WO2021012548A1 - Blockchain-based data processing method and system, and electronic apparatus and storage medium - Google Patents

Abstract

The present application relates to blockchain technology. Provided are a blockchain-based data processing method and system, and an electronic device and a storage medium. The method comprises: acquiring original data to be uploaded, identifying each independent field in the original data, and converting each independent field into key-value pair format data, wherein a pre-set field mark corresponding to each independent field in the key-value pair format data is a key, and a field value corresponding thereto is a value; performing hash calculation on the pre-set field mark corresponding to each independent field to obtain a corresponding confusion mark; performing calculation according to a pre-set calculation rule and by means of the confusion mark corresponding to each independent field so as to obtain a corresponding field encryption key; encrypting the field value of each independent field by means of a pre-set encryption algorithm and on the basis of the field encryption key corresponding to each independent field so as to obtain an encrypted field; and uploading, to a blockchain, the confusion mark and the encrypted field corresponding to each independent field in the original data. The present application realizes authorized access to part of fields of data in a blockchain.

Description

Block chain-based data processing method, system, electronic device and storage medium

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on July 25, 2019, the application number is 201910674033.7, and the application name is "Blockchain-based data processing methods, electronic devices and readable storage media". The entire content is incorporated in the application by reference.

Technical field

This application relates to the field of blockchain technology, and in particular to a data processing method, system, electronic device, and storage medium based on blockchain.

Background technique

In the scenario of the blockchain alliance chain, the enterprise data is stored in ciphertext after the entire data is encrypted with a unified key when it is uploaded to the chain. And some data contains multiple contents. For example, if a document is used as a piece of content on the chain, a document usually contains many items. When an enterprise authorizes a document to a business related party, sometimes it does not want the business related party to see all the contents of the document. The inventor realizes that when data is authorized to business related parties in the prior art, the business related parties can see all the content of the data, and it is impossible for the business related parties to see only part of the field information in the data authorized by the enterprise to view. .

Summary of the invention

The purpose of this application is to provide a blockchain-based data processing method, system, electronic device, and storage medium, aiming to achieve authorized access to some fields of data in the blockchain.

To achieve the above objective, the present invention provides an electronic device, the electronic device includes a memory and a processor, the memory stores a blockchain-based data processing system that can run on the processor, and the When the data processing system of the blockchain is executed by the processor, the following steps are implemented:

Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, each independent field in the key-value pair format data The corresponding preset field is marked as a key, and the field value is a value;

Perform hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

Calculate the field encryption key corresponding to each independent field according to preset calculation rules and using the confusion mark corresponding to each independent field;

Encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

Upload the confusion mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that business parties can find the corresponding encrypted field from the blockchain according to the confusion mark of the authorized field. Decrypt the found encrypted field to obtain the field value of the authorized field.

In addition, in order to achieve the above objective, this application also provides a blockchain-based data processing method. The blockchain-based data processing method includes:

Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, each independent field in the key-value pair format data The corresponding preset field is marked as a key, and the field value is a value;

Perform hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

Calculate the field encryption key corresponding to each independent field according to preset calculation rules and using the confusion mark corresponding to each independent field;

Encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

Upload the confusion mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that business parties can find the corresponding encrypted field from the blockchain according to the confusion mark of the authorized field. Decrypt the found encrypted field to obtain the field value of the authorized field.

Further, in order to achieve the above objective, this application also provides a blockchain-based data processing system, and the blockchain-based data processing system includes:

The conversion module is used to obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, the key-value pair format data The preset field corresponding to each independent field is marked as a key and the field value is a value;

The first calculation module is configured to perform a hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

The second calculation module is configured to calculate the field encryption key corresponding to each independent field according to the preset calculation rule and using the confusion mark corresponding to each independent field;

The encryption module is used to encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

The upload module is used to upload the obfuscation mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that the business related parties can find out from the blockchain according to the obfuscation mark of the authorized field The corresponding encrypted field is decrypted to obtain the field value of the authorized field.

Further, in order to achieve the above-mentioned object, the present application also provides a computer-readable storage medium having computer instructions stored in the computer-readable storage medium. When the computer instructions run on the computer, the computer executes the above-mentioned area-based Block chain data processing method.

The blockchain-based data processing method, system, electronic device, and storage medium proposed in this application convert each independent field in the original data into key-value pair format data marked with a preset field as a key and field value. Perform hash calculation on the preset field label corresponding to each independent field to obtain the corresponding confusion label, and use the confusion label to calculate the field encryption key corresponding to each independent field; pair each independent field based on the field encryption key corresponding to each independent field The field value of is encrypted to obtain an encrypted field; the confusion mark and the encrypted field corresponding to each independent field in the original data are uploaded to the blockchain. Since each independent field in the data can be distinguished, and each independent field is encrypted before uploading to the blockchain, business parties can find out the encrypted fields corresponding to some authorized fields from the blockchain and perform Decrypt to obtain the field values of some authorized fields. The business-related parties cannot decrypt some of the fields that are not authorized to them, nor can they obtain the field values of the unauthorized fields, so as to control the part of the data in the blockchain by the business-related parties. Field authorization access. Moreover, since the field encryption key corresponding to each independent field is calculated by using the confusion indicator corresponding to each independent field, the field encryption key for encrypting the field value of each independent field is different, and the security is higher.

