WO2021219086A1 - 基于区块链的数据传输方法和系统 - Google Patents

基于区块链的数据传输方法和系统 Download PDF

Info

Publication number
WO2021219086A1
WO2021219086A1 PCT/CN2021/091038 CN2021091038W WO2021219086A1 WO 2021219086 A1 WO2021219086 A1 WO 2021219086A1 CN 2021091038 W CN2021091038 W CN 2021091038W WO 2021219086 A1 WO2021219086 A1 WO 2021219086A1
Authority
WO
WIPO (PCT)
Prior art keywords
data
blockchain
public
server node
private key
Prior art date
Application number
PCT/CN2021/091038
Other languages
English (en)
French (fr)
Inventor
辛耀东
张纯锋
王正涛
宋军
马百义
张勇杰
宋学武
Original Assignee
青岛海尔滚筒洗衣机有限公司
杭州甘道智能科技有限公司
海尔智家股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 青岛海尔滚筒洗衣机有限公司, 杭州甘道智能科技有限公司, 海尔智家股份有限公司 filed Critical 青岛海尔滚筒洗衣机有限公司
Publication of WO2021219086A1 publication Critical patent/WO2021219086A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/045—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/50—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using hash chains, e.g. blockchains or hash trees

Definitions

  • the invention belongs to the technical field of information security, and specifically relates to a data transmission method and system based on a blockchain.
  • the laundry and care IoT cloud platform allocates a shared smart laundry device interface to each operating business, and the shared smart laundry device is authenticated on the IoT cloud platform through the interface, and then when the user needs to use the shared smart laundry device, the corresponding The shared smart laundry equipment sends user identity information to the laundry care IoT cloud platform so that the laundry care IoT cloud platform controls the user's access rights.
  • the data transmission between the smart laundry equipment and the washing and care IoT cloud platform is performed directly, or after some simple encryption is performed, it is easy to cause the transmitted data to be intercepted and the transmission protocol to be cracked, resulting in data transmission The safety and reliability are greatly reduced.
  • the present invention provides a blockchain-based data transmission method and system, which generates a symmetric key and a pair of public and private key pairs based on the unique identification information of the smart laundry device. Encrypt the data to be transmitted, and the symmetric key and the public-private key pair are stored in the blockchain server node, and the data related to the smart laundry device is also stored in the blockchain server, using the blockchain signature mechanism for intelligence.
  • the identity authentication of laundry equipment guarantees the effectiveness of the equipment, guarantees the confidentiality of the data to be transmitted through symmetric encryption, and uses the consensus mechanism and non-tampering characteristics of the blockchain to ensure the authenticity and security of the data to be transmitted.
  • the first aspect of the embodiments of the present invention provides a blockchain-based data transmission method, including:
  • the device authentication platform obtains the identification information of the smart laundry device, generates a symmetric key and a public-private key pair according to the identification information, and stores the symmetric key and the public-private key pair in the blockchain server node.
  • the smart laundry equipment has a one-to-one correspondence;
  • the smart laundry device uses the symmetric key to encrypt the data to be transmitted, uses the public and private keys to digitally sign the encrypted data, obtains the signed data, and sends the signed data to the Blockchain server node;
  • the blockchain server node verifies the signed data, decrypts the encrypted data when the verification is successful, parses the decrypted data, and uploads the analyzed data to the chain.
  • the method further includes:
  • the smart laundry device receives the device instruction sent by the business cloud platform, and processes the device instruction to obtain the data to be transmitted.
  • a software development kit SDK is stored in the security chip of the smart laundry device; before the smart laundry device uses the symmetric key to encrypt the data to be transmitted, the method further includes:
  • the blockchain transaction information and the symmetric key are stored in the security chip.
  • the digitally signing the encrypted data using the public and private keys includes:
  • the encrypted data is data-signed by the public key in the public-private key pair to obtain the signed data.
  • the verification of the signed data by the blockchain server node includes:
  • the blockchain server node obtains the public-private key pair corresponding to the smart laundry device on the chain, and verifies the signed data through the private key in the public-private key pair.
  • the parsing of the decrypted data includes:
  • the sending the signed data to the blockchain server node includes:
  • the interface in the SDK in the security chip is called, and the signed data is sent to the blockchain server node through the interface.
  • a second aspect of the embodiments of the present invention provides a blockchain-based data transmission system, including: a device authentication platform, a blockchain server node, and a smart laundry device;
  • the device authentication platform is used to obtain the identification information of the smart laundry device, generate a symmetric key and a public-private key pair according to the identification information, and store the symmetric key and the public-private key pair in a blockchain server node, so
  • the identification information has a one-to-one correspondence with the smart laundry device;
  • the smart laundry device is configured to: use the symmetric key to encrypt the data to be transmitted, use the public and private keys to digitally sign the encrypted data to obtain the signed data, and to transfer the signed data Sending data to the blockchain server node;
  • the blockchain server node is used to: verify the signed data, decrypt the encrypted data when the verification is successful, parse the decrypted data, and upload the parsed data on the chain .
  • a third aspect of the embodiments of the present invention provides a computer device, including: at least one processor and a memory;
  • the memory stores computer execution instructions
  • the at least one processor executes the computer-executable instructions stored in the memory, so that the at least one processor executes the blockchain-based data transmission method described in the first aspect of the embodiments of the present invention.
  • a fourth aspect of the embodiments of the present invention provides a computer-readable storage medium that stores computer-executable instructions.
  • the processor executes the computer-executed instructions, the first aspect of the embodiments of the present invention is implemented.
  • the described data transmission method based on blockchain.
  • a fifth aspect of the embodiments of the present invention provides a chip, the chip includes a memory and a processor, the memory stores code and data, the memory is coupled to the processor, and the processor runs in the memory
  • the program enables the chip to implement the blockchain-based data transmission method described in the first aspect of the embodiment of the present invention.
  • the sixth aspect of the embodiments of the present invention provides a program product, including: a computer program, when the program product is run on a computer, the computer realizes the blockchain-based Data transmission method.
  • the seventh aspect of the embodiments of the present invention provides a computer program, when the computer program is executed by a processor, it is used to implement the blockchain-based data transmission method described in the first aspect of the embodiments of the present invention.
  • the embodiments of the present invention provide a blockchain-based data transmission method and system.
  • the identification information of a smart laundry device is obtained through a device authentication platform, and a symmetric key and public and private keys are generated according to the identification information.
  • the key pair, the symmetric key and the public-private key pair are stored in the blockchain server node, and the identification information has a one-to-one correspondence with the smart laundry device; the smart laundry device uses the symmetric key to encrypt the data to be transmitted Processing, using the public and private keys to digitally sign the encrypted data to obtain the signed data, and send the signed data to the blockchain server node; the blockchain server node pair The signed data is verified, and when the verification is successful, the encrypted data is decrypted, the decrypted data is analyzed, and the analyzed data is uploaded to the chain. Since each smart laundry device corresponds to unique identification information, the symmetric key and public-private key pair generated for each laundry device are different, which greatly increases the difficulty of cracking.
  • the symmetric key is used to encrypt the data to be transmitted.
  • the symmetric key pair is used to verify the digital identity of the smart laundry device using the blockchain signature mechanism to ensure the effectiveness of the device, and the relevant data of the smart laundry device is encrypted and stored in the block on the chain In the chain server node, the data is made transparent and immutable, which greatly increases the reliability of data transmission.
  • Fig. 1 is an application scenario diagram of a blockchain-based data transmission method according to an exemplary embodiment of the present invention
  • FIG. 2 is a schematic flowchart of a data transmission method based on blockchain according to an exemplary embodiment of the present invention
  • Fig. 3 is a schematic structural diagram of a data transmission system based on a blockchain according to an exemplary embodiment of the present invention
  • Fig. 4 is a schematic structural diagram of a computer device shown in an exemplary embodiment of the present invention.
  • the laundry and care IoT cloud platform allocates a shared smart laundry device interface to each operating business, and the shared smart laundry device is authenticated on the IoT cloud platform through the interface, and then when the user needs to use the shared smart laundry device, the corresponding The shared smart laundry equipment sends user identity information to the laundry care IoT cloud platform so that the laundry care IoT cloud platform controls the user's access rights.
  • the data transmission between the smart laundry equipment and the washing and care IoT cloud platform is performed directly, or after some simple encryption is performed, it is easy to cause the transmitted data to be intercepted and the transmission protocol to be cracked, resulting in data transmission The safety and reliability are greatly reduced.
