数据和用户标识;在所述用户标识对应用户具有数据输入权限时,将所述初始数据作为待存储的目标数据,将所述用户标识作为所述目标数据的所属者标识,并获取所述目标数据的数据类型、业务类型和业务标识;将所述所属者标识、所述数据类型、所述业务类型和所述业务标识作为所述目标数据的关键字,并将所述关键字与所述目标数据关联保存在所述区块链中。
- 如权利要求1所述的基于区块链的数据管理方法,其特征在于,所述在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据的步骤之后,包括:在检测到所述目标数据处理完成时,获取所述目标数据对应的处理信息,其中,所述处理信息包括:操作时间点、操作用户标识和操作类型;将所述处理信息作为Value值,将所述Value值与所述目标数据关联存储到所述区块链中。
- 如权利要求1所述的基于区块链的数据管理方法,其特征在于,所述查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据的步骤,包括:将所述关键字与所述区块链中存储的各数据对应的预设关键字进行比对,将预设关键字与所述关键字相同的数据作为第一数据;在所述第一数据的数量不少于两个时,发送提示信息至所述终端,以提示所述终端对应用户输入新的关键字;接收所述终端发送的新的关键字,将新的所述关键字与所述第一数据对应的预设关键字进行比对,直至获取到所述操作请求对应的目标数据。
- 如权利要求1所述的基于区块链的数据管理方法,其特征在于,所述判断所述终端对应用户是否具有所述目标数据的操作权限的步骤,包括:将所述目标数据反馈至所述终端,以供所述终端采用私钥对所述目标数据进行加密操作;在接收所述终端发送的加密后的所述目标数据时,按预设智能合约确定解密公钥,并按所述公钥对所述目标数据进行解密操作;在所述目标数据解密成功时,判定所述终端对应用户具有所述目标数据的操作权限。
- 如权利要求1所述的基于区块链的数据管理方法,其特征在于,所述判断所述终端对应用户是否具有所述目标数据的操作权限的步骤,包括:将所述目标数据反馈至所述终端,以供所述终端将当前时间的时间戳和目标数据一起进行加密操作;在接收所述终端发送的加密后的所述目标数据时,对所述目标数据进行解密操作得到所述时间戳,按所述时间戳计算所述终端加密所述目标数据的时间与当前时间的时间间隔;在所述时间间隔小于预设时间阈值时,判定所述终端对应用户具有所述目标数据的操作权限。
- 如权利要求1所述的基于区块链的数据管理方法,其特征在于,所述查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据,并判断所述终端对应用户是否具有所述目标数据的操作权限的步骤之后,包括:在所述终端对应用户不具有所述目标数据的操作权限时,发送提示信息至所述终端,以提示所述终端对应用户当前不存在操作权限。
- 一种基于区块链的数据管理装置,其特征在于,所述基于区块链的数据管理装置包括:输入请求获取模块,用于在接收到数据输入请求时,获取所述数据输入请求对应的初始数据和用户标识;信息获取模块,用于在所述用户标识对应用户具有数据输入权限时,将所述初始数据作为待存储的目标数据,将所述用户标识作为所述目标数据的所属者标识,并获取所述目标数据的数据类型、业务类型和业务标识;关联保存模块,用于将所述所属者标识、所述数据类型、所述业务类型和所述业务标识作为所述目标数据的关键字,并将所述关键字与所述目标数据关联保存在所述区块链中;请求接收模块,用于在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字,其中,所述关键字包括:数据类型、所属者标识、业务类型和/或业务标识;查询判断模块,用于查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据,并判断所述终端对应用户是否具有所述目标数据的操作权限;数据处理模块,用于在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据。
- 如权利要求7所述的基于区块链的数据管理装置,其特征在于,所述基于区块链的数据管理装置,包括:操作信息获取模块,用于在检测到所述目标数据处理完成时,获取所述目标数据对应的处理信息,其中,所述处理信息包括:操作时间点、操作用户标识和操作类型;更新保存模块,用于将所述处理信息作为Value值,将所述Value值与所述目标数据关联存储到所述区块链中。
- 如权利要求7所述的基于区块链的数据管理装置,其特征在于,所述查询判断模块,包括:第一比对单元,用于将所述关键字与所述区块链中存储的各数据对应的预设关键字进行比对,将预设关键字与所述关键字相同的数据作为第一数据;发送提示单元,用于在所述第一数据的数量不少于两个时,发送提示信息至所述终端,以提示所述终端对应用户输入新的关键字;第二比对单元,用于接收所述终端发送的新的关键字,将新的所述关键字与所述第一数据对应的预设关键字进行比对,直至获取到所述操作请求对应的目标数据。
- 如权利要求7所述的基于区块链的数据管理装置,其特征在于,所述查询判断模块,包括:第一加密单元,用于将所述目标数据反馈至所述终端,以供所述终端采用私钥对所述目标数据进行加密操作;第一解密单元,用于在接收所述终端发送的加密后的所述目标数据时,按预设智能合约确定解密公钥,并按所述公钥对所述目标数据进行解密操作;第一判定单元,用于在所述目标数据解密成功时,判定所述终端对应用户具有所述目标数据的操作权限。
- 如权利要求7所述的基于区块链的数据管理装置,其特征在于,所述查询判断模块,包括:第二加密单元,用于将所述目标数据反馈至所述终端,以供所述终端将当前时间的时间戳和目标数据一起进行加密操作;第二解密单元,用于在接收所述终端发送的加密后的所述目标数据时,对所述目标数据进行解密操作得到所述时间戳,按所述时间戳计算所述终端加密所述目标数据的时间与当前时间的时间间隔;第二判定单元,用于在所述时间间隔小于预设时间阈值时,判定所述终端对应用户具有所述目标数据的操作权限。