Description of the drawings

Figure 1 is a schematic diagram of the operating environment of a preferred embodiment of a blockchain-based data processing system according to this application;

FIG. 2 is a program module diagram of a preferred embodiment of a blockchain-based data processing system of this application;

FIG. 3 is a schematic flowchart of a preferred embodiment of a data processing method based on blockchain in this application.

Detailed ways

In order to make the purpose, technical solutions, and advantages of this application clearer, the following further describes this application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the application, and not used to limit the application. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

It should be noted that the descriptions related to "first", "second", etc. in this application are only for descriptive purposes, and cannot be understood as indicating or implying their relative importance or implicitly indicating the number of technical features indicated. . Therefore, the features defined with "first" and "second" may explicitly or implicitly include at least one of the features. In addition, the technical solutions between the various embodiments can be combined with each other, but it must be based on what can be achieved by a person of ordinary skill in the art. When the combination of technical solutions is contradictory or cannot be achieved, it should be considered that such a combination of technical solutions does not exist. , Not within the scope of protection required by this application.

This application provides a data processing system based on blockchain. Please refer to FIG. 1, which is a schematic diagram of the operating environment of the preferred embodiment of the blockchain-based data processing system 10 of the present application.

In this embodiment, the blockchain-based data processing system 10 is installed and operated in the electronic device 1. The electronic device 1 is a device capable of automatically performing numerical calculation and/or information processing in accordance with pre-set or stored instructions. The electronic device 1 may be a computer, a single web server, a server group composed of multiple web servers, or a cloud composed of a large number of hosts or web servers based on cloud computing, where cloud computing is a type of distributed computing, A super virtual computer composed of a group of loosely coupled computer sets.

In this embodiment, the electronic device 1 may include, but is not limited to, a memory 11, a processor 12, and a network interface 13 that can be communicatively connected to each other through a system bus. The memory 11 stores block-based blocks that can run on the processor 12. Chain of data processing system 10. It should be pointed out that FIG. 1 only shows the electronic device 1 with the components 11-13, but it should be understood that it is not required to implement all the illustrated components, and more or fewer components may be implemented instead.

Among them, the memory 11 includes a memory and at least one type of readable storage medium. The memory provides a cache for the operation of the electronic device 1; the readable storage medium can be, for example, flash memory, hard disk, multimedia card, card type memory (for example, SD or DX memory, etc.), random access memory (RAM), static random access memory (SRAM) ), read only memory (ROM), electrically erasable programmable read only memory (EEPROM), programmable read only memory (PROM), magnetic memory, magnetic disks, optical disks and other non-volatile storage media. In some embodiments, the readable storage medium may be an internal storage unit of the electronic device 1, such as the hard disk of the electronic device 1. In other embodiments, the non-volatile storage medium may also be an external storage unit of the electronic device 1. Storage devices, such as plug-in hard disks, Smart Media Card (SMC), Secure Digital (SD) cards, Flash Cards, etc., equipped on the electronic device 1. In this embodiment, the readable storage medium of the memory 11 is generally used to store the operating system and various application software installed in the electronic device 1, for example, to store the blockchain-based data processing system 10 in an embodiment of the present application. In addition, the memory 11 can also be used to temporarily store various types of data that have been output or will be output.

The processor 12 may be a central processing unit (Central Processing Unit, CPU), controller, microcontroller, microprocessor, or other data processing chip in some embodiments. The processor 12 is generally used to control the overall operation of the electronic device 1, such as performing data interaction or communication-related control and processing with the other equipment. In this embodiment, the processor 12 is used to run program codes or process data stored in the memory 11, for example, a data processing system 10 based on a blockchain.

The network interface 13 may include a wireless network interface or a wired network interface. The network interface 13 is generally used to establish a communication connection between the electronic device 1 and other electronic devices.

The blockchain-based data processing system 10 includes at least one computer-readable instruction stored in the memory 11, and the at least one computer-readable instruction can be executed by the processor 12 to implement various embodiments of the present application.

Wherein, the aforementioned blockchain-based data processing system 10 implements the following steps when executed by the processor 12:

Step S1: Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein the key-value pair format data is The preset field corresponding to each independent field is marked as a key, and the field value is a value;

Step S2: Perform a hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

Step S3, calculating the field encryption key corresponding to each independent field according to the preset calculation rule and using the confusion mark corresponding to each independent field;

Step S4, encrypting the field value of each independent field based on the field encryption key corresponding to each independent field and using a preset encryption algorithm to obtain an encrypted field;

Step S5: Upload the obfuscation flag and encrypted field corresponding to each independent field in the original data to the blockchain, so that the business related parties can find the corresponding obfuscation flag from the blockchain according to the obfuscation flag of the authorized field Encrypt the field and decrypt the found encrypted field to obtain the field value of the authorized field.