  • the related data of traditional smart laundry equipment (such as equipment usage records, personal identification information filled in when users use smart laundry equipment) are all stored in ordinary relational databases, but data information in ordinary relational databases It is easy to be stolen and tampered by hackers, thereby threatening the authenticity and security of stored data.
  • the main technical solutions of the present application include: based on blockchain distributed data storage, consensus mechanism, and non-tamperable characteristics, a blockchain-based data transmission method is provided.
  • a symmetric key and a pair of public-private key pairs are generated based on the unique hardware serial number of the smart laundry device.
  • the symmetric key is used to encrypt or decrypt the data to be transmitted, and the public-private key pair is used for identity authentication of the smart laundry device.
  • the symmetric key and the public-private key pair exist on the server node of the blockchain.
  • these two keys are stored in the security chip, which is almost difficult for hackers to crack, and each smart laundry device is used for encryption
  • the symmetric keys are different, and the difficulty of cracking is greatly improved.
  • the relevant data of the smart laundry equipment is stored on the blockchain server node, the security and authenticity of the data transmission are guaranteed due to the characteristics of the consensus of the blockchain nodes.
  • Fig. 1 is an application scenario diagram of a blockchain-based data transmission method shown in an exemplary embodiment of the present invention.
  • the basic architecture of the application scenario provided by this embodiment mainly includes: a smart laundry device authentication platform 101, at least one smart laundry device 102, a blockchain server 103, and a client device 104; among them, the smart laundry device All are registered and authenticated on the smart laundry equipment certification platform so that the smart laundry equipment certification platform can obtain the management right of the device; the user sends an application request to the smart laundry device through the client device (such as a mobile phone), and uses the request when the request is passed.
  • Smart laundry equipment; among them, the smart laundry equipment authentication platform, smart laundry equipment and related information sent by the user through the client device are all sent to the blockchain server for uploading on the blockchain to be stored in the blockchain.
  • Fig. 2 is a schematic flowchart of a data transmission method based on a blockchain according to an exemplary embodiment of the present invention.
  • the method provided in this embodiment may include the following steps.
  • the device authentication platform obtains the identification information of the smart laundry device, generates a symmetric key and a public-private key pair according to the identification information, and stores the symmetric key and the public-private key pair in a blockchain server node, the identification information There is a one-to-one correspondence with the smart laundry device.
  • the identification information can include, but is not limited to, the unique hardware serial number (device id) of the smart laundry device and the integrated circuit card identity (ICCID) of the laundry IoT SIM card. Each smart laundry device corresponds to a unique hardware serial number. And ICCID.
  • the smart laundry certification platform provides each merchant with a smart laundry device binding interface, and obtains the management right of the device by binding the hardware serial number and ICCID of each laundry device, and is based on the hardware serial number and ICCID of each device.
  • Each smart laundry device generates a symmetric key and a public-private key pair, and the symmetric key and public-private key pair of each smart laundry device are unique. Different smart laundry devices have different symmetric keys and public-private key pairs.
  • the symmetric key is used to encrypt or decrypt the transmitted data
  • the public-private key pair is used to authenticate the identity of the smart laundry device. Then the generated symmetric key and public-private key pair of each smart laundry device are stored in the blockchain server node.
  • the smart laundry device uses the symmetric key to encrypt the data to be transmitted, uses the public and private keys to digitally sign the encrypted data, obtains the signed data, and sends the signed data to The blockchain server node.
  • the data to be transmitted includes device usage records, identity information filled in by the user to use the smart laundry device, and so on.
  • each smart laundry device the symmetric key and public-private key pair of each smart laundry device are pre-burned into the additional security chip of each device module; then the security chip in the smart laundry device encrypts the data to be transmitted to obtain the encrypted data, Then digitally sign the encrypted data according to the public key in the public-private key pair, and store the signed data on the chain to the blockchain server node.
  • the symmetric key and public-private key pair of each smart laundry device are stored in the security chip, which further increases the difficulty of cracking, and the data to be transmitted is encrypted and signed for transmission, ensuring the reliability of the data transmission process Security and confidentiality, the encrypted and signed data are stored in the blockchain.
  • the consensus mechanism and non-tamperability based on the blockchain ensure the security and authenticity of the data.
  • S203 The blockchain server node verifies the signed data, decrypts the encrypted data when the verification is successful, parses the decrypted data, and uploads the analyzed data to the chain.
  • the blockchain server node obtains the public-private key pair corresponding to the smart laundry device on the chain, and verifies the signed data with the private key in the public-private key pair. If the verification fails, it is stated The data is forged; if the verification is successful, obtain the symmetric key of the smart laundry device on the chain, use the symmetric key to decrypt the encrypted data, and then analyze the decrypted data to obtain the parsed data , Upload the parsed data to the chain.
  • each smart laundry device corresponds to unique identification information
  • the generated symmetric key and public-private key pair of each laundry device are different, which greatly increases the difficulty of cracking.
  • the symmetric key is used to treat transmission.
  • the data of the smart laundry device is encrypted to ensure that user privacy is not leaked.
  • the digital identity verification of the smart laundry device using the blockchain signature mechanism is used to ensure the validity of the device, and the related data of the smart laundry device is encrypted before uploading.
  • the chain is stored in the blockchain server node, making the data transparent and immutable, thereby greatly increasing the reliability of data transmission.
  • the device authentication platform obtains the identification information of the smart laundry device, generates a symmetric key and a public-private key pair according to the identification information, and stores the symmetric key and the public-private key pair in the blockchain server node, the identification information There is a one-to-one correspondence with the smart laundry device.
  • the identification information can include, but is not limited to, the unique hardware serial number (device id) of the smart laundry device and the integrated circuit card identity (ICCID) of the laundry IoT SIM card. Each smart laundry device corresponds to a unique hardware serial number. And ICCID.
  • the smart laundry authentication platform provides each merchant with a smart laundry device binding interface, and obtains the management right of the device by binding the hardware serial number and ICCID of each laundry device.
  • the smart laundry device When the smart laundry device is bound and registered with the smart laundry authentication platform, it obtains and stores the hardware serial number and ICCID of each device, and generates a symmetric key and a public-private key pair for each smart laundry device according to each device.
  • the symmetric key and the public-private key pair of the smart laundry device are unique, and the symmetric key and the public-private key pair of different smart laundry devices are different.
  • the symmetric key is used to encrypt or decrypt the transmitted data
  • the public-private key pair is used to authenticate the identity of the smart laundry device. Then the generated symmetric key and public-private key pair of each smart laundry device are stored in the blockchain server node.
  • a software development kit SDK is stored in the security chip of the smart laundry device; the SDK is used to generate blockchain transaction information according to the public-private key pair, and the blockchain transaction information includes the public-private key pair ; Store the blockchain transaction information and the symmetric key in the security chip.
  • a hyperchain hvm smart contract is deployed on the blockchain server node to provide an SDK for each smart laundry device that is adapted to operate the smart contract. It runs in the security chip of each smart laundry device, and the SDK is used according to each
  • the public-private key pair of the smart laundry device generates an Account string, which contains the public-private key pair and transaction information.
  • the Account string is the subject of the blockchain transaction, and then the Account string and the symmetric key are burned into each unit.
  • the additional security chip of the device module is deployed on the blockchain server node to provide an SDK for each smart laundry device that is adapted to operate the smart contract. It runs in the security chip of each smart laundry device, and the SDK is used according to each
  • the public-private key pair of the smart laundry device generates an Account string, which contains the public-private key pair and transaction information.
  • the Account string is the subject of the blockchain transaction, and then the Account string and the symmetric key are burned into each unit.
  • the additional security chip of the device module is deployed on the blockchain server
  • the method further includes: the smart laundry device receives the device instruction sent by the business cloud platform, and processes the device instruction to obtain the data to be transmitted.
  • the SDK is different from the embedded program of the smart laundry device itself.
