WO2022068360A1

WO2022068360A1 - Shared root key-based information processing method and apparatus, and device and medium

Info

Publication number: WO2022068360A1
Application number: PCT/CN2021/109261
Authority: WO
Inventors: 贾牧; 谢丹力; 陆陈一帆
Original assignee: 深圳壹账通智能科技有限公司
Priority date: 2020-09-29
Filing date: 2021-07-29
Publication date: 2022-04-07
Also published as: CN112199697A

Abstract

Embodiments of the present application provide a shared root key-based information processing method and apparatus, and a device and a medium, primarily relating to blockchain technologies and hospital management technologies, wherein the method comprises: acquiring a target function for describing information and institution information of an institution which target information to be processed belongs to, and generating a root key corresponding to the target information according to the institution information; generating a key corresponding to each piece of sub-information in the target information according to the root key; acquiring a first random number corresponding to each piece of sub-information, and adjusting each piece of sub-information according to the first random number; acquiring coordinate information corresponding to each piece of sub-information according to the target function and each piece of adjusted sub-information; encrypting the coordinate information of each piece of sub-information using the key corresponding to each piece of sub-information, and obtaining a ciphertext of the coordinate information corresponding to each piece of sub-information; and determining the ciphertext as the target information ciphertext, and storing the target information ciphertext in a blockchain network. Information security can be improved using the embodiments of the present application.

Description

Information processing method, device, device and medium based on shared root key

This application claims the priority of the Chinese patent application filed on September 29, 2020 with the application number 202011068461.4 and the title of the invention is "Information Processing Method, Apparatus, Equipment and Medium Based on Shared Root Key", all of which The contents are incorporated herein by reference.

technical field

The present application relates to the field of blockchain technology, and in particular, to an information processing method, apparatus, device and medium based on a shared root key.

Background technique

With the development of the network, the way of information interaction through the network is favored by a large number of users. The increase in the number of users using the network leads to an increase in the amount of information generated, and a large amount of information needs to be stored. For example, the prescription for patients in hospital management Information such as circulation and patient management needs to be stored to facilitate subsequent traceability. The inventor realized that the traditional information storage method is generally the local storage of the terminal, and this kind of information storage method has great risks. The illegal terminal can easily obtain the locally stored information, resulting in the leakage of information, and the illegal user can store the locally stored information. The information is tampered with, resulting in low information security, and when the local storage fails, the information cannot be retrieved, resulting in losses. Therefore, how to ensure the security of information in the process of information storage and prevent information leakage is an urgent problem to be solved.

SUMMARY OF THE INVENTION

The embodiments of the present application provide an information processing method, device, device, and medium based on a shared root key, which can encrypt information, improve information security, and prevent information leakage.

On the one hand, the embodiments of the present application provide an information processing method based on a shared root key, including:

Obtain the objective function used to describe the information, and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information. at least one of debt information and the institution's earnings information;

Generate a key corresponding to each piece of sub-information in the target information according to the root key, and the target information includes at least two pieces of sub-information;

Obtain the first random number corresponding to each piece of sub-information, and adjust each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information;

According to the objective function and each piece of adjusted sub-information, obtain coordinate information corresponding to each of the at least two pieces of sub-information;

Encrypting the coordinate information of the corresponding sub-information in the at least two pieces of sub-information by using the key corresponding to each sub-information to obtain the ciphertext of the coordinate information corresponding to each sub-information;

The ciphertext of the coordinate information corresponding to each piece of sub-information is determined as the ciphertext of the target information, and the ciphertext of the target information is stored in the blockchain network.

On the one hand, the embodiments of the present application provide an information processing apparatus based on a shared root key, including:

The root key generation module is used to obtain the objective function used to describe the information, and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information, and the institution information includes the At least one of the institution's confidentiality level, the institution's debt information, and the institution's profit information;

A sub-key generation module, used for generating a key corresponding to each sub-information in the target information according to the root key, and the target information includes at least two sub-information;

an information adjustment module, configured to obtain a first random number corresponding to each piece of sub-information, adjust each piece of sub-information according to the first random number, and obtain each piece of adjusted sub-information;

a coordinate obtaining module, configured to obtain coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information according to the objective function and each piece of adjusted sub-information;

an information encryption module, configured to encrypt the coordinate information of the corresponding sub-information in the at least two pieces of sub-information by using the key corresponding to each sub-information, and obtain the ciphertext of the coordinate information corresponding to each sub-information;

The information storage module is configured to determine the ciphertext of the coordinate information corresponding to each piece of sub-information as the ciphertext of the target information, and store the ciphertext of the target information in the blockchain network.

One aspect of the present application provides a computer device, including: a processor, a memory, and a network interface;

The above-mentioned processor is connected to a memory and a network interface, wherein the network interface is used to provide a data communication function, the above-mentioned memory is used to store a computer program, and the above-mentioned processor is used to call the above-mentioned computer program to execute the embodiment of the present application. method, which includes:

Obtain the objective function used to describe the information, and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information, where the institution information includes the security level of the institution , at least one of the debt information of the institution and the profit information of the institution;

Generate a key corresponding to each piece of sub-information in the target information according to the root key, where the target information includes at least two pieces of sub-information;

obtaining a first random number corresponding to each piece of sub-information, and adjusting each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information;

According to the objective function and each piece of adjusted sub-information, obtain coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information;

Using the key corresponding to each piece of sub-information, encrypt the coordinate information of the corresponding sub-information in the at least two pieces of sub-information, and obtain the ciphertext of the coordinate information corresponding to each of the sub-information;

An aspect of the embodiments of the present application provides a computer-readable storage medium, where the computer-readable storage medium stores a computer program, the computer program includes program instructions, and when executed by a processor, the program instructions cause the processor to execute the above-mentioned first step. An information processing method based on a shared root key, the method includes:

The embodiment of the present application can improve the security of information; in addition, storing the ciphertext of the target information in the blockchain network can reduce the resource occupation of the local storage space of the terminal.

Description of drawings

In order to illustrate the technical solutions in the embodiments of the present application more clearly, the following briefly introduces the drawings required in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

1 is a schematic flowchart of an information processing method based on a shared root key provided by an embodiment of the present application;

2 is a schematic flowchart of a method for adjusting each piece of sub-information provided by an embodiment of the present application;

3 is a schematic flowchart of an information processing method based on a shared root key provided by an embodiment of the present application;

4 is a schematic diagram of the composition and structure of an information processing apparatus based on a shared root key provided by an embodiment of the present application;

FIG. 5 is a schematic structural diagram of a computer device provided by an embodiment of the present application.

Detailed ways

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present application.

The blockchain involved in this application is a new application mode of computer technologies such as distributed data storage, point-to-point transmission (P2P transmission), consensus mechanism, and encryption algorithm. Using cryptographic methods to associate the generated data blocks, each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. The blockchain can include the underlying platform of the blockchain, the platform product service layer and the application service layer; the blockchain can be composed of multiple serial transaction records (also known as blocks) that are connected and protected by cryptography. The distributed ledger connected by the blockchain allows multiple parties to effectively record the transaction, and the transaction can be permanently checked (it cannot be tampered with). Among them, the consensus mechanism refers to the mathematical algorithm that realizes the establishment of trust between different nodes and the acquisition of rights and interests in the blockchain network; that is to say, the consensus mechanism is a mathematical algorithm recognized by all network nodes of the blockchain.

