Blockchain-based APP privacy block information management method and system

Abstract

The present invention discloses a method and system for managing APP privacy block information based on blockchain, wherein the method comprises: selecting nodes of a trusted blockchain and a variable blockchain, and providing detailed information of a new APP or a new version of the APP to each node of the variable blockchain; judging whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain according to the variable smart contract; if the conditions for writing the block information of the variable blockchain are met, notifying all nodes in the variable blockchain of the detailed information, and the nodes in the trusted blockchain judge whether the conditions for writing the block information of the trusted blockchain are met according to the trusted smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, notifying all nodes in the trusted blockchain to write the detailed information of the new APP or the new version of the APP, otherwise, notifying all nodes in the variable blockchain to delete the written block information.

Description

Technical Field

[0001] The present invention relates to the technical field of application privacy management, and in particular to a method and system for managing APP privacy block information based on blockchain. Background Art

[0002] With the continuous development of information technology, APPs are increasingly integrated into daily life. While bringing convenience to people, they also cause risks such as forced authorization, excessive rights requests, and excessive collection of personal information on terminals. Relevant regulatory authorities have continued to carry out multiple special governance actions, and have achieved remarkable results in the compliance of APP privacy permissions. Compliance testing and report generation are completed through the technical means of the detection platform. It is used to prove that the APP complies with privacy permissions. With the frequent updates of APP versions and the rapid emergence of a large number of new APPs, the complexity of privacy compliance testing has increased, and the security risks of terminal users when installing or upgrading APPs have increased. At present, the blockchain technology can be used to record the test results of terminal manufacturers, Internet companies and regulatory agencies, and realize the open sharing of compliance test results. It effectively reduces the compliance testing pressure of terminal manufacturers, Internet companies and regulatory agencies, and improves the efficiency of APP compliance testing. It enables compliant APPs and updated new versions to be launched quickly, improving the experience of developers and users.

[0003] This process has some shortcomings, which are mainly manifested in the following aspects:

[0004] At present, in the process of privacy compliance testing, the focus is on checking the rationality and legality of the various permissions required by the APP. As the frequency and periodicity of the scans corresponding to the various permissions in the APP require a lot of time to monitor, it takes a long time to get accurate compliance test results. Therefore, at present, the commitment system is generally adopted, that is, developers are required to commit to the compliance of the developed APP, and their scanning privacy is checked in a short period of time. Once there is a violation of the commitment, the developer will be punished accordingly. In the process of APP development or updating, developers will inevitably call third-party SDKs, which may have regular scans of user privacy, for example: after a period of time after the initial installation, the user's current location information is scanned regularly and at high frequency. In this way, developers do not know whether the developed APP really meets the privacy compliance requirements.

[0005] Therefore, the above situation poses a challenge to using blockchain to record APP privacy compliance information. That is, if the APP is fully checked for privacy compliance, it will take a long time to get accurate inspection results, which cannot meet the timeliness of the APP application market. If the APP cannot be fully checked for privacy compliance, it will be recorded in the block content of the blockchain. Once a problem is found later, it will be difficult to delete it due to the special nature of the blockchain. Summary of the invention

[0006] The embodiment of the present invention provides a method and system for managing APP privacy block information based on blockchain to solve the technical problem of inaccurate information in recording APP privacy compliance using blockchain technology in the prior art.

[0007] In a first aspect, an embodiment of the present invention provides a method for managing APP privacy block information based on blockchain, including:

[0008] Selecting nodes of a trusted blockchain and a variable blockchain, wherein the nodes of the trusted blockchain are partially identical to the nodes of the variable blockchain;

[0009] Provide detailed information of the new APP or new version of the APP to each node of the mutable blockchain;

[0010] The nodes in the mutable blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain according to the mutable smart contract;

[0011] If the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain, all nodes in the mutable blockchain are notified to write the detailed information of the new APP or the new version of the APP, and all nodes in the mutable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP;

[0012] The nodes in the trusted blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain based on the trusted smart contract;

[0013] If the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, all nodes in the trusted blockchain are notified to write the detailed information of the new APP or the new version of the APP; otherwise, all nodes in the variable blockchain are notified to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP.