  • the SDK provides a limited interface for the embedded program for device status reporting or usage record reporting.
  • the embedded program is used to receive the device instructions issued by the business cloud platform and process the received device instructions to obtain the data to be transmitted.
  • the data to be transmitted may include the use record data of the device and the identity filled in when the user uses the device Information or device status information, etc.
  • the smart laundry device uses the symmetric key to encrypt the data to be transmitted, uses the public and private keys to digitally sign the encrypted data, obtains the signed data, and sends the signed data To the blockchain server node.
  • the SDK operating the hvm smart contract in the security chip of the smart laundry device encrypts the data to be transmitted with the symmetric key of the device to obtain encrypted data; then digitally signs the encrypted data with the public key in the public-private key pair ; Call the interface provided by the SDK in the security chip to perform data on-chain operations, that is, send the signed data to the blockchain server node through the interface provided by the SDK.
  • the blockchain server node verifies the signed data, decrypts the encrypted data when the verification is successful, parses the decrypted data, and uploads the analyzed data to the chain.
  • the blockchain server node obtains the public-private key pair corresponding to the smart laundry device on the chain, and verifies the signed data through the private key in the public-private key pair. If the verification fails, the data is forged; if the verification is successful, the symmetric key of the smart laundry device is obtained on the chain, and the encrypted data is decrypted with the symmetric key; then the device of the smart laundry device is obtained Protocol, through the device protocol to analyze the decrypted data, get the parsed data, and finally upload the parsed data to the chain.
  • all information registered by the user through the client application APP is encrypted with a symmetric key and sent to the blockchain server node for storage.
  • the digital signature mechanism of the blockchain is used to authenticate the identity of the smart laundry device, which implements strict verification of the digital identity of the device and ensures the effectiveness of the smart laundry device; further, the symmetric encryption algorithm is used to remove user information. Sensitive processing ensures that the data transmission process will not be intercepted and cause information leakage; and all the relevant data of the smart laundry device is encrypted and stored in the blockchain, based on the blockchain distributed data storage, consensus mechanism and non-tamperable The characteristics of the data are open, transparent and non-tamperable, ensuring the authenticity and reliability of the data
  • Fig. 3 is a schematic structural diagram of a data transmission system based on a blockchain according to an exemplary embodiment of the present invention.
  • the system provided by this embodiment includes: a smart laundry device authentication platform 301, a blockchain server node 302, and a smart laundry device 303;
  • the smart laundry device authentication platform is used to: obtain identification information of the smart laundry device , Generating a symmetric key and a public-private key pair according to the identification information, and storing the symmetric key and the public-private key pair in a blockchain server node, and the identification information has a one-to-one correspondence with the smart laundry device ;
  • the smart laundry device is used to: use the symmetric key to encrypt the data to be transmitted, use the public and private keys to digitally sign the encrypted data to obtain the signed data, and then the signed data Sent to the blockchain server node;
  • the blockchain server node is used to: verify the signed data, decrypt the encrypted data when the verification is successful, and parse the decryption After the data, the data obtained by the analysis will be uploaded to the chain.
  • the number of smart laundry devices is at least one.
  • the system provided in this embodiment further includes: a service cloud platform 304, which is used to call an interface for a smart laundry device and send device instructions to the smart laundry device; the smart laundry device is also used to: receive services The device instruction sent by the cloud platform, and the device instruction is processed to obtain the data to be transmitted.
  • a service cloud platform 304 which is used to call an interface for a smart laundry device and send device instructions to the smart laundry device
  • the smart laundry device is also used to: receive services The device instruction sent by the cloud platform, and the device instruction is processed to obtain the data to be transmitted.
  • a software development kit SDK is stored in the security chip of the smart laundry device; the smart laundry device authentication platform is also used to: use the SDK to generate blockchain transaction information according to the public-private key pair, the The block chain transaction information includes the public and private key pair; the block chain transaction information and the symmetric key are stored in the security chip.
  • the smart laundry device is specifically configured to: use the public key in the public-private key pair to perform data signature on the encrypted data to obtain the signed data.
  • the blockchain server node is specifically configured to: the blockchain server node obtains the public-private key pair corresponding to the smart laundry device on the chain, and uses the private key pair in the public-private key pair to The signed data is verified.
  • the blockchain server node is specifically configured to: obtain a device protocol corresponding to the smart laundry device; and parse the decrypted data according to the device protocol.
  • the smart laundry device is specifically configured to: call an interface in the SDK in the security chip, and send the signed data to the blockchain server node through the interface.
  • Figure 4 is a schematic diagram of the hardware structure of a computer device provided by an embodiment of the present invention.
  • the computer device 40 provided in this embodiment includes: at least one processor 401 and a memory 402. Among them, the processor 401 and the memory 402 are connected through a bus 403.
  • At least one processor 401 executes the computer-executable instructions stored in the memory 402, so that at least one processor 401 executes the blockchain-based data transmission method in the foregoing method embodiment.
  • the processor may be a central processing unit (English: Central Processing Unit, abbreviated as: CPU), or other general-purpose processors, digital signal processors (English: Digital Signal Processor, referred to as DSP), application specific integrated circuit (English: Application Specific Integrated Circuit, referred to as ASIC), etc.
  • the general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like. The steps of the method disclosed in combination with the invention can be directly embodied as executed and completed by a hardware processor, or executed and completed by a combination of hardware and software modules in the processor.
  • the memory may include a high-speed RAM memory, and may also include a non-volatile storage NVM, such as at least one disk memory.
  • NVM non-volatile storage
  • the bus can be an Industry Standard Architecture (ISA) bus, Peripheral Component Interconnect (PCI) bus, or Extended Industry Standard Architecture (EISA) bus, etc.
  • ISA Industry Standard Architecture
  • PCI Peripheral Component Interconnect
  • EISA Extended Industry Standard Architecture
  • the bus can be divided into address bus, data bus, control bus and so on.
  • the buses in the drawings of this application are not limited to only one bus or one type of bus.
  • Another embodiment of the present application provides a computer-readable storage medium in which computer-executable instructions are stored.
  • the processor executes the computer-executable instructions, the region-based method in the foregoing method embodiment is implemented.
  • the data transmission method of the block chain is implemented.
  • the above-mentioned computer-readable storage medium may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable and removable Programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic disk or optical disk.
  • SRAM static random access memory
  • EEPROM electrically erasable and removable Programmable read-only memory
  • EPROM erasable programmable read-only memory
  • PROM programmable read-only memory
  • ROM read-only memory
  • magnetic memory flash memory
  • flash memory magnetic disk or optical disk.
  • a readable storage medium may be any available medium that can be accessed by a general purpose or special purpose computer.
  • An exemplary readable storage medium is coupled to the processor, so that the processor can read information from the readable storage medium and can write information to the readable storage medium.
  • the readable storage medium may also be an integral part of the processor.
  • the processor and the readable storage medium may be located in Application Specific Integrated Circuits (ASIC).
  • ASIC Application Specific Integrated Circuits
  • the processor and the readable storage medium may also exist in the device as discrete components.
  • This embodiment also provides a chip.
  • the chip includes a memory and a processor, the memory stores code and data, the memory is coupled with the processor, and the processor runs the program in the memory so that all The chip is used to execute the blockchain-based data transmission method provided by the various embodiments described above.
  • This embodiment also provides a computer program, when the computer program is executed by the processor, it is used to execute the blockchain-based data transmission method provided in the foregoing various implementation manners.
  • a person of ordinary skill in the art can understand that all or part of the steps in the foregoing method embodiments can be implemented by a program instructing relevant hardware.
  • the aforementioned program can be stored in a computer readable storage medium. When the program is executed, it executes the steps including the foregoing method embodiments; and the foregoing storage medium includes: ROM, RAM, magnetic disk, or optical disk and other media that can store program codes.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • General Engineering & Computer Science (AREA)
  • Storage Device Security (AREA)
  • Telephonic Communication Services (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