The technical solution of the present application is suitable for hospital management, that is, the target information may refer to information such as patient prescription circulation, patient management, etc., and the patient prescription circulation, patient management and other information can be obtained by encrypting the patient's prescription circulation, patient management and other information. The ciphertext corresponding to the information, and the encrypted data is stored in the blockchain network, which is conducive to the management of information such as the circulation of patients' prescriptions and patient management, and improves the security of information managed by the hospital.

Please refer to FIG. 1. FIG. 1 is a schematic flowchart of an information processing method based on a shared root key provided by an embodiment of the present application. The method is applied to a node in a blockchain network, and the node may be an independent physical server. , it can also be a server cluster or distributed system composed of multiple physical servers, or it can provide cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security Services, Content Delivery Network (CDN), and cloud servers for basic cloud computing services such as big data and artificial intelligence platforms. Alternatively, the node may refer to computer equipment, including mobile phones, tablet computers, notebook computers, PDAs, smart speakers, mobile internet devices (MID, mobile internet device), POS (Point Of Sales, point of sale) machines, wearable devices (such as smart watches, smart bracelets, etc.) As shown in Figure 1, the method includes:

S101: Acquire an objective function for describing information and institution information corresponding to an institution to which the target information to be processed belongs, and generate a root key corresponding to the target information according to the institution information.

Here, the objective function may refer to a function corresponding to an elliptic curve, and the objective function may also refer to a function corresponding to other curves. The target information may refer to data such as transaction data, business data, and internal information of an institution. The institution information corresponding to the institution to which the target information belongs includes at least one of the institution's confidentiality level, the institution's debt information, and the institution's profit information. In order to increase the difficulty of decrypting the ciphertext of the target information and prevent the ciphertext of the target information from being cracked by illegal users, the root key corresponding to the target information can be generated according to the organization information, which can be based on the organization's confidentiality level, the organization's debt information and At least one of the profit information of the organization generates the root key corresponding to the target information.

Optionally, the institution information corresponding to the institution to which the target information belongs includes the security level of the institution, and the method for generating the root key corresponding to the target information according to the institution information may be: generating a second random number according to the security level of the institution to which the target information belongs; Obtain the byte length in the second random number, and perform padding processing on the second random number according to the byte length to obtain the second random number after the padding processing; perform a hash operation on the second random number after the padding processing to obtain the target The root key corresponding to the information.

Here, the security level of the institution may be divided according to the nature of the institution, for example, the nature of the institution may include a defense institution, an educational institution, a small retail institution, and the like. Among them, the confidentiality level of national defense institutions is higher than that of educational institutions, and the confidentiality level of educational institutions is higher than that of small retail institutions. The byte length in the second random number refers to the number of bytes corresponding to the second random number. For example, if the second random number is a number between 0 and 255, the corresponding byte length is 1. The random number is a number greater than 255, the byte length is greater than 1, and so on.

Specifically, for example, you can obtain the security level of the organization to which the target information belongs, call the rand function in the C language, return a second random number k according to the security level of the organization to which the target information belongs, and then obtain the word in the second random number k. Section length; fill the second random number according to the length of the byte to obtain the second random number after filling, that is, fill the 8 bits (ie bits) corresponding to 1 byte, for example, the binary can be filled with 0 or 1 . That is to say, the value of the second random number after filling is different from the value corresponding to the second random number before filling, the second random number before filling is k, the second random number after filling is p, and p corresponds to k values are different. A hash operation is performed on the filled second random number p, that is, hash(p)=p1, and p1 is used as the root key corresponding to the target information.

Since the second random number is filled, the filled second random number is obtained, and there are multiple filling methods for a second random number, including filling one or more bits in 8 bits, so the filled second random number is The second random number is not equal to the second random number before filling, even if the illegal terminal obtains the security level of the organization to which the target information belongs, and generates the second random number according to the security level, because the filling method of the second random number has It is difficult for an illegal terminal to obtain a correct random number after filling, so it is impossible to obtain the root key corresponding to the target information, thereby improving the security of the information.

Optionally, the institution information corresponding to the institution to which the target information belongs includes the institution's debt information and the institution's profit information, and the method for generating the root key corresponding to the target information according to the institution information may be: according to the institution's debt information and the institution's profit information to determine the fund level of the organization; generate a third random number according to the fund level of the organization; perform a hash operation on the third random number to obtain the root key corresponding to the target information.

Here, the debt information of an institution may refer to the creditor's rights-debt relationship between the institution's company and a specific person or a specific institution, including company loans, accounts payable, unpaid purchases, and the like. The profit information of the institution may refer to the income obtained by the institution, and so on. Wherein, determining the capital level of the institution according to the debt information of the institution and the profit information of the institution may refer to determining the capital level of the institution according to the difference between the profit information of the institution and the debt information of the institution. The higher the funding level of the institution, the better the effectiveness of the institution; the lower the funding level of the institution, the worse the effectiveness of the institution. For example, when the difference between the profit information of the institution and the debt information of the institution is greater than the first quantity threshold, the capital level of the institution is the first capital grade; when the difference between the profit information of the institution and the debt information of the institution is greater than the second quantity threshold and When it is less than the first quantity threshold, the funding level of the institution is the second funding level; when the difference between the profit information of the institution and the debt information of the institution is less than the second quantity threshold, the funding level of the institution is the third funding level, wherein, The first quantity threshold is greater than the second quantity threshold, and the first funding level is greater than the second funding level and greater than the third funding level.

Specifically, the financial level of the institution can be determined by obtaining the debt information of the institution and the profit information of the institution, for example, generating a third random number m according to the capital level of the institution; performing a hash operation on the third random number m, that is, hash(m )=m1, and m1 is used as the root key corresponding to the target information. Because the third random number is generated according to the fund level of the institution, and the fund level of the institution is determined based on the debt information of the institution and the profit information of the institution, and the debt information of the institution and the profit information of the institution belong to the high confidentiality of the institution. Therefore, it is not easy for illegal terminals to obtain the information, so it is impossible to obtain the financial level of the institution, and thus cannot generate the third random number, so it is impossible to obtain the root key corresponding to the target information, thereby improving the security of the information.

Optionally, the information associated with the institution can also be obtained from the blockchain network, and the number of pieces of information whose privacy level is greater than the level threshold can be obtained from the associated information, and the number of pieces of information can be hashed to obtain the target information. the corresponding root key. Here, the information associated with the organization refers to all the information stored by the organization in the blockchain network. The privacy level of the information is greater than the level threshold, indicating that the information is highly private, such as top secret; the privacy level of the information is less than the level threshold, indicating that the information is less private, such as secret, top secret is more private than secret. For example, the information associated with the institution is obtained from the blockchain network, and the number of pieces of information whose privacy level is greater than the level threshold is q, and the number of pieces of information q is hashed, that is, hash(q) =q1, take q1 as the root key corresponding to the target information. Since top-secret information is information with a high degree of institutional confidentiality, it is difficult for an illegal terminal to obtain the information, and thus cannot obtain the root key corresponding to the target information, which can improve the security of the information.

S102: Generate a key corresponding to each piece of sub-information in the target information according to the root key.