- 如权利要求7所述的基于区块链的数据管理装置,其特征在于,所述基于区块链的数据管理装置,还包括:发送提示模块,用于在所述终端对应用户不具有所述目标数据的操作权限时,发送提示信息至所述终端,以提示所述终端对应用户当前不存在操作权限。
- 一种基于区块链的数据管理设备,其特征在于,所述基于区块链的数据管理设备包括:存储器、处理器及存储在所述存储器上并可在所述处理器上运行的计算机可读指令,其中:所述计算机可读指令被所述处理器执行时实现以下步骤:在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字,其中,所述关键字包括:数据类型、所属者标识、业务类型和/或业务标识;查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据,并判断所述终端对应用户是否具有所述目标数据的操作权限;在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据;其中,所述在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字的步骤之前,包括:在接收到数据输入请求时,获取所述数据输入请求对应的初始数据和用户标识;在所述用户标识对应用户具有数据输入权限时,将所述初始数据作为待存储的目标数据,将所述用户标识作为所述目标数据的所属者标识,并获取所述目标数据的数据类型、业务类型和业务标识;将所述所属者标识、所述数据类型、所述业务类型和所述业务标识作为所述目标数据的关键字,并将所述关键字与所述目标数据关联保存在所述区块链中。
- 如权利要求13所述的基于区块链的数据管理设备,其特征在于,所述在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据的步骤之后,包括:在检测到所述目标数据处理完成时,获取所述目标数据对应的处理信息,其中,所述处理信息包括:操作时间点、操作用户标识和操作类型;将所述处理信息作为Value值,将所述Value值与所述目标数据关联存储到所述区块链中。
- 如权利要求13所述的基于区块链的数据管理设备,其特征在于,所述查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据的步骤,包括:将所述关键字与所述区块链中存储的各数据对应的预设关键字进行比对,将预设关键字与所述关键字相同的数据作为第一数据;在所述第一数据的数量不少于两个时,发送提示信息至所述终端,以提示所述终端对应用户输入新的关键字;接收所述终端发送的新的关键字,将新的所述关键字与所述第一数据对应的预设关键字进行比对,直至获取到所述操作请求对应的目标数据。
- 如权利要求13所述的基于区块链的数据管理设备,其特征在于,所述判断所述终端对应用户是否具有所述目标数据的操作权限的步骤,包括:将所述目标数据反馈至所述终端,以供所述终端采用私钥对所述目标数据进行加密操作;在接收所述终端发送的加密后的所述目标数据时,按预设智能合约确定解密公钥,并按所述公钥对所述目标数据进行解密操作;在所述目标数据解密成功时,判定所述终端对应用户具有所述目标数据的操作权限。
- 如权利要求13所述的基于区块链的数据管理设备,其特征在于,所述判断所述终端对应用户是否具有所述目标数据的操作权限的步骤,包括:将所述目标数据反馈至所述终端,以供所述终端将当前时间的时间戳和目标数据一起进行加密操作;在接收所述终端发送的加密后的所述目标数据时,对所述目标数据进行解密操作得到所述时间戳,按所述时间戳计算所述终端加密所述目标数据的时间与当前时间的时间间隔;在所述时间间隔小于预设时间阈值时,判定所述终端对应用户具有所述目标数据的操作权限。
- 如权利要求13所述的基于区块链的数据管理设备,其特征在于,所述查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据,并判断所述终端对应用户是否具有所述目标数据的操作权限的步骤之后,包括:在所述终端对应用户不具有所述目标数据的操作权限时,发送提示信息至所述终端,以提示所述终端对应用户当前不存在操作权限。
- 一种计算机存储介质,其特征在于,所述计算机存储介质上存储有计算机可读指令,所述计算机可读指令被处理器执行时实现以下步骤:在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字,其中,所述关键字包括:数据类型、所属者标识、业务类型和/或业务标识;查询所述区块链中存储的数据,获取与所述关键字匹配的目标数据,并判断所述终端对应用户是否具有所述目标数据的操作权限;在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据;其中,所述在接收到终端发送的对区块链中存储数据的操作请求时,获取所述操作请求对应的关键字的步骤之前,包括:在接收到数据输入请求时,获取所述数据输入请求对应的初始数据和用户标识;在所述用户标识对应用户具有数据输入权限时,将所述初始数据作为待存储的目标数据,将所述用户标识作为所述目标数据的所属者标识,并获取所述目标数据的数据类型、业务类型和业务标识;将所述所属者标识、所述数据类型、所述业务类型和所述业务标识作为所述目标数据的关键字,并将所述关键字与所述目标数据关联保存在所述区块链中。
- 如权利要求19所述的计算机存储介质,其特征在于,所述在所述终端对应用户具有所述目标数据的操作权限时,按所述操作请求处理所述目标数据的步骤之后,包括:在检测到所述目标数据处理完成时,获取所述目标数据对应的处理信息,其中,所述处理信息包括:操作时间点、操作用户标识和操作类型;将所述处理信息作为Value值,将所述Value值与所述目标数据关联存储到所述区块链中。
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201910377822.4 | 2019-05-07 | ||