本发明实施例提供一种基于区块链的数据传输方法和系统，该方法包括：设备认证平台获取智能洗衣设备的标识信息，根据标识信息生成对称密钥和公私钥对，并将对称密钥和公私钥对存储于区块链服务器节点，标识信息与智能洗衣设备为一一对应的关系；智能洗衣设备利用对称密钥对待传输数据进行加密处理，利用公私钥对对所述加密后的数据进行数字签名得到签名后的数据，将签名后的数据发送至区块链服务器节点；区块链服务器节点对签名后的数据进行验签，并在验证成功时解密所述加密后的数据，并解析解密后的数据，将解析得到的数据进行上链。本发明实施例使得数据传输过程更加安全可靠，且提高了数据的机密性和真实性。

Description

基于区块链的数据传输方法和系统
本申请要求于2020年04月29日提交中国专利局、申请号为202010353842.0、申请名称为“基于区块链的数据传输方法和系统”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明属于信息安全技术领域，具体涉及一种基于区块链的数据传输方法和系统。
背景技术
随着物联网技术的发展，越来越多的物联网设备连接到互联网中。许多物联网驱动的共享设备也发展非常迅速，比如共享单车、共享充电宝、共享智能洗衣设备等。
相关技术中，洗护物联云平台为每一个运营商家分配共享智能洗衣设备接口，共享智能洗衣设备通过接口洗护物联云平台上进行认证，然后用户需要使用共享智能洗衣设备时，由相应的共享智能洗衣设备向洗护物联云平台发送用户身份信息，以使洗护物联云平台控制用户的访问权限。
但是，智能洗衣设备与洗护物联云平台之间的数据传输均是直接进行的，或者进行一些简单加密之后再传输，如此很容易导致传输的数据被拦截并破解传输协议，从而导致数据传输的安全可靠性大大降低。
发明内容
为了解决现有技术中的上述问题，本发明提供一种基于区块链的数据传输方法和系统，通过基于智能洗衣设备的唯一标识信息生成一个对称密钥和一对公私钥对，对称密钥给待传输的数据加密，并且，对称密钥和公私钥对存储在区块链服务器节点中，并且智能洗衣设备相关的数据也都保存在区块链服务器中，利用区块链签名机制进行智能洗衣设备身份认证，保证了设备的有效性，通过对称加密保 证待传输数据的机密性，利用区块链的共识机制、不可篡改特性保证了待传输数据的真实性和安全性。
本发明实施例的第一方面提供一种基于区块链的数据传输方法，包括：
设备认证平台获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系；
智能洗衣设备利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点；
所述区块链服务器节点对所述签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
可选的，所述智能洗衣设备利用所述对称密钥对待传输数据进行加密处理之前，所述方法还包括：
智能洗衣设备接收业务云平台发送的设备指令，并对所述设备指令进行处理，得到待传输数据。
可选的，所述智能洗衣设备的安全芯片中存储有软件开发工具包SDK；所述智能洗衣设备利用所述对称密钥对待传输数据进行加密处理之前，所述方法还包括：
利用所述SDK根据所述公私钥对生成区块链交易信息，所述区块链交易信息包括所述公私钥对；
将所述区块链交易信息和所述对称密钥存储至所述安全芯片中。
可选的，所述利用所述公私钥对对所述加密后的数据进行数字签名，包括：
通过所述公私钥对中的公钥对所述加密后的数据进行数据签名，得到签名后的数据。
可选的，所述区块链服务器节点对所述签名后的数据进行验签，包括：
所述区块链服务器节点在链上获取所述智能洗衣设备对应的公私钥对，并通过所述公私钥对中的私钥对所述签名后的数据进行验签。
可选的，所述解析所述解密后的数据，包括：
获取所述智能洗衣设备对应的设备协议；
根据所述设备协议对所述解密后的数据进行解析。
可选的，所述将所述签名后的数据发送至所述区块链服务器节点，包括：
调用所述安全芯片中的SDK中的接口，通过所述接口将所述签名后的数据发送至所述区块链服务器节点。
本发明实施例的第二方面提供一种基于区块链的数据传输系统，包括：设备认证平台，区块链服务器节点以及智能洗衣设备；
所述设备认证平台用于：获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系；
所述智能洗衣设备用于：利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点；
所述区块链服务器节点用于：对所述签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
本发明实施例的第三方面提供一种计算机设备，包括：至少一个处理器和存储器；
所述存储器存储计算机执行指令；
所述至少一个处理器执行所述存储器存储的计算机执行指令，使得所述至少一个处理器执行本发明实施例第一方面所述的基于区块链的数据传输方法。
本发明实施例的第四方面提供一种计算机可读存储介质，所述计算机可读存储介质中存储有计算机执行指令，当处理器执行所 述计算机执行指令时，实现本发明实施例第一方面所述的基于区块链的数据传输方法。
本发明实施例的第五方面提供一种芯片，所述芯片包括存储器、处理器，所述存储器中存储代码和数据，所述存储器与所述处理器耦合，所述处理器运行所述存储器中的程序使得所述芯片实现本发明实施例第一方面所述的基于区块链的数据传输方法。
本发明实施例的第六方面提供一种程序产品，包括：计算机程序，当所述程序产品在计算机上运行时，使得所述计算机实现本发明实施例第一方面所述的基于区块链的数据传输方法。
本发明实施例的第七方面提供一种计算机程序，当所述计算机程序被处理器执行时，用于实现本发明实施例第一方面所述的基于区块链的数据传输方法。
本领域技术人员能够理解的是，本发明实施例提供一种基于区块链的数据传输方法和系统，通过设备认证平台获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，将所述对称密钥和公私钥对存储于区块链服务器节点，标识信息与所述智能洗衣设备为一一对应的关系；智能洗衣设备利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点；所述区块链服务器节点对所述签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。由于每台智能洗衣设备对应唯一的标识信息，因此产生的每台洗衣设备的对称密钥和公私钥对都各不相同，大大增加了其破解难度，利用对称密钥对待传输的数据进行加密保证了用户隐私不被泄露，使用对称钥对利用区块链的签名机制进行智能洗衣设备数字身份的验证，保证了设备的有效性，并且智能洗衣设备的相关数据都加密后上链存储在区块链服务器节点中，使得数据透明且不可篡改，从而大大增加了数据传输的可靠性。
附图说明
下面参照附图来描述本发明的基于区块链的数据传输方法和系统的优选实施方式。附图为：
图1是本发明一示例性实施例示出的基于区块链的数据传输方法的应用场景图；
图2是本发明一示例性实施例示出的基于区块链的数据传输方法的流程示意图；
图3是本发明一示例性实施例示出的基于区块链的数据传输系统的结构示意图；
图4是本发明一示例性实施例示出的计算机设备的结构示意图。
具体实施方式
为使本发明实施例的目的、技术方案和优点更加清楚，下面将结合本发明实施例中的附图，对本发明实施例中的技术方案进行清楚、完整地描述，显然，所描述的实施例仅仅是本发明一部分实施例，而不是全部的实施例。基于本发明中的实施例，本领域普通技术人员在没有做出创造性劳动前提下所获得的所有其他实施例，都属于本发明保护的范围。