Here, the target information includes at least two pieces of sub-information. Specifically, the method for generating a key corresponding to each piece of sub-information in the target information according to the root key includes: obtaining the generation time of each piece of sub-information; determining the first sub-information and the second sub-information according to the generation time of each piece of sub-information, and the second The generation time of the sub-information is later than the generation time of the first sub-information; perform a hash operation on the root key to obtain the key of the first sub-information; perform a hash operation on the key of the first sub-information to obtain the second sub-information information key.

For example, for example, the root key corresponding to the target information is n, the target information contains 2 pieces of sub-information which are respectively sub-information a1 and sub-information a2, and the corresponding generation times of the 2 pieces of sub-information are t1, t2, t1>t2, Therefore, the first sub-information is sub-information a1 and the second sub-information is sub-information a2, and the root key corresponding to the target information is hashed to obtain the key of the first sub-information, that is, hash(n)=n1, Then n1 is the key of the first sub-information; perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information, that is, hash(n1)=n2, then n2 is the key of the second sub-information. key.

If the number of second sub-information is greater than 1, for example, the number of second sub-information is 3, which are respectively sub-information a2, sub-information a3 and sub-information a4, and the generation times of the three second sub-information are t2, t3, and t4 respectively. , and t2>t3>t4, the key of the first sub-information is n1, then the key of the first sub-information is hashed to obtain the key of the second sub-information a2, that is, hash(n1)=n2, Then n2 is the key of the sub-information a2; perform a hash operation on the key of the second sub-information a2 to obtain the key of the second sub-information a3, that is, hash(n2)=n3, then n3 is the key of the sub-information a3. key; perform hash operation on the key of the second sub-information a3 to obtain the key of the second sub-information a4, that is, hash(n3)=n4, then n4 is the key of the sub-information a4. Thus, the key corresponding to each piece of sub-information can be calculated. By hashing the root key to obtain the key corresponding to the sub-information, the difficulty of the key corresponding to the sub-information can be improved, so that when each piece of sub-information is encrypted using the key corresponding to the sub-information subsequently, the encryption efficiency can be improved. Difficulty, reduce the probability of ciphertext being cracked by illegal terminals, and improve the security of information.

In a possible implementation manner, the method for generating a key corresponding to each piece of sub-information in the target information according to the root key includes: acquiring the information length of each piece of sub-information; determining the first sub-information and the first sub-information according to the information length of each piece of sub-information Two sub-information, the first sub-information is the sub-information with the largest information length in the target information, and the information length of the second sub-information is less than the information length of the first sub-information; Hash operation is performed on the root key to obtain the information of the first sub-information. key; perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information.

For example, for example, the root key corresponding to the target information is k, the target information contains 2 pieces of sub-information which are respectively sub-information b1 and sub-information b2, and the corresponding generation times of the 2 pieces of sub-information are s1, s2, s1>s2, Therefore, the first sub-information is sub-information b1 and the second sub-information is sub-information b2, and the root key corresponding to the target information is hashed to obtain the key of the first sub-information, that is, hash(k)=k1, Then k1 is the key of the first sub-information; perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information, that is, hash(k1)=k2, then k2 is the key of the second sub-information. key. If the number of the second sub-information is greater than 1, sort the second sub-information in descending order according to the information length of each second sub-information to obtain the sorted second sub-information, for example, the sorted second sub-information includes sub-information b2, b3 , b4, and the length of b2 is greater than that of b3, the length of the information is greater than that of b4, and the key of the first sub-information is k1, then the key of the first sub-information is hashed to obtain the second sub-information b2. The key is k2; perform a hash operation on the key of the second sub-information b2 to obtain the key of the second sub-information b3 as k3; perform a hash operation on the key of the second sub-information b3 to obtain the second sub-information The key of b4 is k4. Therefore, the key corresponding to each sub-information can be calculated according to the information length of each sub-information and the root key. Since the length of each sub-information is not equal, the sub-information calculated according to the length of each sub-information and the root key can be obtained. The corresponding keys are different, which can improve the difficulty of encrypting each piece of sub-information by using the key corresponding to the sub-information subsequently, reduce the probability of the ciphertext being cracked by an illegal terminal, and improve the security of the information.

S103: Obtain a first random number corresponding to each piece of sub-information, and adjust each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information.

Here, since when the value corresponding to each piece of sub-information is greater than the first threshold, it is impossible to map each piece of sub-information onto the curve of the objective function, so the coordinate point corresponding to each piece of sub-information cannot be calculated according to the curve of the objective function. Therefore, the first random number can be used to adjust each piece of sub-information, so that the value corresponding to each piece of sub-information after adjustment is less than or equal to the first threshold, so that each piece of sub-information is mapped to the curve of the objective function, according to the curve of the objective function Calculate the coordinate point corresponding to each sub-information. By using the first random number to adjust each piece of sub-information, the probability of obtaining a coordinate point corresponding to each piece of sub-information can be improved, thereby increasing the probability of successful encryption. The first threshold may be determined according to a curve parameter corresponding to the objective function. If the curve parameter is the curve length c, the first threshold is 2 ²⁵⁶ -w, where w is a very small value.

In specific implementation, random number generation algorithms can be used to generate random numbers, such as the central limit theorem and Box Muller (coordinate transformation method), Monte Carlo algorithm, numerical probability algorithm, Las Vegas algorithm or other algorithms to generate random numbers, and The generated random number is determined as the first random number corresponding to each piece of sub-information. Alternatively, you can also call the rand function in the C language to generate random numbers.

In a possible case, if each piece of sub-information is not numeric data, each piece of sub-information can be encoded to obtain numeric-type encoded data, and each piece of sub-information corresponds to each piece of information according to the first random number corresponding to each piece of sub-information The encoded data is adjusted to obtain each piece of sub-information after adjustment.

In another possible situation, if each piece of sub-information is numerical data, each piece of sub-information is adjusted according to the first random number corresponding to each piece of sub-information to obtain each piece of adjusted sub-information. It can be known that each piece of sub-information after adjustment includes the piece of sub-information and the first random number corresponding to the piece of sub-information.

Optionally, the method for adjusting each piece of sub-information according to the first random number may be as shown in FIG. 2 . FIG. 2 is a schematic flowchart of a method for adjusting each piece of sub-information provided by an embodiment of the present application, as shown in FIG. 2 . As shown, the method includes the following steps:

S11, subtract each piece of sub-information from the first random number to obtain each piece of sub-information after the subtraction.

S12, if each piece of sub-information after subtraction is smaller than the information threshold, determine each piece of sub-information after subtraction as each piece of adjusted sub-information.

In steps S11 to S12, if each piece of sub-information after subtraction is less than the information threshold, it is considered that the piece of sub-information is mapped to the first coordinate of the target point on the curve corresponding to the objective function, which can be based on the first coordinate and the target. function, the second coordinate of the target point on the curve corresponding to the objective function is obtained by calculation, that is, the coordinate information corresponding to each piece of sub-information can be obtained. If each piece of sub-information after subtraction is greater than or equal to the information threshold, it is considered that the piece of sub-information is mapped to the first coordinate of the target point on the curve corresponding to the objective function, and the first coordinate and the objective function cannot be calculated to obtain the The second coordinate of the target point on the curve corresponding to the objective function, that is, the coordinate information corresponding to each piece of sub-information cannot be obtained. The first random numbers corresponding to each piece of sub-information may be equal or unequal. The information threshold may be, for example, 2 ²⁵⁶ , or may be smaller than 2 ²⁵⁶ .