In this embodiment, first obtain the original data to be uploaded to the blockchain, identify and distinguish each independent field in the original data, and convert each independent field into key-value pair format data, where the key-value pair format The field corresponding to each independent field is marked as the key and the field value is the value. The field value in the format data is encrypted using the preset encryption algorithm using the preset field encryption key corresponding to each independent field to obtain the encrypted field; at the same time, the confusion mark of each independent field is calculated. Upload the encrypted fields and their confusion marks corresponding to each independent field in the original data to the blockchain. When it is necessary to authorize a business-related party to access a certain field in the original data, that is, read permission, the field encryption key corresponding to the authorized field and its confusion flag are sent to the business-related party. In this way, the business related party obtains the encrypted field and its confusion mark corresponding to each independent field in the original data through the blockchain, and retrieves the field encryption key and its confusion mark corresponding to the authorized field pre-authorized to the business related party Use the confusion mark corresponding to the authorized field to find out the independent field in the original data obtained from the blockchain, namely the authorized field, and obtain the encrypted field corresponding to the authorized field, and use the field encryption key corresponding to the authorized field Decrypt the obtained encrypted field to obtain the data content of the authorized field, that is, the field value. Since the business-related party does not have the field encryption keys of fields other than the authorized field in the original data, the business-related party cannot decrypt the data content of the fields other than the authorized field in the original data. In this way, data can be encrypted by field and can be authorized by field. While data sharing is realized on the blockchain, field information that is not expected to be seen by business related parties can be hidden.

In this embodiment, independent fields can be individually encrypted, so that when authorizing, only partial fields can be authorized to read permissions. Therefore, it is necessary to first identify each independent field in the original data to be uploaded to the blockchain. In an optional implementation manner, after obtaining the original data to be uploaded to the blockchain, the original data is converted into json data, and the key-value pair in the converted json data is identified as the original data The key-value pair format data corresponding to each independent field in. For example, the json format can be used to pass parameters, so that each independent field in the original data can be distinguished in the interface parameters, and each independent field in the original data can be converted into key-value pair format data using the json format. In this embodiment, using the json format to distinguish the individual fields in the original data has the following advantages: (1) This approach makes the underlying implementation need not care about the upper data structure or field names; (2) the blockchain is a { For shared databases in the key, value} format, the json format is also a key-value pair format. The independent fields distinguished by the json format can be more conveniently transferred on the blockchain. Of course, in addition to the json format, in this embodiment, other similar data structures such as {key, value} key-value pair format can also be used to distinguish independent fields in the original data. For example, a HashMap format can be used to pass in a HashMap<key, object> array.

After the individual fields in the original data are converted into key-value pair format data, the field values in the converted key-value pair format data are encrypted to obtain the encrypted field; at the same time, the confusion label of each independent field is calculated. First, the blockchain is a shared database in {key, value} format. In this embodiment, the json format is used to convert individual fields (such as field 1, field 2, field 3...) into key-value pair format data , So the value of the shared database of the blockchain is a json format, that is: the value of the shared database of the blockchain={"field 1 mark": "field 1 value", "field 2 mark": "field 2 value", "field 3 label": "field 3 value", ...}. In this embodiment, each "field 1 mark": "value of field 1" is processed as a whole; the field value of each independent field such as "value of field 1" is encrypted to obtain the encrypted field, and at the same time, calculate : Confusion mark of field 1=hash (field 1 mark), that is, the hash value obtained after hashing the preset mark of each field is used as the confusion mark of each field. Therefore, the storage result on the blockchain after encryption is: <key, [Confusion mark of field 1: Encrypted field 1, Confusion mark of field 2: Encrypted field 2, Confusion mark of field 3: Encrypted field 3...]> . Among them, the encryption algorithm used during encryption includes but is not limited to the AES128 encryption algorithm. Regarding the source of the encryption key for each field during encryption, in an optional implementation, first, a data encryption key x for the entire piece of data is preset, where x is a cryptographically secure random number; secondly, use The key derivation algorithm generates a key for each independent field. The key derivation algorithm in this embodiment includes but is not limited to: the key derivation function KDF3 (Key Derivation Function 3) algorithm. The formula of the KDF3 algorithm is: derived key=KDF(x, salt, y); in this embodiment, y is the preset number of iterations, for example, can be fixed to 10000, salt is the confusion flag corresponding to the independent field, x It is the preset data encryption key x of the entire piece of data, and the finally calculated derived key is the field encryption key corresponding to each independent field.