本发明的说明书和权利要求书及上述附图中的术语“第一”、“第二”、“第三”“第四”等(如果存在)是用于区别类似的对象，而不必用于描述特定的顺序或先后次序。应该理解这样使用的数据在适当情况下可以互换，以便这里描述的本发明的实施例例如能够以除了在这里图示或描述的那些以外的顺序实施。此外，术语“包括”和“具有”以及他们的任何变形，意图在于覆盖不排他的包含，例如，包含了一系列步骤或单元的过程、方法、系统、产品或设备不必限于清楚地列出的那些步骤或单元，而是可包括没有清楚地列出的或对于这些过程、方法、产品或设备固有的其它步骤或单元。
随着物联网技术的发展，越来越多的物联网设备连接到互联网中。许多物联网驱动的共享设备也发展非常迅速，比如共享单车、共享充电宝、共享智能洗衣设备等。
相关技术中，洗护物联云平台为每一个运营商家分配共享智能洗衣设备接口，共享智能洗衣设备通过接口洗护物联云平台上进行认证，然后用户需要使用共享智能洗衣设备时，由相应的共享智能 洗衣设备向洗护物联云平台发送用户身份信息，以使洗护物联云平台控制用户的访问权限。
但是，智能洗衣设备与洗护物联云平台之间的数据传输均是直接进行的，或者进行一些简单加密之后再传输，如此很容易导致传输的数据被拦截并破解传输协议，从而导致数据传输的安全可靠性大大降低。并且，传统的智能洗衣设备的相关数据(比如设备的使用记录，用户使用智能洗衣设备时填写的个人身份信息)都是存储于普通的关系型数据库中，然而普通的关系型数据库中的数据信息很容易被黑客窃取和篡改，从而威胁存储数据的真实性和安全性。
针对此缺陷，本申请的主要技术方案包括：基于区块链分布式数据存储、共识机制以及不可篡改的特性，提供一种基于区块链的数据传输方法。基于智能洗衣设备唯一硬件序列号生成一个对称密钥以及一对公私钥对，对称密钥用于对待传输的数据进行加密或解密，公私钥对用于智能洗衣设备身份认证。且对称密钥和公私钥对存在于区块链的服务器节点上，对于智能洗衣设备而言，这两种密钥存放在安全芯片中，黑客几乎难以破解，并且每台智能洗衣设备用于加密的对称密钥各不相同，破解难度更是大大提高。另外，由于智能洗衣设备相关数据都保存在区块链服务器节点上，由于区块链节点共识的特性，保证了数据传输的安全性和真实性。
下面结合上述附图阐述本发明的基于区块链的数据传输方法和系统的优选技术方案。
图1是本发明一示例性实施例示出的基于区块链的数据传输方法的应用场景图。
如图1所示，本实施例提供的应用场景的基本架构主要包括：智能洗衣设备认证平台101，至少一台智能洗衣设备102，区块链服务器103，客户端设备104；其中，智能洗衣设备均在智能洗衣设备认证平台上进行注册认证，以使智能洗衣设备认证平台获取设备的管理权；用户通过客户端设备(比如手机)向智能洗衣设备发送申请使用请求，并在请求通过时使用该智能洗衣设备；其中，智能洗衣设备认证平台、智能洗衣设备以及用户通过客户端设备发送的相关信息均发送至区块链服务器中进行上链，以存储在区块链中。
图2是本发明一示例性实施例示出的基于区块链的数据传输方法的流程示意图。
如图2所示，本实施例提供的方法可以包括以下步骤。
S201，设备认证平台获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系。
其中，标识信息可以但不限于包括智能洗衣设备的唯一硬件序列号(device id)以及洗衣物联SIM卡的卡号(Integrate circuit card identity，ICCID)，每台智能洗衣设备均对应唯一的硬件序列号和ICCID。
具体的，智能洗衣认证平台为每个商家提供智能洗衣设备绑定接口，通过绑定每台洗衣设备的硬件序列号和ICCID获得设备的管理权，并根据每台设备的硬件序列号和ICCID为每台智能洗衣设备生成对称密钥和公私钥对，且每台智能洗衣设备的对称密钥和公私钥对都是唯一的，不同智能洗衣设备的对称密钥和公私钥对各不相同。其中的对称密钥用于对传输数据进行加密或解密，公私钥对用于进行智能洗衣设备身份认证。然后将生成的每台智能洗衣设备的对称密钥和公私钥对存储到区块链服务器节点中。
本步骤中，为每台智能洗衣设备生成各不相同的对称密钥和公私钥对，并且对称密钥和公私钥对均存储在区块链服务器节点中，大大提高了破解难度。
S202，智能洗衣设备利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点。
其中，待传输数据包括设备使用记录、用户使用智能洗衣设备是填写的身份信息等。
具体的，每台智能洗衣设备的对称密钥和公私钥对预先烧录进每台设备模组额外的安全芯片中；然后由智能洗衣设备中的安全芯片对待传输数据进行加密，得到加密数据，然后再根据公私钥对中的公钥对加密数据进行数字签名，将签名后的数据上链存储至区块链服务器节点中。
本步骤中，将每台智能洗衣设备的对称密钥和公私钥对存储在安全芯片中，进一步提高了破解难度，并且将待传输数据加密、签名后进行传输，保证了数据传输过程中的可靠性和机密性，将加密、签名的数据存储在区块链中，基于区块链的共识机制和不可篡改特性保证了数据的安全性和真实性。
S203，所述区块链服务器节点对所述签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
具体的，区块链服务器节点在链上获取该智能洗衣设备对应的公私钥对，并通过所述公私钥对中的私钥对所述签名后的数据进行验签，若验证失败，则说明该数据是伪造的；若验证成功，则在链上获取该智能洗衣设备的对称密钥，采用对称密钥对加密后的数据进行解密，然后对解密后的数据进行解析，得到解析后的数据，将解析后的数据上链。
本实施例中，由于每台智能洗衣设备对应唯一的标识信息，因此产生的每台洗衣设备的对称密钥和公私钥对都各不相同，大大增加了其破解难度，利用对称密钥对待传输的数据进行加密保证了用户隐私不被泄露，使用对称钥对利用区块链的签名机制进行智能洗衣设备数字身份的验证，保证了设备的有效性，并且智能洗衣设备的相关数据都加密后上链存储在区块链服务器节点中，使得数据透明且不可篡改，从而大大增加了数据传输的可靠性。
为了更清楚的理解本申请，下面在图2所示实施例的基础上，对智能洗衣设备传输数据的过程进一步详细描述。
首先，设备认证平台获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系。
其中，标识信息可以但不限于包括智能洗衣设备的唯一硬件序列号(device id)以及洗衣物联SIM卡的卡号(Integrate circuit card identity，ICCID)，每台智能洗衣设备均对应唯一的硬件序列号和ICCID。
具体的，智能洗衣认证平台为每个商家提供智能洗衣设备绑定接口，通过绑定每台洗衣设备的硬件序列号和ICCID获得设备的 管理权。智能洗衣设备在向智能洗衣认证平台绑定注册时，获取并存储每台设备的硬件序列号和ICCID，根据每台设备的为每台智能洗衣设备生成对称密钥和公私钥对，且每台智能洗衣设备的对称密钥和公私钥对都是唯一的，不同智能洗衣设备的对称密钥和公私钥对各不相同。其中的对称密钥用于对传输数据进行加密或解密，公私钥对用于进行智能洗衣设备身份认证。然后将生成的每台智能洗衣设备的对称密钥和公私钥对存储到区块链服务器节点中。
进一步的，所述智能洗衣设备的安全芯片中存储有软件开发工具包SDK；利用所述SDK根据所述公私钥对生成区块链交易信息，所述区块链交易信息包括所述公私钥对；将所述区块链交易信息和所述对称密钥存储至所述安全芯片中。
具体的，区块链服务器节点上部署有hyperchain hvm智能合约，为每台智能洗衣设备提供适配的操作智能合约的SDK，其运行在每台智能洗衣设备的安全芯片中，利用SDK根据每台智能洗衣设备的公私钥对生成一个Account字符串，该字符串包含公私钥对以及交易信息，Account字符串是发起区块链交易的主体，然后将Account字符串和对称密钥烧录进每台设备模组额外的安全芯片中。
进一步的，所述方法还包括：智能洗衣设备接收业务云平台发送的设备指令，并对所述设备指令进行处理，得到待传输数据。