By subtracting each piece of sub-information from the first random number, each piece of sub-information after the subtraction can be obtained, so that each piece of sub-information after subtraction is determined to be adjusted according to the relationship between each piece of sub-information after subtraction and the information threshold each subsequent sub-message. The subtraction of each piece of sub-information from the first random number may refer to subtracting the first random number from the value corresponding to each piece of sub-information. It can be known that the value corresponding to each piece of sub-information obtained after the subtraction is less than the sub-information before the subtraction. corresponding value.

S13, if each piece of sub-information after subtraction is greater than or equal to the information threshold, adjust the first random number.

S14: Subtract each piece of sub-information from the adjusted first random number to obtain each piece of candidate sub-information.

Here, since each piece of sub-information after subtraction is greater than or equal to the information threshold, the piece of sub-information is mapped to the first coordinate of the target point on the curve corresponding to the objective function, which cannot be calculated according to the first coordinate and the objective function. The second coordinate of the target point on the curve corresponding to the objective function, that is, the coordinate information corresponding to each piece of sub-information cannot be obtained. Therefore, it is necessary to adjust the first random number corresponding to each piece of sub-information, and subtract each adjusted piece of sub-information from the first random number to obtain each candidate sub-information.

S15, if each piece of candidate sub-information is smaller than the information threshold, determine each piece of candidate sub-information as each adjusted piece of sub-information.

It can be seen that if each piece of candidate sub-information is less than the information threshold, the piece of sub-information is mapped to the first coordinate of the target point on the curve corresponding to the objective function, and the corresponding value of the objective function can be calculated according to the first coordinate and the objective function. The second coordinate of the target point on the curve, that is, the coordinate information corresponding to each piece of sub-information can be obtained. If each candidate sub-information is greater than or equal to the information threshold, it is considered that the sub-information is mapped to the first coordinate of the target point on the curve corresponding to the objective function, and the objective function cannot be calculated based on the first coordinate and the objective function. The second coordinate of the target point on the corresponding curve, that is, the coordinate information corresponding to each piece of sub-information cannot be obtained. That is, if each candidate sub-information is greater than or equal to the information threshold, continue to adjust the first random number until each candidate sub-information is subtracted from the adjusted first random number, and each candidate sub-information after the subtraction is subtracted. If the information is less than the information threshold, each piece of sub-information of the candidate after subtraction is determined as each piece of adjusted sub-information. By subtracting each sub-information and the first random number corresponding to each sub-information, and continuously adjusting the first random number corresponding to each sub-information, each adjusted sub-information can be obtained, which improves the success of subsequent encryption of each sub-information Rate.

S104, according to the objective function and each adjusted piece of sub-information, obtain coordinate information corresponding to each of the at least two pieces of sub-information.

Here, for example, each piece of sub-information of the adjusted non-numeric type can be encoded to obtain coded data corresponding to each piece of sub-information of the adjusted numerical type, and the coded data corresponding to each piece of sub-information of the adjusted numerical type can be mapped to the corresponding coded data of the objective function. The corresponding coordinate point is obtained on the curve, so as to obtain the coordinate information corresponding to each piece of sub-information according to the coordinate point.

In a possible implementation manner, the curve corresponding to the objective function can be obtained, and each piece of adjusted sub-information is mapped to the first coordinate of the target point on the curve corresponding to the objective function; according to the first coordinate and the objective function , determine the second coordinate of the target point on the curve corresponding to the objective function; determine the first coordinate and the second coordinate as the coordinate information corresponding to each piece of sub-information, thereby obtaining at least two pieces of sub-information corresponding to each sub-information Coordinate information.

For example, to illustrate the acquisition of the coordinate information corresponding to any one of the at least two sub-information c, the second coordinate of the target point on the curve corresponding to the objective function can be determined according to the first coordinate and the objective function, and the first coordinate can be determined. The coordinates and the second coordinates are determined as the coordinate information corresponding to the sub-information c. For example, the curve corresponding to the objective function can be shown in formula (1-1):

y ² =x ³ +ax+b (1-1)

Among them, a and b are known real numbers, and x and y are both parameters. By determining the value of any one parameter in x or y, the value of the other parameter can be calculated by formula (1-1), for example , by determining the value of x, the value of y can be calculated according to formula (1-1).

For example, a is 1, b is -1, the sub-information c is mapped to the first coordinate of the target point on the curve corresponding to the objective function (for example, the abscissa of the target point) is 1, and a, b and the first coordinate The coordinates are substituted into formula (1-1) as x, and y is obtained as 1, that is, the second coordinate of the target point on the curve corresponding to the objective function is 1, then the coordinate information corresponding to the sub-information c is (1, 1), Through this method, the coordinate information corresponding to the other sub-information in the at least two pieces of sub-information can be acquired, thereby acquiring the coordinate information corresponding to each sub-information in the at least two pieces of sub-information.

S105 , encrypting the coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information by using the key corresponding to each piece of sub-information, to obtain a ciphertext of the coordinate information corresponding to each piece of sub-information.

Here, the computer device may use the key corresponding to each piece of sub-information to encrypt the coordinate information corresponding to each of the at least two pieces of sub-information to obtain the ciphertext of the coordinate information corresponding to each piece of sub-information. In a specific implementation, the computer device can obtain the private key of the terminal to which the target information belongs, and encrypt the coordinate information corresponding to each sub-information in the at least two sub-information according to the private key of the terminal and the key corresponding to each sub-information, and obtain each sub-information. The ciphertext of the coordinate information corresponding to the sliver information. It can be seen that the ciphertext of the coordinate information corresponding to the sub-information is the ciphertext obtained by encrypting the sub-information. If the ciphertext is not decrypted, the ciphertext of the corresponding sub-information corresponding to the ciphertext cannot be known even if the ciphertext is obtained. content. By encrypting each piece of sub-information corresponding to the target information by using the private key of the terminal to which the target information belongs and the key corresponding to each piece of sub-information, the security of the target information can be improved.

S106: Determine the ciphertext of the coordinate information corresponding to each piece of sub-information as the ciphertext of the target information, and store the ciphertext of the target information in the blockchain network.

Here, in the above steps, for each piece of sub-information in the at least two pieces of sub-information, the ciphertext of the coordinate information corresponding to each piece of sub-information will be obtained. Therefore, the ciphertext of the coordinate information corresponding to each piece of sub-information is determined as the ciphertext of the target information. , that is to say, the ciphertext of the target information includes the ciphertext of the coordinate information corresponding to each of the at least two sub-information, so far, the ciphertext of the target information can be obtained by encrypting the target information, and the ciphertext of the target information can be obtained. The documents are stored in the blockchain network. By sending the target information to the blockchain network for encryption and storage, the resource occupation of the local storage space of the terminal can be reduced, and the target information stored locally in the terminal can be prevented from being tampered with by illegal users, thereby improving the security of the target information.