In this embodiment, when the user wants to authorize the relevant business party to view the value of field 2, the user can only authorize the encryption key of field 2 to the business party, but the business party still cannot view anything other than field 2. Fields, that is, the business party can only see the contents of the fields that are authorized to be viewed in the original data, but cannot see the contents of the entire original data, so that the data can be encrypted by field and can be authorized by field. When decrypting, the storage result on the blockchain is: <key, [Confusion mark of field 1: Encrypted field 1, Confusion mark of field 2: Encrypted field 2, Confusion mark of field 3: Encrypted field 3...]> , When the user wants to authorize field 2, the user needs to send the key, the encryption key corresponding to field 2, and the confusion mark of field 2 to the authorized party; the authorized party, through the confusion mark of key and field 2, find Encrypt field 2; and use the encryption key corresponding to field 2 to decrypt encrypted field 2 to get the data.

In this embodiment, by converting each independent field in the original data into key-value pair format data with a preset field marked as a key and field value, a hash calculation is performed on the preset field marking corresponding to each independent field to obtain the corresponding And calculate the field encryption key corresponding to each independent field by using the confusion sign; encrypt the field value of each independent field based on the field encryption key corresponding to each independent field to obtain the encrypted field; add the original data The confusion mark and the encrypted field corresponding to each independent field are uploaded to the blockchain. Since each independent field in the data can be distinguished, and each independent field is encrypted before uploading to the blockchain, business parties can find out the encrypted fields corresponding to some authorized fields from the blockchain and perform Decrypt to obtain the field values of some authorized fields. The business-related parties cannot decrypt some of the fields that are not authorized to them, nor can they obtain the field values of the unauthorized fields, so as to control the part of the data in the blockchain by the business-related parties. Field authorization access. Moreover, since the field encryption key corresponding to each independent field is calculated by using the confusion indicator corresponding to each independent field, the field encryption key for encrypting the field value of each independent field is different, and the security is higher.

Further, in an optional implementation manner, after field segmented encryption and storage, if all fields in the entire piece of data need to be decrypted, the entire piece of data information can be decrypted by aggregating multiple keys. Specifically, the encryption key x of the entire data can be used to derive the keys of all fields, and then use the keys of all fields to solve each field, and then merge each field to return to the upper layer. Specific steps are as follows:

(1). Obtain data from the blockchain: <key, [Confusion mark of field 1: Encrypted field 1, Confusion mark of field 2: Encrypted field 2, Confusion mark of field 3: Encrypted field 3...]>.

(2) Calculate the keys of all fields through the encryption key x:

Field 1 key=KDF (x, confusion mark of field 1, iteration number);

Field 2 key=KDF (x, confusion mark of field 2, number of iterations);

Field 3 key=KDF (x, confusion mark of field 3, iteration number);

…….

(3) Decrypt all fields to get:

Field 1 label": "The value of field 1";

Field 2 mark": "The value of field 2";

Field 3 mark": "value of field 3";

…….

(4) Integrate the above fields, and finally get:

value={"field 1 flag": "field 1 value", "field 2 flag": "field 2 value", "field 3 flag": "field 3 value", ...}, return to the upper layer.

Referring to FIG. 2, it is a functional module diagram of a preferred embodiment of the blockchain-based data processing system 10 in FIG. 1. The blockchain-based data processing system 10 is divided into one or more functional modules, and the one or more functional modules are stored in the memory 11 and executed by the processor 12 to complete the application. The "module" referred to in this application refers to a series of computer program instruction sets capable of completing specific functions. In this embodiment, the blockchain-based data processing system 10 is divided into: a conversion module 100, a first calculation module 110, a second calculation module 120, an encryption module 130, and an upload module 140. It should be understood that: in this embodiment, the blockchain-based data processing system 10 is divided into a conversion module 100, a first calculation module 110, a second calculation module 120, an encryption module 130, and an upload module 140. It is to express more clearly the functions that the blockchain-based data processing system 10 can achieve, and is not used to limit that the blockchain-based data processing system 10 can only or must be divided into conversion modules 100 and A calculation module 110, a second calculation module 120, an encryption module 130, and an upload module 140. For those skilled in the art, in other embodiments, the blockchain-based data processing system 10 can be easily divided into and The different functional modules in this embodiment will not be repeated here.

The conversion module 100 is configured to: obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, the key In the value pair format data, the preset field corresponding to each independent field is marked as a key, and the field value is a value;

The first calculation module 110 is configured to: perform a hash calculation on the preset field indicator corresponding to each independent field, and use the obtained hash calculation result as the confusion indicator corresponding to each independent field;

The second calculation module 120 is configured to: calculate a field encryption key corresponding to each independent field according to a preset calculation rule and using the confusion mark corresponding to each independent field;

The encryption module 130 is configured to: encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain an encrypted field;

The upload module 140 is configured to: upload the obfuscation indicator and the encrypted field corresponding to each independent field in the original data to the block chain, so that the relevant business party can read from the block according to the obfuscation indicator of the authorized field Find the corresponding encrypted field in the chain and decrypt the found encrypted field to obtain the field value of the authorized field.