具体的，SDK区别于智能洗衣设备本身的嵌入式程序，该SDK为嵌入式程序提供有限的接口，供其进行设备状态上报，或者使用记录上报。嵌入式程序用于接收业务云平台下发的设备指令，并对接收到的设备指令进行处理，得到待传输数据，该待传输数据可能包括设备的使用记录数据、用户使用该设备时填写的身份信息或者设备的状态信息等。
进一步的，智能洗衣设备利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点。
具体的，该智能洗衣设备的安全芯片中操作hvm智能合约的SDK将待传输数据通过该设备的对称密钥进行加密，得到加密数据；然后通过公私钥对中的公钥对加密数据进行数字签名；调用安全芯片 中的SDK提供的接口进行数据上链操作，即将签名后的数据通过SDK提供的接口发送至区块链服务器节点。
进一步的，区块链服务器节点对签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
具体的，所述区块链服务器节点在链上获取所述智能洗衣设备对应的公私钥对，并通过所述公私钥对中的私钥对所述签名后的数据进行验签。若验证失败，则说明该数据是伪造的；若验证成功，则在链上获取该智能洗衣设备的对称密钥，采用对称密钥对加密后的数据进行解密；然后获取该智能洗衣设备的设备协议，通过该设备协议对解密后的数据进行解析，得到解析后的数据，最终将解析后的数据上链。
进一步的，用户通过客户端应用程序APP注册的所有信息均利用对称密钥进行加密后发送至区块链服务器节点进行存储。
本实施例中，利用区块链的数字签名机制进行智能洗衣设备身份认证，实现了设备数字身份的严格验证，保证了智能洗衣设备的有效性；进一步的，利用对称加密算法对用户信息进行脱敏处理，保证了数据传输过程中不被拦截导致信息泄露；并且，智能洗衣设备的相关数据全部加密后上链存储在区块链中，基于区块链分布式数据存储、共识机制以及不可篡改的特性，实现了数据公开透明且不可篡改，保证了数据的真实性和可靠性
图3是本发明一示例性实施例示出的基于区块链的数据传输系统的结构示意图。
如图3所示，本实施例提供的系统包括：智能洗衣设备认证平台301，区块链服务器节点302，智能洗衣设备303；所述智能洗衣设备认证平台用于：获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系；所述智能洗衣设备用于：利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点；所述区块链服务器节点用于：对所述签名后的数据进行验签，并在验 证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
其中，智能洗衣设备的数量为至少一个。
进一步的，参见图3，本实施例提供的系统还包括：业务云平台304，用于给智能洗衣设备调用接口，并向智能洗衣设备发送设备指令；所述智能洗衣设备还用于：接收业务云平台发送的设备指令，并对所述设备指令进行处理，得到待传输数据。
进一步的，所述智能洗衣设备的安全芯片中存储有软件开发工具包SDK；所述智能洗衣设备认证平台还用于：利用所述SDK根据所述公私钥对生成区块链交易信息，所述区块链交易信息包括所述公私钥对；将所述区块链交易信息和所述对称密钥存储至所述安全芯片中。
进一步的，所述智能洗衣设备具体用于：通过所述公私钥对中的公钥对所述加密后的数据进行数据签名，得到签名后的数据。
进一步的，所述区块链服务器节点具体用于：所述区块链服务器节点在链上获取所述智能洗衣设备对应的公私钥对，并通过所述公私钥对中的私钥对所述签名后的数据进行验签。
进一步的，所述区块链服务器节点具体用于：获取所述智能洗衣设备对应的设备协议；根据所述设备协议对所述解密后的数据进行解析。
进一步的，所述智能洗衣设备具体用于：调用所述安全芯片中的SDK中的接口，通过所述接口将所述签名后的数据发送至所述区块链服务器节点。
本实施例中各个模块的详细功能描述请参考有关该方法的实施例中的描述，此处不做详细阐述说明。
图4为本发明实施例提供的计算机设备的硬件结构示意图。如图4所示，本实施例提供的计算机设备40包括：至少一个处理器401和存储器402。其中，处理器401、存储器402通过总线403连接。
在具体实现过程中，至少一个处理器401执行所述存储器402存储的计算机执行指令，使得至少一个处理器401执行上述方法实施例中的基于区块链的数据传输方法。
处理器401的具体实现过程可参见上述方法实施例，其实现原理和技术效果类似，本实施例此处不再赘述。
在上述的图4所示的实施例中，应理解，处理器可以是中央处理单元(英文：Central Processing Unit，简称：CPU)，还可以是其他通用处理器、数字信号处理器(英文：Digital Signal Processor，简称：DSP)、专用集成电路(英文：Application Specific Integrated Circuit，简称：ASIC)等。通用处理器可以是微处理器或者该处理器也可以是任何常规的处理器等。结合发明所公开的方法的步骤可以直接体现为硬件处理器执行完成，或者用处理器中的硬件及软件模块组合执行完成。
存储器可能包含高速RAM存储器，也可能还包括非易失性存储NVM，例如至少一个磁盘存储器。
总线可以是工业标准体系结构(Industry Standard Architecture，ISA)总线、外部设备互连(Peripheral Component Interconnect，PCI)总线或扩展工业标准体系结构(Extended Industry Standard Architecture，EISA)总线等。总线可以分为地址总线、数据总线、控制总线等。为便于表示，本申请附图中的总线并不限定仅有一根总线或一种类型的总线。
本申请的另一实施例提供一种计算机可读存储介质，所述计算机可读存储介质中存储有计算机执行指令，当处理器执行所述计算机执行指令时，实现上述方法实施例中的基于区块链的数据传输方法。
上述的计算机可读存储介质，上述可读存储介质可以是由任何类型的易失性或非易失性存储设备或者它们的组合实现，如静态随机存取存储器(SRAM)，电可擦除可编程只读存储器(EEPROM)，可擦除可编程只读存储器(EPROM)，可编程只读存储器(PROM)，只读存储器(ROM)，磁存储器，快闪存储器，磁盘或光盘。可读存储介质可以是通用或专用计算机能够存取的任何可用介质。
一种示例性的可读存储介质耦合至处理器，从而使处理器能够从该可读存储介质读取信息，且可向该可读存储介质写入信息。当然，可读存储介质也可以是处理器的组成部分。处理器和可读存储介质可以位于专用集成电路(Application Specific Integrated Circuits，简 称：ASIC)中。当然，处理器和可读存储介质也可以作为分立组件存在于设备中。
本实施例还提供一种芯片，所述芯片包括存储器、处理器，所述存储器中存储代码和数据，所述存储器与所述处理器耦合，所述处理器运行所述存储器中的程序使得所述芯片用于执行上述各种实施方式提供的基于区块链的数据传输方法。
本实施例还提供一种计算机程序，当所述计算机程序被处理器执行时，用于执行前述各种实施方式提供的基于区块链的数据传输方法。
本领域普通技术人员可以理解：实现上述各方法实施例的全部或部分步骤可以通过程序指令相关的硬件来完成。前述的程序可以存储于一计算机可读取存储介质中。该程序在执行时，执行包括上述各方法实施例的步骤；而前述的存储介质包括：ROM、RAM、磁碟或者光盘等各种可以存储程序代码的介质。
至此，已经结合附图所示的优选实施方式描述了本发明的技术方案，但是，本领域技术人员容易理解的是，本发明的保护范围显然不局限于这些具体实施方式。在不偏离本发明的原理的前提下，本领域技术人员可以对相关技术特征作出等同的更改或替换，这些更改或替换之后的技术方案都将落入本发明的保护范围之内。