In the embodiment of the present application, since the root key corresponding to the target information is generated by the institution information corresponding to the institution to which the target information belongs, and the institution information includes the confidentiality level of the institution, the debt information of the institution, and the profit information of the institution, etc., it is an institution. For relatively confidential information, it is difficult for an illegal terminal to obtain the organization information, that is, it is difficult to obtain the root key corresponding to the target information. Therefore, after generating a key corresponding to each piece of sub-information in the target information according to the root key, and encrypting each piece of sub-information by using the key corresponding to each piece of sub-information, since it is difficult for an illegal terminal to obtain the root key, the Decrypting the ciphertext can improve the difficulty of cracking the ciphertext and improve the security of information. By adjusting each piece of sub-information in the at least two pieces of sub-information, it is beneficial to generate coordinate information corresponding to each piece of adjusted sub-information according to each piece of adjusted sub-information, and improve the success rate of obtaining coordinate information corresponding to each piece of adjusted sub-information. By encrypting each piece of sub-information in the target information, illegal terminals are prevented from cracking the ciphertext, thereby improving the security of each piece of sub-information, thereby improving the security of the target information. By storing the ciphertext information of the target information in the blockchain network, the security of the information can be improved based on the characteristics that the blockchain cannot be tampered with and is not easily lost; in addition, the ciphertext of the target information is stored in the blockchain network. , which can reduce the resource occupation of the local storage space of the terminal.

Please refer to FIG. 3. FIG. 3 is a schematic flowchart of an information processing method based on a shared root key provided by an embodiment of the present application, and the method is applied to a node in a blockchain network. As shown in Figure 3, the method includes:

S201: Acquire an objective function for describing information and institution information corresponding to an institution to which the target information to be processed belongs, and generate a root key corresponding to the target information according to the institution information.

S202: Generate a key corresponding to each piece of sub-information in the target information according to the root key.

S203: Obtain a first random number corresponding to each piece of sub-information, and adjust each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information.

S204, according to the objective function and each adjusted piece of sub-information, obtain coordinate information corresponding to each of the at least two pieces of sub-information.

Here, for the specific content of steps S201 to S204, reference may be made to the content of steps S101 to S104 in the embodiment corresponding to FIG. 1 , which will not be repeated here.

S205: Obtain the private key of the terminal to which the target information belongs, and the key corresponding to each piece of sub-information.

Here, the terminal to which the target information belongs is the terminal that uploads the target information to the blockchain network for processing such as encryption and storage, and the private key of the terminal to which the target information belongs is the private key generated by the terminal.

In a specific implementation, for example, the identifier of the terminal to which the target information belongs can be obtained, a fourth random number can be generated by using the SECP256K1 algorithm, and the fourth random number can be filled to obtain the private key of the terminal. number. Here, the identifier of the terminal may refer to the factory serial number of the terminal, or other identifiers used to uniquely indicate the terminal.

S206: Obtain candidate coordinates corresponding to the target information.

The candidate coordinates are obtained according to the base point coordinates of the curve of the objective function and the private key of the terminal. Specifically, the coordinates of the base point of the curve of the objective function can be obtained; the product of the coordinates of the base point and the private key of the terminal can be obtained to obtain the candidate coordinates.

Here, by acquiring the curve of the objective function and the curve parameters of the objective function, the coordinates of the base point of the curve of the objective function can be acquired. For example, the base point is G, the corresponding base point coordinates are (x1, y1), and the private key of the terminal is h, then the candidate coordinates can be calculated according to formula (1-2):

H=h*G (1-2)

Among them, the candidate coordinate is H, the base point is G, and the private key of the terminal is h.

S207: Encrypt the candidate coordinates according to the key corresponding to each piece of sub-information to obtain the ciphertext of the candidate coordinates.

S208 , fuse the coordinate information corresponding to each piece of sub-information with the ciphertext of the corresponding candidate coordinates to obtain the ciphertext of the coordinate information corresponding to each piece of sub-information.

For example, if the number of sub-information corresponding to the target information is n, and the sub-information i is any sub-information in the n sub-information, the candidate coordinates can be encrypted by formula (1-3) to obtain the ciphertext of the candidate coordinates , and fuse the coordinate information corresponding to the sub-information i with the ciphertext of the candidate coordinates to obtain the ciphertext of the coordinate information corresponding to the sub-information i.

Ci=Mi+ki*H (1-3)

The candidate coordinates are H, Ci is the ciphertext of the coordinate information corresponding to the sub-information i, Mi is the coordinate information corresponding to the sub-information i, and ki is the key corresponding to the sub-information i. ki*H indicates that the candidate coordinates are encrypted according to the key corresponding to the sub-information i, and the ciphertext of the candidate coordinates is obtained. It can be known that, for other sub-information in the n pieces of sub-information, the encryption and fusion can also be performed by formula (1-3) to obtain the ciphertext of the coordinate information corresponding to the other sub-information. For each piece of sub-information, the ciphertext of the coordinate information corresponding to the piece of sub-information can be obtained by encrypting and fusing the formula (1-3), that is to say, a piece of sub-information corresponds to the number of ciphertexts of the coordinate information corresponding to a piece of sub-information , that is, for n pieces of sub-information, the number of ciphertexts of the coordinate information corresponding to the finally obtained sub-information is n.

In specific implementation, an encryption algorithm can be used to encrypt the coordinate information corresponding to each piece of sub-information to obtain the ciphertext of the coordinate information corresponding to each piece of sub-information. The encryption algorithm can include, for example, Elgamal algorithm (an asymmetric encryption algorithm), Rabin algorithm ( An asymmetric encryption algorithm), Diffie-Hellman algorithm (an asymmetric encryption algorithm), ECC algorithm (elliptic curve encryption algorithm). The computer device encrypts the coordinate information corresponding to each piece of sub-information in at least two pieces of sub-information according to the private key of the terminal and the key corresponding to each piece of sub-information, and obtains the ciphertext of the coordinate information corresponding to each piece of sub-information. Encryption is performed to obtain the corresponding ciphertext. After the terminal obtains the ciphertext corresponding to each piece of sub-information, it needs to be decrypted to obtain the sub-information corresponding to each piece of ciphertext.

S209: Determine the ciphertext of the coordinate information corresponding to each piece of sub-information as the ciphertext of the target information, and store the ciphertext of the target information in the blockchain network.

Here, for the specific content of step S209, reference may be made to the content of step S106 in the embodiment corresponding to FIG. 1 , which will not be repeated here.

In the embodiment of the present application, according to the private key of the terminal and the key corresponding to each sub-information, the coordinate information corresponding to each sub-information in the at least two sub-information is encrypted, and the ciphertext of the coordinate information corresponding to each sub-information is obtained, which can realize Each piece of sub-information is encrypted to obtain the corresponding ciphertext. After the terminal obtains the ciphertext corresponding to each piece of sub-information, it needs to be decrypted to obtain the corresponding sub-information of each piece of ciphertext. By encrypting each piece of sub-information, even if an illegal terminal obtains the ciphertext corresponding to the sub-information, since the decryption cannot be achieved and the content of the sub-information cannot be obtained, the security of each piece of sub-information can be guaranteed, thereby ensuring the security of the target information. sex.

The methods of the embodiments of the present application are described above, and the devices of the embodiments of the present application are described below.