Optionally, the above-mentioned second calculation module 120 is specifically configured to: obtain a data encryption key corresponding to the original data set in advance, and use a preset key derivation algorithm to perform the confusion mark and data encryption key corresponding to each independent field. Calculate to obtain the field encryption key corresponding to each independent field.

Optionally, the above-mentioned preset key derivation algorithm is the key derivation function KDF3 algorithm, and the formula is as follows: z=KDF(x, salt, y), where x is the data encryption key, and salt corresponds to each independent field The confusion mark of, y is the preset number of iterations, and z is the calculated field encryption key corresponding to each independent field.

Optionally, the above-mentioned conversion module 100 is specifically used to: obtain the original data to be uploaded to the blockchain, convert the original data into json data, and identify key-value pairs in the converted json data as individual fields in the original data The corresponding key-value pair format data.

The functions or operation steps realized by the program modules such as the conversion module 100, the first calculation module 110, the second calculation module 120, the encryption module 130, and the upload module 140 when executed are substantially the same as those in the foregoing embodiment, and will not be repeated here.

As shown in FIG. 3, FIG. 3 is a schematic flowchart of a preferred embodiment of a blockchain-based data processing method according to this application. The blockchain-based data processing method includes the following steps:

Step S10: Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein the key-value pair format data is The preset field corresponding to each independent field is marked as a key, and the field value is a value;

Step S20: Perform a hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

Step S30, calculating the field encryption key corresponding to each independent field according to the preset calculation rule and using the confusion indicator corresponding to each independent field;

Step S40, encrypting the field value of each independent field based on the field encryption key corresponding to each independent field and using a preset encryption algorithm to obtain an encrypted field;

Step S50: Upload the obfuscation flag and encrypted field corresponding to each independent field in the original data to the blockchain, so that the business related parties can find the corresponding obfuscation flag and encrypted field from the blockchain according to the obfuscation flag of the authorized field. Encrypt the field and decrypt the found encrypted field to obtain the field value of the authorized field.

In this embodiment, first obtain the original data to be uploaded to the blockchain, identify and distinguish each independent field in the original data, and convert each independent field into key-value pair format data, where the key-value pair format The field corresponding to each independent field is marked as the key and the field value is the value. The field value in the format data is encrypted using the preset encryption algorithm using the preset field encryption key corresponding to each independent field to obtain the encrypted field; at the same time, the confusion mark of each independent field is calculated. Upload the encrypted fields and their confusion marks corresponding to each independent field in the original data to the blockchain. When it is necessary to authorize a business-related party to access a certain field in the original data, that is, read permission, the field encryption key corresponding to the authorized field and its confusion flag are sent to the business-related party. In this way, the business related party obtains the encrypted field and its confusion mark corresponding to each independent field in the original data through the blockchain, and retrieves the field encryption key and its confusion mark corresponding to the authorized field pre-authorized to the business related party Use the confusion mark corresponding to the authorized field to find out the independent field in the original data obtained from the blockchain, namely the authorized field, and obtain the encrypted field corresponding to the authorized field, and use the field encryption key corresponding to the authorized field Decrypt the obtained encrypted field to obtain the data content of the authorized field, that is, the field value. Since the business-related party does not have the field encryption keys of fields other than the authorized field in the original data, the business-related party cannot decrypt the data content of the fields other than the authorized field in the original data. In this way, data can be encrypted by field and authorized by field. While data sharing is realized on the blockchain, field information that is not expected to be seen by business related parties can be hidden.

In this embodiment, independent fields can be individually encrypted, so that when authorizing, only partial fields can be authorized to read permissions. Therefore, it is necessary to first identify each independent field in the original data to be uploaded to the blockchain. In an optional implementation manner, after obtaining the original data to be uploaded to the blockchain, the original data is converted into json data, and the key-value pair in the converted json data is identified as the original data The key-value pair format data corresponding to each independent field in. For example, the json format can be used to pass parameters, so that each independent field in the original data can be distinguished in the interface parameters, and each independent field in the original data can be converted into key-value pair format data using the json format. In this embodiment, using the json format to distinguish the individual fields in the original data has the following advantages: (1) This approach makes the underlying implementation need not care about the upper data structure or field names; (2) the blockchain is a { For shared databases in the key, value} format, the json format is also a key-value pair format. The independent fields distinguished by the json format can be more conveniently transferred on the blockchain. Of course, in addition to the json format, in this embodiment, other similar data structures such as {key, value} key-value pair format can also be used to distinguish independent fields in the original data. For example, a HashMap format can be used to pass in a HashMap<key, object> array.