CN201910377822.4A CN110222086A (zh) | 2019-05-07 | 2019-05-07 | 基于区块链的数据管理方法、装置、设备和存储介质 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2020224246A1 true WO2020224246A1 (zh) | 2020-11-12 |
Family
ID=67820857
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/CN2019/121718 WO2020224246A1 (zh) | 2019-05-07 | 2019-11-28 | 基于区块链的数据管理方法、装置、设备和存储介质 |
Country Status (2)
Country | Link |
---|---|
CN (1) | CN110222086A (zh) |
WO (1) | WO2020224246A1 (zh) |
Families Citing this family (14)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN110222086A (zh) * | 2019-05-07 | 2019-09-10 | 深圳壹账通智能科技有限公司 | 基于区块链的数据管理方法、装置、设备和存储介质 |
CN110609839B (zh) * | 2019-09-17 | 2021-05-25 | 北京海益同展信息科技有限公司 | 区块链数据处理的方法、装置、设备及可读存储介质 |
CN110674180B (zh) * | 2019-09-26 | 2021-07-27 | 腾讯科技(深圳)有限公司 | 一种业务数据处理方法、装置以及可读存储介质 |
CN110909074A (zh) * | 2019-10-21 | 2020-03-24 | 北京海益同展信息科技有限公司 | 处理社交数据的方法、装置、计算机设备和存储介质 |
CN110888953B (zh) * | 2019-11-14 | 2022-07-05 | 中国民航信息网络股份有限公司 | 地区信息录入方法及装置 |
CN111177252B (zh) * | 2019-11-26 | 2023-07-25 | 腾讯云计算(北京)有限责任公司 | 一种业务数据的处理方法及装置 |
CN111368230B (zh) * | 2020-02-19 | 2024-05-10 | 北京邮电大学 | 一种基于区块链的工业互联网标识的处理方法及装置 |
CN111400397B (zh) * | 2020-02-29 | 2023-04-11 | 平安科技(深圳)有限公司 | 数据同步方法、装置、设备和计算机存储介质 |
CN111506628B (zh) * | 2020-04-22 | 2023-06-20 | 中国民航信息网络股份有限公司 | 数据处理方法及装置 |
CN111885133B (zh) * | 2020-07-10 | 2023-06-09 | 深圳力维智联技术有限公司 | 基于区块链的数据处理方法、装置及计算机存储介质 |
CN112015414A (zh) * | 2020-08-26 | 2020-12-01 | 支付宝(杭州)信息技术有限公司 | 页面构建方法及装置、基于区块链的数据处理方法及装置 |
CN113098876B (zh) * | 2021-04-02 | 2021-11-23 | 中南大学 | 一种基于区块链与智能合约的产品数据上链方法和介质 |
CN113268514A (zh) * | 2021-05-26 | 2021-08-17 | 深圳壹账通智能科技有限公司 | 多维数据统计方法、装置、电子设备及存储介质 |
CN115174234B (zh) * | 2022-07-08 | 2023-08-29 | 慧之安信息技术股份有限公司 | 基于区块链的物联网标识管理方法 |
Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108563788A (zh) * | 2018-04-27 | 2018-09-21 | 腾讯科技(深圳)有限公司 | 基于区块链的数据查询方法、装置、服务器及存储介质 |
CN109413136A (zh) * | 2018-08-31 | 2019-03-01 | 北京京东金融科技控股有限公司 | 酒店数据的管理方法、装置、设备及可读存储介质 |
CN109587146A (zh) * | 2018-12-11 | 2019-04-05 | 北京奇虎科技有限公司 | 基于区块链的对象管理方法及系统 |
CN110222086A (zh) * | 2019-05-07 | 2019-09-10 | 深圳壹账通智能科技有限公司 | 基于区块链的数据管理方法、装置、设备和存储介质 |
Family Cites Families (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107769913B (zh) * | 2016-08-16 | 2020-12-29 | 广东国盾量子科技有限公司 | 一种基于量子UKey的通信方法及系统 |
CN107968736B (zh) * | 2017-12-04 | 2021-07-02 | 深圳绿米联创科技有限公司 | 智能家居系统与信息加密方法及装置、终端 |
-
2019
- 2019-05-07 CN CN201910377822.4A patent/CN110222086A/zh active Pending
- 2019-11-28 WO PCT/CN2019/121718 patent/WO2020224246A1/zh active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108563788A (zh) * | 2018-04-27 | 2018-09-21 | 腾讯科技(深圳)有限公司 | 基于区块链的数据查询方法、装置、服务器及存储介质 |