Referring to FIG. 4, FIG. 4 is a schematic diagram of the composition and structure of an information processing apparatus based on a shared root key provided by an embodiment of the present application, and the above-mentioned information processing apparatus based on a shared root key may be a computer program running in a computer device (including program code), for example, the information processing device based on the shared root key is an application software; the device can be used to execute corresponding steps in the methods provided by the embodiments of the present application. The device 40 includes:

The root key generation module 401 is used to obtain the target function used to describe the information, and the organization information corresponding to the organization to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the organization information, and the organization information includes At least one of the institution's confidentiality level, the institution's debt information, and the institution's profit information;

A subkey generation module 402, configured to generate a key corresponding to each piece of subinformation in the target information according to the root key, and the target information includes at least two pieces of subinformation;

an information adjustment module 403, configured to obtain a first random number corresponding to each piece of sub-information, adjust each piece of sub-information according to the first random number, and obtain each piece of adjusted sub-information;

Coordinate acquisition module 404 is used to obtain the coordinate information corresponding to each sub-information in this at least two sub-information according to this objective function and each sub-information after the adjustment;

The information encryption module 405 is used for encrypting the coordinate information of the corresponding sub-information in the at least two pieces of sub-information by using the key corresponding to each sub-information to obtain the ciphertext of the coordinate information corresponding to each sub-information;

The information storage module 406 is configured to determine the ciphertext of the coordinate information corresponding to each piece of sub-information as the ciphertext of the target information, and store the ciphertext of the target information in the blockchain network.

Optionally, the institution information includes the confidentiality level of the institution, and the root key generation module 401 is specifically used for:

generating a second random number according to the security level of the institution;

Obtain the byte length in the second random number, and perform padding processing on the second random number according to the byte length to obtain the second random number after the padding processing;

A hash operation is performed on the filled second random number to obtain a root key corresponding to the target information.

Optionally, the institution information includes debt information of the institution and profit information of the institution; the root key generation module 401 is specifically used for:

Determine the funding level of the institution based on the institution's debt information and the institution's profitability information;

generate a third random number according to the funding level of the institution;

Hash operation is performed on the third random number to obtain the root key corresponding to the target information.

Optionally, the sub-key generation module 402 is specifically used for:

Obtain the generation time of each sub-information;

The first sub-information and the second sub-information are determined according to the generation time of each piece of sub-information, the first sub-information is the sub-information with the earliest generation time in the target information, and the second sub-information is generated later than the first sub-information the time when the information was generated;

Perform a hash operation on the root key to obtain the key of the first sub-information;

Perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information.

Optionally, the information adjustment module 403 is specifically used for:

Subtract each piece of sub-information from the first random number to obtain each piece of sub-information after the subtraction;

If each piece of sub-information after the subtraction is smaller than the information threshold, then each piece of sub-information after the subtraction is determined as each piece of adjusted sub-information.

Optionally, the apparatus 40 further includes: a random number adjustment module 407 for:

If each piece of sub-information after the subtraction is greater than or equal to the information threshold, adjust the first random number;

Subtract each piece of sub-information with the adjusted first random number to obtain each piece of candidate sub-information;

If each piece of sub-information of the candidate is smaller than the information threshold, then each piece of sub-information of the candidate is determined as each piece of adjusted sub-information.

Optionally, the information encryption module 405 is specifically used for:

Obtain the private key of the terminal to which the target information belongs, and the key corresponding to each piece of sub-information;

Obtain the candidate coordinates corresponding to the target information, and the candidate coordinates are obtained according to the base point coordinates of the curve of the target function and the private key;

Encrypt the candidate coordinates according to the key corresponding to each piece of sub-information to obtain the ciphertext of the candidate coordinates; fuse the coordinate information corresponding to each piece of sub-information with the ciphertext of the corresponding candidate coordinates to obtain the corresponding ciphertext of each piece of sub-information The ciphertext of the coordinate information.

It should be noted that, for the content not mentioned in the embodiment corresponding to FIG. 4 , reference may be made to the description of the method embodiment, which will not be repeated here.

According to an embodiment of the present application, the steps involved in the shared root key-based information processing method shown in FIG. 1 can be performed by various modules in the shared root key-based information processing apparatus shown in FIG. 4 . For example, step S101 shown in FIG. 1 may be performed by the root key generation module 401 in FIG. 4 , and step S102 shown in FIG. 1 may be performed by the sub-key generation module 402 in FIG. 4 ; The step S103 shown in FIG. 4 can be executed by the information adjustment module 403 in FIG. 4; the step S104 shown in FIG. 1 can be executed by the coordinate obtaining module 404 in FIG. 4; the step S105 shown in FIG. The encryption module 405 can perform it; the step S106 shown in FIG. 1 can be performed by the information storage module 406 in FIG. 4 . According to an embodiment of the present application, each module in the information processing based on the shared root key shown in FIG. 4 may be respectively or all combined into one or several units to form, or some unit(s) may also be formed. The same operation can be achieved without affecting the realization of the technical effects of the embodiments of the present application by being split into multiple sub-units with smaller functions. The above modules are divided based on logical functions. In practical applications, the function of one module may also be implemented by multiple units, or the functions of multiple modules may be implemented by one unit. In other embodiments of the present application, the information processing apparatus based on the shared root key may also include other units. In practical applications, these functions may also be implemented with the assistance of other units, and may be implemented by cooperation of multiple units.

According to another embodiment of the present application, it can be implemented on a general-purpose computer device such as a computer including processing elements and storage elements such as a central processing unit (CPU), random access storage medium (RAM), read only storage medium (ROM), etc. Running a computer program (including program code) capable of executing the steps involved in the corresponding methods as shown in FIG. 1 , FIG. 2 and FIG. 3 , to construct a shared root key-based information processing apparatus as shown in FIG. 4 , and to implement the information processing method based on the shared root key of the embodiment of the present application. The above-mentioned computer program can be recorded on, for example, a computer-readable recording medium, loaded in the above-mentioned computing device via the computer-readable recording medium, and executed therein.

In the embodiment of the present application, since the root key corresponding to the target information is generated by the institution information corresponding to the institution to which the target information belongs, and the institution information includes the confidentiality level of the institution, the debt information of the institution, and the profit information of the institution, etc., it is an institution. For relatively confidential information, it is difficult for an illegal terminal to obtain the organization information, that is, it is difficult to obtain the root key corresponding to the target information. Therefore, after generating a key corresponding to each piece of sub-information in the target information according to the root key, and encrypting each piece of sub-information by using the key corresponding to each piece of sub-information, since it is difficult for an illegal terminal to obtain the root key, the Decrypting the ciphertext can improve the difficulty of cracking the ciphertext and improve the security of information. By adjusting each piece of sub-information in the at least two pieces of sub-information, it is beneficial to generate coordinate information corresponding to each piece of adjusted sub-information according to each piece of adjusted sub-information, and improve the success rate of obtaining coordinate information corresponding to each piece of adjusted sub-information. By encrypting each piece of sub-information in the target information, illegal terminals are prevented from cracking the ciphertext, thereby improving the security of each piece of sub-information, thereby improving the security of the target information. By storing the ciphertext information of the target information in the blockchain network, the security of the information can be improved based on the characteristics of the blockchain that cannot be tampered with and is not easily lost; in addition, the ciphertext of the target information is stored in the blockchain network. , which can reduce the resource occupation of the local storage space of the terminal.