After the individual fields in the original data are converted into key-value pair format data, the field values in the converted key-value pair format data are encrypted to obtain the encrypted field; at the same time, the confusion label of each independent field is calculated. First, the blockchain is a shared database in {key, value} format. In this embodiment, the json format is used to convert individual fields (such as field 1, field 2, field 3...) into key-value pair format data , So the value of the shared database of the blockchain is a json format, that is: the value of the shared database of the blockchain={"field 1 mark": "field 1 value", "field 2 mark": "field 2 value", "field 3 label": "field 3 value", ...}. In this embodiment, each "field 1 mark": "value of field 1" is processed as a whole; the field value of each independent field such as "value of field 1" is encrypted to obtain the encrypted field, and at the same time, calculate : Confusion mark of field 1=hash (field 1 mark), that is, the hash value obtained after hashing the preset mark of each field is used as the confusion mark of each field. Therefore, the storage result on the blockchain after encryption is: <key, [Confusion mark of field 1: Encrypted field 1, Confusion mark of field 2: Encrypted field 2, Confusion mark of field 3: Encrypted field 3...]> . Among them, the encryption algorithm used during encryption includes but is not limited to the AES128 encryption algorithm. Regarding the source of the encryption key for each field during encryption, in an optional implementation, first, a data encryption key x for the entire piece of data is preset, where x is a cryptographically secure random number; secondly, use The key derivation algorithm generates a key for each independent field. The key derivation algorithm in this embodiment includes but is not limited to: the key derivation function KDF3 (Key Derivation Function 3) algorithm. The formula of the KDF3 algorithm is: derived key=KDF(x, salt, y); in this embodiment, y is the preset number of iterations, for example, can be fixed to 10000, salt is the confusion flag corresponding to the independent field, x It is the preset data encryption key x of the entire piece of data, and the finally calculated derived key is the field encryption key corresponding to each independent field.

In this embodiment, when the user wants to authorize the relevant business party to view the value of field 2, the user can only authorize the encryption key of field 2 to the business party, but the business party still cannot view anything other than field 2. Fields, that is, the business party can only see the contents of the fields that are authorized to be viewed in the original data, but cannot see the contents of the entire original data, so that the data can be encrypted by field and can be authorized by field. When decrypting, the storage result on the blockchain is: <key, [Confusion mark of field 1: Encrypted field 1, Confusion mark of field 2: Encrypted field 2, Confusion mark of field 3: Encrypted field 3...]> , When the user wants to authorize field 2, the user needs to send the key, the encryption key corresponding to field 2, and the confusion mark of field 2 to the authorized party; the authorized party, through the confusion mark of key and field 2, find Encrypt field 2; and use the encryption key corresponding to field 2 to decrypt encrypted field 2 to get the data.

In this embodiment, by converting each independent field in the original data into key-value pair format data with a preset field marked as a key and field value, a hash calculation is performed on the preset field marking corresponding to each independent field to obtain the corresponding And calculate the field encryption key corresponding to each independent field by using the confusion sign; encrypt the field value of each independent field based on the field encryption key corresponding to each independent field to obtain the encrypted field; add the original data The confusion mark and the encrypted field corresponding to each independent field are uploaded to the blockchain. Since each independent field in the data can be distinguished, and each independent field is encrypted before uploading to the blockchain, business parties can find out the encrypted fields corresponding to some authorized fields from the blockchain and perform Decrypt to obtain the field values of some authorized fields. The business-related parties cannot decrypt some of the fields that are not authorized to them, nor can they obtain the field values of the unauthorized fields, so as to control the part of the data in the blockchain by the business-related parties. Field authorization access. Moreover, since the field encryption key corresponding to each independent field is calculated by using the confusion indicator corresponding to each independent field, the field encryption key for encrypting the field value of each independent field is different, and the security is higher.

Further, in an optional implementation manner, after field segmentation encryption and storage, if all fields in the entire piece of data need to be decrypted, the entire piece of data information can be decrypted by aggregating multiple keys. Specifically, the encryption key x of the entire data can be used to derive the keys of all fields, and then use the keys of all fields to solve each field, and then merge each field to return to the upper layer. Specific steps are as follows:

(1). Obtain data from the blockchain: <key, [Confusion mark of field 1: Encrypted field 1, Confusion mark of field 2: Encrypted field 2, Confusion mark of field 3: Encrypted field 3...]>.

(2) Calculate the keys of all fields through the encryption key x:

Field 1 key=KDF (x, confusion mark of field 1, iteration number);

Field 2 key=KDF (x, confusion mark of field 2, number of iterations);

Field 3 key=KDF (x, confusion mark of field 3, iteration number);

…….

(3) Decrypt all fields to get:

Field 1 label": "The value of field 1";

Field 2 mark": "The value of field 2";

Field 3 mark": "value of field 3";

…….

(4) Integrate the above fields, and finally get:

value={"field 1 flag": "field 1 value", "field 2 flag": "field 2 value", "field 3 flag": "field 3 value", ...}, return to the upper layer.