CN109413136A (zh) * | 2018-08-31 | 2019-03-01 | 北京京东金融科技控股有限公司 | 酒店数据的管理方法、装置、设备及可读存储介质 |
CN109587146A (zh) * | 2018-12-11 | 2019-04-05 | 北京奇虎科技有限公司 | 基于区块链的对象管理方法及系统 |
CN110222086A (zh) * | 2019-05-07 | 2019-09-10 | 深圳壹账通智能科技有限公司 | 基于区块链的数据管理方法、装置、设备和存储介质 |
Also Published As
Publication number | Publication date |
---|---|
CN110222086A (zh) | 2019-09-10 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
WO2020224246A1 (zh) | 基于区块链的数据管理方法、装置、设备和存储介质 | |
WO2020147383A1 (zh) | 基于区块链系统的流程审批方法、装置、系统及非易失性存储介质 | |
WO2017071363A1 (zh) | 密码的共享方法、密码的共享系统及终端设备 | |
WO2019174090A1 (zh) | 截屏文件分享的控制方法、装置、设备和计算机存储介质 | |
WO2013025085A2 (en) | Apparatus and method for supporting family cloud in cloud computing system | |
WO2020253120A1 (zh) | 网页注册方法、系统、设备和计算机存储介质 | |
WO2021003975A1 (zh) | 网关接口测试方法、终端设备、存储介质及装置 | |
WO2018233352A1 (zh) | 数据传输方法、装置、终端以及计算机可读存储介质 | |
WO2019024126A1 (zh) | 基于区块链的知识管理方法、终端及服务器 | |
WO2021092973A1 (zh) | 敏感信息处理方法、设备及可读存储介质 | |
WO2020141660A1 (en) | Electronic apparatus managing data based on block chain and method for managing data | |
WO2021027134A1 (zh) | 数据存储方法、装置、设备和计算机存储介质 | |
WO2021072881A1 (zh) | 基于对象存储的请求处理方法、装置、设备及存储介质 | |
WO2012099330A2 (ko) | Cpns 환경에서 사용자 인증을 위한 인증키 발급 시스템 및 방법 | |
WO2019024485A1 (zh) | 数据共享方法、装置及计算机可读存储介质 | |
WO2020062658A1 (zh) | 合同生成方法、装置、设备及存储介质 | |
WO2018036168A1 (zh) | 数据处理任务执行方法、装置、执行服务器和存储介质 | |
WO2020231177A1 (en) | Electronic device and method for receiving push message stored in blockchain | |
WO2020019405A1 (zh) | 数据库监控方法、装置、设备及可读存储介质 | |
WO2013183818A1 (ko) | 멀티 디바이스 환경에서의 메시지 서비스 방법 및 시스템, 그리고 이를 위한 장치 | |
WO2018076890A1 (zh) | 数据备份的方法、装置、存储介质、服务器及系统 | |
WO2018076879A1 (zh) | 数据备份方法、装置、存储介质及终端 | |
WO2020237859A1 (zh) | 基于nbd设备的数据迁移方法、装置、设备及存储介质 | |
WO2018076842A1 (zh) | 一种数据备份方法、装置、系统、存储介质及电子设备 | |
WO2013182073A1 (zh) | 鉴定文件安全性的方法、系统及存储介质 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
121 | Ep: the epo has been informed by wipo that ep was designated in this application |
Ref document number: 19927695 Country of ref document: EP Kind code of ref document: A1 |
|
NENP | Non-entry into the national phase |
Ref country code: DE |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 19927695 Country of ref document: EP Kind code of ref document: A1 |
|
32PN | Ep: public notification in the ep bulletin as address of the adressee cannot be established |
Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205 DATED 18/03/2022) |
|
122 | Ep: pct application non-entry in european phase |
Ref document number: 19927695 Country of ref document: EP Kind code of ref document: A1 |