Referring to FIG. 5 , FIG. 5 is a schematic structural diagram of a computer device provided by an embodiment of the present application. As shown in FIG. 5 , the above-mentioned computer device 50 may include: a processor 501 , a network interface 504 and a memory 505 , in addition, the above-mentioned computer device 50 may further include: a user interface 503 , and at least one communication bus 502 . Among them, the communication bus 502 is used to realize the connection and communication between these components. The user interface 503 may include a display screen (Display) and a keyboard (Keyboard), and the optional user interface 503 may also include a standard wired interface and a wireless interface. Optionally, the network interface 504 may include a standard wired interface and a wireless interface (eg, a WI-FI interface). The memory 505 may be a high-speed RAM memory, or a non-volatile memory, such as at least one disk memory. The memory 505 can optionally also be at least one storage device located away from the aforementioned processor 501 . As shown in FIG. 5 , the memory 505 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and a device control application program.

In the computer device 50 shown in FIG. 5 , the network interface 504 can provide a network communication function; the user interface 503 is mainly used to provide an input interface for the user; and the processor 501 can be used to call the device control application stored in the memory 505 program to achieve:

It should be understood that the computer device 50 described in this embodiment of the present application can execute the description of the above-mentioned information processing method based on the shared root key in the foregoing embodiments corresponding to FIG. 1 , FIG. 2 and FIG. The description of the above-mentioned information processing apparatus based on the shared root key in the corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of using the same method will not be repeated.

Embodiments of the present application further provide a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and the computer program includes program instructions, which, when executed by a computer, cause the computer to execute the above-mentioned embodiments. The method, the computer may be part of the above mentioned computer equipment. For example, it is the above-mentioned processor 501 . By way of example, program instructions may be deployed for execution on one computer device, or on multiple computer devices located at one site, or alternatively, distributed across multiple sites and interconnected by a communications network Implemented, multiple computer devices distributed in multiple locations and interconnected by a communication network can form a blockchain network.

Optionally, the storage medium involved in this application, such as a computer-readable storage medium, may be non-volatile or volatile.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments can be implemented by instructing the relevant hardware through a computer program, and the program can be stored in a computer-readable storage medium, and the program can be executed , may include the flow of the above-mentioned method embodiments. The storage medium may be a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), or a random access memory (Random Access Memory, RAM) or the like.

The above disclosures are only the preferred embodiments of the present application, and of course, the scope of the rights of the present application cannot be limited by this. Therefore, equivalent changes made according to the claims of the present application are still within the scope of the present application.

Claims

An information processing method based on a shared root key, comprising:

Obtain the objective function used to describe the information, and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information, where the institution information includes the security level of the institution , at least one of the debt information of the institution and the profit information of the institution;

Generate a key corresponding to each piece of sub-information in the target information according to the root key, where the target information includes at least two pieces of sub-information;

obtaining a first random number corresponding to each piece of sub-information, and adjusting each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information;

According to the objective function and each piece of adjusted sub-information, obtain coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information;

Using the key corresponding to each piece of sub-information, encrypt the coordinate information of the corresponding sub-information in the at least two pieces of sub-information, and obtain the ciphertext of the coordinate information corresponding to each of the sub-information;

The ciphertext of the coordinate information corresponding to each piece of sub-information is determined as the ciphertext of the target information, and the ciphertext of the target information is stored in the blockchain network.
The method according to claim 1, wherein the organization information includes a confidentiality level of the organization, and the generating a root key corresponding to the target information according to the organization information includes:

generating a second random number according to the security level of the institution;

Obtaining the byte length in the second random number, and performing padding processing on the second random number according to the byte length to obtain a second random number after padding;

Hash operation is performed on the filled second random number to obtain the root key corresponding to the target information.
The method according to claim 1, wherein the institution information includes debt information of the institution and profit information of the institution; and generating a root key corresponding to the target information according to the institution information comprises:

Determine the funding level of the institution according to the debt information of the institution and the profit information of the institution;

generating a third random number based on the funding level of the institution;

Hash operation is performed on the third random number to obtain the root key corresponding to the target information.
The method according to claim 2 or 3, wherein the generating a key corresponding to each piece of sub-information in the target information according to the root key comprises:

Obtain the generation time of each piece of sub-information;

Determine the first sub-information and the second sub-information according to the generation time of each piece of sub-information, and the generation time of the second sub-information is later than the generation time of the first sub-information;

Hash operation is performed on the root key to obtain the key of the first sub-information;

Perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information.
The method according to claim 1, wherein the adjusting each piece of sub-information according to the first random number to obtain each piece of sub-information after adjustment comprises:

Subtracting each piece of sub-information from the first random number to obtain each piece of sub-information after the subtraction;

If each piece of sub-information after the subtraction is smaller than the information threshold, then each piece of sub-information after the subtraction is determined as each piece of adjusted sub-information.
The method of claim 5, wherein the method further comprises:

If each piece of sub-information after the subtraction is greater than or equal to the information threshold, adjusting the first random number;

Subtracting each piece of sub-information with the adjusted first random number to obtain each piece of candidate sub-information;

If each piece of sub-information of the candidate is smaller than the information threshold, each piece of sub-information of the candidate is determined as each piece of sub-information after adjustment.
The method according to claim 1, wherein, the coordinate information of the corresponding sub-information in the at least two pieces of sub-information is encrypted, and the ciphertext of the coordinate information corresponding to each sub-information is obtained, comprising:

Obtain the private key of the terminal to which the target information belongs, and the key corresponding to each piece of sub-information;

Obtain the candidate coordinates corresponding to the target information, the candidate coordinates are obtained according to the base point coordinates of the curve of the target function and the private key;

Encrypt the candidate coordinates according to the key corresponding to each piece of sub-information to obtain the ciphertext of the candidate coordinates;

The coordinate information corresponding to each piece of sub-information is fused with the ciphertext of the corresponding candidate coordinates to obtain the ciphertext of the coordinate information corresponding to each piece of sub-information.
An information processing device based on a shared root key, comprising:

The root key generation module is used to obtain the objective function used to describe the information and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information. The information includes at least one of the confidentiality level of the institution, the debt information of the institution, and the profit information of the institution;

a sub-key generation module, configured to generate a key corresponding to each piece of sub-information in the target information according to the root key, and the target information includes at least two pieces of sub-information;

an information adjustment module, configured to obtain a first random number corresponding to each piece of sub-information, adjust each piece of sub-information according to the first random number, and obtain each piece of adjusted sub-information;

a coordinate obtaining module, configured to obtain coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information according to the objective function and each piece of adjusted sub-information;

an information encryption module, configured to encrypt the coordinate information of the corresponding sub-information in the at least two pieces of sub-information by using the key corresponding to each piece of sub-information to obtain the ciphertext of the coordinate information corresponding to each of the sub-information;

An information storage module, configured to determine the ciphertext of the coordinate information corresponding to each piece of sub-information as the ciphertext of the target information, and store the ciphertext of the target information in the blockchain network.
A computer device, comprising: a processor, a memory and a network interface;

The processor is connected to the memory and the network interface, wherein the network interface is used to provide a data communication function, the memory is used to store program codes, and the processor is used to call the program codes to execute The following methods:

Obtain the objective function used to describe the information, and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information, where the institution information includes the security level of the institution , at least one of the debt information of the institution and the profit information of the institution;

Generate a key corresponding to each piece of sub-information in the target information according to the root key, where the target information includes at least two pieces of sub-information;

obtaining a first random number corresponding to each piece of sub-information, and adjusting each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information;

According to the objective function and each piece of adjusted sub-information, obtain coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information;

Using the key corresponding to each piece of sub-information, encrypt the coordinate information of the corresponding sub-information in the at least two pieces of sub-information, and obtain the ciphertext of the coordinate information corresponding to each of the sub-information;

The ciphertext of the coordinate information corresponding to each piece of sub-information is determined as the ciphertext of the target information, and the ciphertext of the target information is stored in the blockchain network.
The computer device according to claim 9, wherein the organization information includes a security level of the organization, and performing the generating of the root key corresponding to the target information according to the organization information includes:

generating a second random number according to the security level of the institution;

Obtaining the byte length in the second random number, and performing padding processing on the second random number according to the byte length to obtain a second random number after padding;

Hash operation is performed on the filled second random number to obtain the root key corresponding to the target information.
The computer device according to claim 9, wherein the institution information includes debt information of the institution and profit information of the institution; performing the generating of the root key corresponding to the target information according to the institution information, include:

Determine the funding level of the institution according to the debt information of the institution and the profit information of the institution;

generating a third random number based on the funding level of the institution;

Hash operation is performed on the third random number to obtain the root key corresponding to the target information.
The computer device according to claim 10 or 11, wherein performing the generating of the key corresponding to each piece of sub-information in the target information according to the root key comprises:

Obtain the generation time of each piece of sub-information;

Determine the first sub-information and the second sub-information according to the generation time of each piece of sub-information, and the generation time of the second sub-information is later than the generation time of the first sub-information;

Hash operation is performed on the root key to obtain the key of the first sub-information;

Perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information.
The computer device according to claim 9, wherein performing the adjustment of each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information, comprising:

Subtracting each piece of sub-information from the first random number to obtain each piece of sub-information after the subtraction;

If each piece of sub-information after the subtraction is less than the information threshold, then each piece of sub-information after the subtraction is determined as each piece of adjusted sub-information;

If each piece of sub-information after the subtraction is greater than or equal to the information threshold, adjust the first random number; subtract each piece of sub-information from the adjusted first random number to obtain each piece of candidate sub-information ; If each piece of sub-information of the candidate is smaller than the information threshold, then each piece of sub-information of the candidate is determined as each piece of adjusted sub-information.
The computer device according to claim 9, wherein performing the encryption of the coordinate information of the corresponding sub-information in the at least two pieces of sub-information to obtain the ciphertext of the coordinate information corresponding to each of the sub-information, comprising:

Obtain the private key of the terminal to which the target information belongs, and the key corresponding to each piece of sub-information;

Obtain the candidate coordinates corresponding to the target information, the candidate coordinates are obtained according to the base point coordinates of the curve of the target function and the private key;

Encrypt the candidate coordinates according to the key corresponding to each piece of sub-information to obtain the ciphertext of the candidate coordinates;

The coordinate information corresponding to each piece of sub-information is fused with the ciphertext of the corresponding candidate coordinates to obtain the ciphertext of the coordinate information corresponding to each piece of sub-information.
A computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, the computer program comprising program instructions that, when executed by a processor, cause the processor to perform the following method:

Obtain the objective function used to describe the information, and the institution information corresponding to the institution to which the target information to be processed belongs, and generate the root key corresponding to the target information according to the institution information, where the institution information includes the security level of the institution , at least one of the debt information of the institution and the profit information of the institution;

Generate a key corresponding to each piece of sub-information in the target information according to the root key, where the target information includes at least two pieces of sub-information;

obtaining a first random number corresponding to each piece of sub-information, and adjusting each piece of sub-information according to the first random number to obtain each piece of adjusted sub-information;

According to the objective function and each piece of adjusted sub-information, obtain coordinate information corresponding to each piece of sub-information in the at least two pieces of sub-information;

Using the key corresponding to each piece of sub-information, encrypt the coordinate information of the corresponding sub-information in the at least two pieces of sub-information, and obtain the ciphertext of the coordinate information corresponding to each of the sub-information;

The ciphertext of the coordinate information corresponding to each piece of sub-information is determined as the ciphertext of the target information, and the ciphertext of the target information is stored in the blockchain network.
The computer-readable storage medium according to claim 15, wherein the institution information includes a security level of the institution, and performing the generating of the root key corresponding to the target information according to the institution information comprises:

generating a second random number according to the security level of the institution;

Obtaining the byte length in the second random number, and performing padding processing on the second random number according to the byte length to obtain a second random number after padding;

Hash operation is performed on the filled second random number to obtain the root key corresponding to the target information.
The computer-readable storage medium according to claim 15, wherein the institution information includes debt information of the institution and profit information of the institution; performing the generating of the root corresponding to the target information according to the institution information keys, including:

Determine the funding level of the institution according to the debt information of the institution and the profit information of the institution;

generating a third random number based on the funding level of the institution;

Hash operation is performed on the third random number to obtain the root key corresponding to the target information.
The computer-readable storage medium according to claim 16 or 17, wherein the generating the key corresponding to each piece of sub-information in the target information according to the root key comprises:

Obtain the generation time of each piece of sub-information;

Determine the first sub-information and the second sub-information according to the generation time of each piece of sub-information, and the generation time of the second sub-information is later than the generation time of the first sub-information;

Hash operation is performed on the root key to obtain the key of the first sub-information;

Perform a hash operation on the key of the first sub-information to obtain the key of the second sub-information.
The computer-readable storage medium according to claim 15, wherein the adjusting each piece of sub-information according to the first random number to obtain each piece of sub-information after adjustment comprises:

Subtracting each piece of sub-information from the first random number to obtain each piece of sub-information after the subtraction;

If each piece of sub-information after the subtraction is less than the information threshold, then each piece of sub-information after the subtraction is determined as each piece of adjusted sub-information;

If each piece of sub-information after the subtraction is greater than or equal to the information threshold, adjust the first random number; subtract each piece of sub-information from the adjusted first random number to obtain each piece of candidate sub-information ; If each piece of sub-information of the candidate is smaller than the information threshold, then each piece of sub-information of the candidate is determined as each piece of adjusted sub-information.
The computer-readable storage medium according to claim 15, wherein the encrypting the coordinate information of the corresponding sub-information in the at least two pieces of sub-information is performed to obtain the ciphertext of the coordinate information corresponding to each of the sub-information, include:

Obtain the private key of the terminal to which the target information belongs, and the key corresponding to each piece of sub-information;

Obtain the candidate coordinates corresponding to the target information, the candidate coordinates are obtained according to the base point coordinates of the curve of the target function and the private key;

Encrypt the candidate coordinates according to the key corresponding to each piece of sub-information to obtain the ciphertext of the candidate coordinates;

The coordinate information corresponding to each piece of sub-information is fused with the ciphertext of the corresponding candidate coordinates to obtain the ciphertext of the coordinate information corresponding to each piece of sub-information.