In addition, the present application also provides a computer-readable storage medium, which may be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. The computer-readable storage medium stores computer instructions, and when the computer instructions are executed on the computer, the computer executes the following steps:

Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, each independent field in the key-value pair format data The corresponding preset field is marked as a key, and the field value is a value;

Perform hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

Calculate the field encryption key corresponding to each independent field according to preset calculation rules and using the confusion mark corresponding to each independent field;

Encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

Upload the confusion mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that business parties can find the corresponding encrypted field from the blockchain according to the confusion mark of the authorized field. Decrypt the found encrypted field to obtain the field value of the authorized field.

The specific implementation of the computer-readable storage medium of the present application is basically the same as the foregoing embodiments of the electronic device 1 and method, and will not be repeated here.

It should be noted that in this article, the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements not only includes those elements, It also includes other elements not explicitly listed, or elements inherent to the process, method, article, or device. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, article or device that includes the element.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method of the above embodiments can be realized by means of software plus the necessary general hardware platform, and of course it can also be realized by hardware, but in many cases the former is Better implementation. Based on this understanding, the technical solution of this application essentially or the part that contributes to the existing technology can be embodied in the form of a software product, and the computer software product is stored in a storage medium (such as ROM/RAM, magnetic disk, The optical disc) includes several instructions to enable a terminal device (which can be a mobile phone, a computer, a server, an air conditioner, or a network device, etc.) to execute the method described in each embodiment of the present application.

The preferred embodiments of the present application are described above with reference to the drawings, and the scope of rights of the present application is not limited thereby. The serial numbers of the foregoing embodiments of the present application are for description only, and do not represent the superiority of the embodiments. In addition, although a logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than here.

Those skilled in the art can implement this application in a variety of variants without departing from the scope and essence of the application. For example, the features of one embodiment can be used in another embodiment to obtain another embodiment. Any modification, equivalent replacement and improvement made within the use of the technical concept of this application shall fall within the scope of rights of this application.

Claims (20)

1. An electronic device, the electronic device includes a memory and a processor, the memory stores a blockchain-based data processing system that can run on the processor, and the blockchain-based data processing system is The processor implements the following steps when executing:

   Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, each independent field in the key-value pair format data The corresponding preset field is marked as a key, and the field value is a value;

   Perform hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

   Calculate the field encryption key corresponding to each independent field according to preset calculation rules and using the confusion mark corresponding to each independent field;

   Encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

   Upload the confusion mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that business parties can find the corresponding encrypted field from the blockchain according to the confusion mark of the authorized field. Decrypt the found encrypted field to obtain the field value of the authorized field.
2. 5. The electronic device according to claim 1, wherein the step of calculating the field encryption key corresponding to each independent field according to the preset calculation rule and using the confusion indicator corresponding to each independent field comprises:

   Obtain the pre-set data encryption key corresponding to the original data, and use the preset key derivation algorithm to calculate the confusion mark corresponding to each independent field and the data encryption key to obtain the field encryption key corresponding to each independent field. key.
3. 3. The electronic device according to claim 2, wherein the preset key derivation algorithm is a key derivation function KDF3 algorithm, and the formula is as follows:

   z=KDF(x, salt, y),

   Where x is the data encryption key, salt is the confusion indicator corresponding to each independent field, y is the preset number of iterations, and z is the calculated field encryption key corresponding to each independent field.
4. The electronic device according to claim 1, 2 or 3, said acquiring the original data to be uploaded to the blockchain, identifying each independent field in the original data, and converting each independent field into a key-value pair format The data steps include:

   Obtain the original data to be uploaded to the blockchain, convert the original data into json data, and identify the key-value pair in the converted json data as the key-value pair format data corresponding to each independent field in the original data.
5. The electronic device according to claim 1, 2 or 3, wherein the preset encryption algorithm is an AES128 encryption algorithm.
6. A data processing method based on blockchain, the data processing method based on blockchain includes:

   Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, each independent field in the key-value pair format data The corresponding preset field is marked as a key, and the field value is a value;

   Perform hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

   Calculate the field encryption key corresponding to each independent field according to preset calculation rules and using the confusion mark corresponding to each independent field;

   Encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

   Upload the confusion mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that business parties can find the corresponding encrypted field from the blockchain according to the confusion mark of the authorized field. Decrypt the found encrypted field to obtain the field value of the authorized field.
7. 8. The blockchain-based data processing method according to claim 6, wherein the step of calculating the field encryption key corresponding to each independent field according to a preset calculation rule and using the confusion mark corresponding to each independent field comprises:

   Obtain the pre-set data encryption key corresponding to the original data, and use the preset key derivation algorithm to calculate the confusion mark corresponding to each independent field and the data encryption key to obtain the field encryption key corresponding to each independent field. key.
8. According to the blockchain-based data processing method of claim 7, the preset key derivation algorithm is the key derivation function KDF3 algorithm, and the formula is as follows:

   z=KDF(x, salt, y),

   Where x is the data encryption key, salt is the confusion indicator corresponding to each independent field, y is the preset number of iterations, and z is the calculated field encryption key corresponding to each independent field.
9. The blockchain-based data processing method according to claim 6, 7 or 8,