Claims (13)

  1. 一种基于区块链的数据传输方法，其特征在于，包括：
    设备认证平台获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系；
    智能洗衣设备利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点；
    所述区块链服务器节点对所述签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
  2. 根据权利要求1所述的方法，其特征在于，所述智能洗衣设备利用所述对称密钥对待传输数据进行加密处理之前，所述方法还包括：
    智能洗衣设备接收业务云平台发送的设备指令，并对所述设备指令进行处理，得到待传输数据。
  3. 根据权利要求1或2所述的方法，其特征在于，所述智能洗衣设备的安全芯片中存储有软件开发工具包SDK；所述智能洗衣设备利用所述对称密钥对待传输数据进行加密处理之前，所述方法还包括：
    利用所述SDK根据所述公私钥对生成区块链交易信息，所述区块链交易信息包括所述公私钥对；
    将所述区块链交易信息和所述对称密钥存储至所述安全芯片中。
  4. 根据权利要求1至3任一项所述的方法，其特征在于，所述利用所述公私钥对对所述加密后的数据进行数字签名，包括：
    通过所述公私钥对中的公钥对所述加密后的数据进行数据签名，得到签名后的数据。
  5. 根据权利要求1至4任一项所述的方法，其特征在于，所述区块链服务器节点对所述签名后的数据进行验签，包括：
    所述区块链服务器节点在链上获取所述智能洗衣设备对应的公私钥对，并通过所述公私钥对中的私钥对所述签名后的数据进行验签。
  6. 根据权利要求1至5任一项所述的方法，其特征在于，所述解析所述解密后的数据，包括：
    获取所述智能洗衣设备对应的设备协议；
    根据所述设备协议对所述解密后的数据进行解析。
  7. 根据权利要求1至6任一项所述的方法，其特征在于，所述将所述签名后的数据发送至所述区块链服务器节点，包括：
    调用所述安全芯片中的SDK中的接口，通过所述接口将所述签名后的数据发送至所述区块链服务器节点。
  8. 一种基于区块链的数据传输系统，其特征在于，包括：设备认证平台，区块链服务器节点以及智能洗衣设备；
    所述设备认证平台用于：获取智能洗衣设备的标识信息，根据所述标识信息生成对称密钥和公私钥对，并将所述对称密钥和公私钥对存储于区块链服务器节点，所述标识信息与所述智能洗衣设备为一一对应的关系；
    所述智能洗衣设备用于：利用所述对称密钥对待传输数据进行加密处理，利用所述公私钥对对所述加密后的数据进行数字签名，得到签名后的数据，将所述签名后的数据发送至所述区块链服务器节点；
    所述区块链服务器节点用于：对所述签名后的数据进行验签，并在验证成功时解密所述加密后的数据，解析所述解密后的数据，将解析得到的数据进行上链。
  9. 一种计算机设备，其特征在于，包括：至少一个处理器和存储器；
    所述存储器存储计算机执行指令；
    所述至少一个处理器执行所述存储器存储的计算机执行指令，使得所述至少一个处理器执行如权利要求1至7任一项所述的基于区块链的数据传输方法。
  10. 一种计算机可读存储介质，其特征在于，所述计算机可读存储介质中存储有计算机执行指令，当处理器执行所述计算机执行指令时，实现如权利要求1至7任一项所述的基于区块链的数据传输方法。
  11. 一种芯片，其特征在于，所述芯片包括存储器、处理器，所述存储器中存储代码和数据，所述存储器与所述处理器耦合，所述处理器运行所述存储器中的程序使得所述芯片用于执行上述权利要求1至7任一项所述的基于区块链的数据传输方法。
  12. 一种程序产品，其特征在于，包括：计算机程序，当所述程序产品在计算机上运行时，使得所述计算机执行上述权利要求1至7任一项所述的基于区块链的数据传输方法。
  13. 一种计算机程序，其特征在于，当所述计算机程序被处理器执行时，用于执行上述权利要求1至7任一项所述的基于区块链的数据传输方法。
PCT/CN2021/091038 2020-04-29 2021-04-29 基于区块链的数据传输方法和系统 WO2021219086A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202010353842.0 2020-04-29
CN202010353842.0A CN113572715B (zh) 2020-04-29 2020-04-29 基于区块链的数据传输方法和系统

Publications (1)

Publication Number Publication Date
WO2021219086A1 true WO2021219086A1 (zh) 2021-11-04