   The step of obtaining the original data to be uploaded to the blockchain, identifying each independent field in the original data, and converting each independent field into key-value pair format data includes:

   Obtain the original data to be uploaded to the blockchain, convert the original data into json data, and identify the key-value pair in the converted json data as the key-value pair format data corresponding to each independent field in the original data.
10. According to the blockchain-based data processing method of claim 6, 7 or 8, the preset encryption algorithm is an AES128 encryption algorithm.
11. A blockchain-based data processing system, the blockchain-based data processing system includes:

    The conversion module is used to obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, the key-value pair format data The preset field corresponding to each independent field is marked as a key and the field value is a value;

    The first calculation module is configured to perform a hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

    The second calculation module is configured to calculate the field encryption key corresponding to each independent field according to the preset calculation rule and using the confusion mark corresponding to each independent field;

    The encryption module is used to encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

    The upload module is used to upload the obfuscation mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that the business related parties can find out from the blockchain according to the obfuscation mark of the authorized field The corresponding encrypted field is decrypted to obtain the field value of the authorized field.
12. The blockchain-based data processing system according to claim 11, wherein the second calculation module is specifically configured to:

    Obtain the pre-set data encryption key corresponding to the original data, and use the preset key derivation algorithm to calculate the confusion mark corresponding to each independent field and the data encryption key to obtain the field encryption key corresponding to each independent field. key.
13. According to the blockchain-based data processing system of claim 12, the preset key derivation algorithm is the key derivation function KDF3 algorithm, and the formula is as follows:

    z=KDF(x, salt, y),

    Where x is the data encryption key, salt is the confusion indicator corresponding to each independent field, y is the preset number of iterations, and z is the calculated field encryption key corresponding to each independent field.
14. According to the blockchain-based data processing system of claim 11, 12 or 13, the conversion module is specifically used for:

    Obtain the original data to be uploaded to the blockchain, convert the original data into json data, and identify the key-value pair in the converted json data as the key-value pair format data corresponding to each independent field in the original data.
15. According to the blockchain-based data processing system of claim 11, 12 or 13, the preset encryption algorithm is an AES128 encryption algorithm.
16. A computer-readable storage medium that stores computer instructions, and when the computer instructions are executed on a computer, the computer executes the following steps:

    Obtain the original data to be uploaded to the blockchain, identify each independent field in the original data, and convert each independent field into key-value pair format data; wherein, each independent field in the key-value pair format data The corresponding preset field is marked as a key, and the field value is a value;

    Perform a hash calculation on the preset field label corresponding to each independent field, and use the obtained hash calculation result as the confusion label corresponding to each independent field;

    Calculate the field encryption key corresponding to each independent field according to preset calculation rules and using the confusion mark corresponding to each independent field;

    Encrypt the field value of each independent field based on the field encryption key corresponding to each independent field and use a preset encryption algorithm to obtain the encrypted field;

    Upload the confusion mark and encrypted field corresponding to each independent field in the original data to the blockchain, so that business parties can find the corresponding encrypted field from the blockchain according to the confusion mark of the authorized field. Decrypt the found encrypted field to obtain the field value of the authorized field.
17. 16. The computer-readable storage medium according to claim 16, when the computer-readable storage medium executes the calculation to obtain the field encryption key corresponding to each independent field according to a preset calculation rule and using the confusion mark corresponding to each independent field, It includes the following steps:

    Obtain the pre-set data encryption key corresponding to the original data, and use the preset key derivation algorithm to calculate the confusion mark corresponding to each independent field and the data encryption key to obtain the field encryption key corresponding to each independent field. key.
18. 17. The computer-readable storage medium of claim 17, when the computer-readable storage medium implements the preset key derivation algorithm when the computer instruction is executed, the method comprises the following steps:

    The preset key derivation algorithm is the key derivation function KDF3 algorithm, the formula is as follows:

    z=KDF(x, salt, y),

    Where x is the data encryption key, salt is the confusion indicator corresponding to each independent field, y is the preset number of iterations, and z is the calculated field encryption key corresponding to each independent field.
19. The computer-readable storage medium according to claim 16, 17 or 18, which executes the acquisition of the original data to be uploaded to the blockchain, and identifies each independent field in the original data , When converting each independent field into key-value pair format data, include the following steps:

    Obtain the original data to be uploaded to the blockchain, convert the original data into json data, and identify the key-value pair in the converted json data as the key-value pair format data corresponding to each independent field in the original data.
20. The computer-readable storage medium according to claim 16, 17 or 18, when the computer-readable storage medium implements the preset encryption algorithm when the computer instruction is executed, it comprises the following steps:

    The preset encryption algorithm is AES128 encryption algorithm.

Images