Family

ID=78158317

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2021/091038 WO2021219086A1 (zh) 2020-04-29 2021-04-29 基于区块链的数据传输方法和系统

Country Status (2)

Country Link
CN (1) CN113572715B (zh)
WO (1) WO2021219086A1 (zh)

Cited By (6)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114172923A (zh) * 2021-12-08 2022-03-11 中国联合网络通信集团有限公司 数据传输方法、通信系统及通信装置
CN114465731A (zh) * 2022-03-01 2022-05-10 上海万向区块链股份公司 基于区块链的电池可信加密管理系统和方法
CN114465729A (zh) * 2021-12-16 2022-05-10 浙商银行股份有限公司 一种基于区块链技术的物联网数据管理方法及系统
CN114760111A (zh) * 2022-03-24 2022-07-15 标信智链(杭州)科技发展有限公司 基于区块链的文件保密方法及文件保密装置
CN114866245A (zh) * 2022-03-22 2022-08-05 山东鲁软数字科技有限公司 一种基于区块链的电力数据采集方法及系统
CN115174204A (zh) * 2022-07-01 2022-10-11 京东科技控股股份有限公司 数据传输方法、装置和系统

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113918982B (zh) * 2021-12-15 2022-03-01 国网区块链科技(北京)有限公司 一种基于标识信息的数据处理方法及系统
CN114157426A (zh) * 2021-12-31 2022-03-08 支付宝(杭州)信息技术有限公司 可信采集装置、系统及方法
CN115022377A (zh) * 2022-07-22 2022-09-06 国网浙江省电力有限公司电力科学研究院 高弹性电网数据传输方法、装置、设备及介质
CN115549917A (zh) * 2022-09-06 2022-12-30 南京边界区块链科技有限公司 一种区块链上虚拟信息批量签名方法、系统、设备及元宇宙系统

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110061845A (zh) * 2019-03-14 2019-07-26 深圳壹账通智能科技有限公司 区块链数据加密方法、装置、计算机设备及存储介质
CN110599322A (zh) * 2019-09-24 2019-12-20 腾讯科技（深圳）有限公司 一种基于区块链网络的数据审核方法及装置
US20200084027A1 (en) * 2018-09-06 2020-03-12 Bank Of Montreal Systems and methods for encryption of data on a blockchain

Family Cites Families (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN108809625A (zh) * 2018-05-21 2018-11-13 爱图智能（深圳）有限公司 一种基于区块链的智能家居控制系统、方法及装置
CN108809953B (zh) * 2018-05-22 2020-09-01 飞天诚信科技股份有限公司 一种基于区块链的匿名身份认证的方法及装置
CN108880797B (zh) * 2018-06-27 2021-09-24 京信网络系统股份有限公司 一种物联网设备的认证方法和物联网设备
CN108833101B (zh) * 2018-09-28 2024-04-12 腾讯科技（北京）有限公司 物联网设备的数据传输方法、物联网设备及认证平台
CN110009356B (zh) * 2019-04-16 2019-11-29 北京艾摩瑞策科技有限公司 一种基于区块链的业务数据上链方法及其系统
CN109918878B (zh) * 2019-04-24 2021-03-02 中国科学院信息工程研究所 一种基于区块链的工业物联网设备身份认证及安全交互方法
CN110519062B (zh) * 2019-09-19 2021-10-29 腾讯科技（深圳）有限公司 基于区块链的身份认证方法、认证系统及存储介质

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20200084027A1 (en) * 2018-09-06 2020-03-12 Bank Of Montreal Systems and methods for encryption of data on a blockchain
CN110061845A (zh) * 2019-03-14 2019-07-26 深圳壹账通智能科技有限公司 区块链数据加密方法、装置、计算机设备及存储介质
CN110599322A (zh) * 2019-09-24 2019-12-20 腾讯科技（深圳）有限公司 一种基于区块链网络的数据审核方法及装置

Cited By (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN114172923A (zh) * 2021-12-08 2022-03-11 中国联合网络通信集团有限公司 数据传输方法、通信系统及通信装置
CN114172923B (zh) * 2021-12-08 2023-07-07 中国联合网络通信集团有限公司 数据传输方法、通信系统及通信装置
CN114465729A (zh) * 2021-12-16 2022-05-10 浙商银行股份有限公司 一种基于区块链技术的物联网数据管理方法及系统
CN114465731A (zh) * 2022-03-01 2022-05-10 上海万向区块链股份公司 基于区块链的电池可信加密管理系统和方法
CN114465731B (zh) * 2022-03-01 2023-12-29 上海万向区块链股份公司 基于区块链的电池可信加密管理系统和方法
CN114866245A (zh) * 2022-03-22 2022-08-05 山东鲁软数字科技有限公司 一种基于区块链的电力数据采集方法及系统
CN114866245B (zh) * 2022-03-22 2024-04-09 山东鲁软数字科技有限公司 一种基于区块链的电力数据采集方法及系统
CN114760111A (zh) * 2022-03-24 2022-07-15 标信智链(杭州)科技发展有限公司 基于区块链的文件保密方法及文件保密装置
CN115174204A (zh) * 2022-07-01 2022-10-11 京东科技控股股份有限公司 数据传输方法、装置和系统

Also Published As

Publication number Publication date
CN113572715A (zh) 2021-10-29
CN113572715B (zh) 2023-01-31

Similar Documents

Publication Publication Date Title
WO2021219086A1 (zh) 基于区块链的数据传输方法和系统
US20210306335A1 (en) Out-of-band authentication based on secure channel to trusted execution environment on client device
JP6151402B2 (ja) データセンタへのプラットフォームの内包検証
US11917074B2 (en) Electronic signature authentication system based on biometric information and electronic signature authentication method
US9867043B2 (en) Secure device service enrollment
US20180082050A1 (en) Method and a system for secure login to a computer, computer network, and computer website using biometrics and a mobile computing wireless electronic communication device
WO2017000829A1 (zh) 一种基于生物特征的安全校验方法及客户端、服务器
US8640203B2 (en) Methods and systems for the authentication of a user
US20160080157A1 (en) Network authentication method for secure electronic transactions
US9197420B2 (en) Using information in a digital certificate to authenticate a network of a wireless access point
WO2020073513A1 (zh) 基于区块链的用户认证方法及终端设备
WO2015180691A1 (zh) 验证信息的密钥协商方法及装置
CA2903749C (en) Apparatus, system and method for secure data exchange
KR20170129866A (ko) 블록 체인을 사용하여 디바이스 무결성의 자동화된 입증
WO2022105462A1 (zh) 一种数据库多重认证方法、系统、终端及存储介质
US10536271B1 (en) Silicon key attestation
WO2021190197A1 (zh) 生物支付设备的认证方法、装置、计算机设备和存储介质
US11790054B2 (en) Method for license authentication, and node, system and computer-readable storage medium for the same
TWM595792U (zh) 跨平台授權存取資源的授權存取系統
WO2018166163A1 (zh) Pos终端控制方法、pos终端、服务器及存储介质
US10635826B2 (en) System and method for securing data in a storage medium
CN114553566B (zh) 数据加密方法、装置、设备及存储介质
WO2022073336A1 (zh) 安全支付方法、装置、电子设备及存储介质
CN114238915A (zh) 数字证书添加方法、装置、计算机设备和存储介质
TWI778319B (zh) 跨平台授權存取資源方法及授權存取系統

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 21796819

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 21796819

Country of ref document: EP

Kind code of ref document: A1