[0014] Furthermore, the selection of nodes of the trusted blockchain and the variable blockchain includes:

[0015] According to the important indicator parameters of the nodes, some nodes are selected from the variable blockchain as nodes of the trusted blockchain.

[0016] Furthermore, the corresponding block information of all nodes in the variable blockchain that write detailed information of the new APP or the new version of the APP includes:

[0017] Use the Chameleon hash function to generate variable corresponding block information based on the detailed information of the new APP or the new version of the APP;

[0018] The variable block information is written into the block.

[0019] Furthermore, all nodes in the mutable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP, including:

[0020] Use the private key in Chameleon Hash to solve the random number;

[0021] The block information and the next block information are decoupled by using random numbers, and the next block information is coupled with the previous block of the block information by using a chameleon hash function.

[0022] Furthermore, the conditions for the block information of the variable blockchain include:

[0023] The number and types of privacy permissions of the new app are consistent with those of similar apps that have been tested before;

[0024] Whether the number and types of new privacy permissions of the new version of the APP exceed the set permission threshold compared with the previous version.

[0025] Furthermore, the conditions for the block information of the variable blockchain also include:

[0026] When the number and types of new permissions of the privacy permissions of the new version of the APP exceed the set permission threshold compared with the previous version, it is determined whether the new permissions are in the permission declaration.

[0027] Furthermore, the conditions for writing block information into the trusted blockchain include:

[0028] No privacy violations were reported to the app within the specified time period; and

[0029] Trusted blockchain representative nodes exceeding the preset number of trusted nodes report compliance testing.

[0030] Furthermore, the method further comprises:

[0031] The download conditions of the block information of the variable blockchain are set so that the terminal that meets the APP privacy detection conditions downloads the new APP or the new version of the APP corresponding to the block information.

[0032] In a second aspect, an embodiment of the present invention further provides an APP privacy management system, which is used to implement the blockchain-based APP privacy block information management method provided in the above embodiment, including:

[0033] A trusted blockchain node, which is used to write block information corresponding to detailed information of a new APP or a new version of an APP that has passed a comprehensive review of privacy compliance;

[0034] A variable blockchain node, which is used to write the block information corresponding to the detailed information of the new APP or the new version of the APP that has passed the preliminary review of privacy compliance, and delete the block information of the new APP or the new version of the APP when the new APP or the new version of the APP does not meet the comprehensive review of privacy compliance;

[0035] Some nodes of the variable blockchain are also trusted blockchain nodes, and the nodes of the variable blockchain are not exactly the same as the nodes of the trusted blockchain.

[0036] Furthermore, the trusted blockchain nodes include: privacy compliance detection systems corresponding to regulatory agencies, Internet companies, application markets, advanced users, and terminal manufacturers;

[0037] The variable blockchain nodes include: privacy compliance detection systems corresponding to advanced users, APP developers, regulatory agencies, terminal manufacturers, and Internet companies.

[0038] The blockchain-based APP privacy block information management method and system provided by the embodiment of the present invention selects nodes of a trusted blockchain and a variable blockchain, and the nodes of the trusted blockchain are partially the same as the nodes of the variable blockchain; the detailed information of the new APP or the new version of the APP is provided to each node of the variable blockchain; the node in the variable blockchain determines whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain according to the variable smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain, all nodes in the variable blockchain are notified to write the detailed information of the new APP or the new version of the APP, and all nodes in the variable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP; the nodes in the trusted blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain according to the trusted smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, all nodes in the trusted blockchain are notified to write the detailed information of the new APP or the new version of the APP, otherwise, all nodes in the variable blockchain are notified to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP. Taking full advantage of the establishment of two blockchains, new apps or new versions of apps can be quickly tested and uploaded to the chain for download and use by terminals with detection capabilities. The waiting time for detection is reduced, and terminals with detection capabilities can also be used to fully check the privacy compliance of apps. Security is improved. The advantage of the mutable blockchain can be used to remove apps that do not meet the requirements. For apps that meet the requirements, they are written through the trusted blockchain and provided to major application markets for download and use by ordinary users. Under the premise of ensuring the privacy compliance of apps, the detection time of apps is effectively shortened, which promotes the listing of apps as soon as possible, and further improves the user experience of users and developers. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] Other features, objects and advantages of the present invention will become more apparent from the detailed description of non-limiting embodiments made with reference to the following drawings:

[0040] Figure 1 It is a flowchart of a method for managing APP privacy block information based on blockchain provided in Embodiment 1 of the present invention;

[0041] Figure 2 It is a flowchart of a method for managing APP privacy block information based on blockchain provided in Embodiment 2 of the present invention;

[0042] Figure 3It is a structural diagram of a blockchain APP privacy block information management device provided in Embodiment 3 of the present invention. DETAILED DESCRIPTION

[0043] The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present invention, rather than to limit the present invention. It should also be noted that, for ease of description, only parts related to the present invention, rather than all structures, are shown in the accompanying drawings.

[0044] Embodiment 1

[0045] Figure 1 This is a flowchart of a blockchain-based APP privacy block information management method provided in Embodiment 1 of the present invention. This embodiment is applicable to the case where blockchain management is used for APP privacy detection. The method can be executed by a blockchain-based APP privacy management system, and specifically includes the following steps:

[0046] S110, selecting nodes of a trusted blockchain and a variable blockchain, wherein the nodes of the trusted blockchain are partially identical to the nodes of the variable blockchain.

[0047] In this embodiment, two blockchains can be constructed, namely a trusted blockchain and a variable blockchain. Among them, the information of each fully compliant APP or new version of APP in the trusted blockchain is recorded in a block form for use by major application markets. Major application markets can confirm that the provided APP or new version of APP complies with privacy and security regulations based on the information in the blockchain, and provide it to users for download and use. The variable blockchain records the information of the APP or new version of APP after preliminary detection, and its security has not been fully confirmed. It is mainly provided to terminal manufacturers, Internet companies, regulatory agencies, application markets with certain detection capabilities, and some users who have certain viewing capabilities for security and privacy. To conduct further security detection or use of the APP or new version of APP after preliminary detection.

[0048] Correspondingly, the nodes of the trusted blockchain can be the detection systems corresponding to major application markets, terminal manufacturers, Internet companies, and regulatory agencies. The nodes of the variable blockchain can include Internet companies, regulatory agencies, and some advanced users with APP privacy security detection and processing. And after confirming full compliance, the nodes of the variable blockchain report the information to the nodes of the trusted blockchain for writing to the trusted blockchain. Therefore, the nodes of the trusted blockchain are partially the same as the nodes of the variable blockchain.

[0049] Optionally, some nodes can be selected from the variable blockchain as nodes of the trusted blockchain based on important indicator parameters of the nodes. The important indicator parameters of the nodes may include: authority, total number of tests, and test pass rate. Using the above indicators, the risk of some nodes maliciously reporting data can be eliminated.

[0050] S120, providing detailed information of the new APP or the new version of the APP to each node of the mutable blockchain.

[0051] Exemplarily, the detailed information of the new APP or the new version of the APP may include: application name, version number, privacy statement and other detailed information for verifying compliance. The above information is provided to each node of the variable blockchain so that each node can detect and use the new APP or the new version of the APP.

[0052] S130, the nodes in the mutable blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain according to the mutable smart contract.

[0053] For the mutable blockchain, it is not unconditional writing for APP, but in essence it is equivalent to setting corresponding rules to determine whether it can be written into the mutable blockchain. Among them, the corresponding rules are smart contracts.

[0054] Optionally, in this embodiment, the smart contract conditions may include: passing the preliminary review, or the privacy mentioned in its privacy statement reaches a preset privacy condition threshold. Through the above two conditions, it is possible to quickly and easily determine whether a new APP or a new version of an APP can meet the requirements for rapid launch and be used first by some users who meet the privacy judgment conditions.

[0055] S140, if the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain, then notify all nodes in the mutable blockchain to write the detailed information of the new APP or the new version of the APP, and all nodes in the mutable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP.

[0056] When the above smart contract conditions are met, the representative node determines that the conditions for writing to the mutable blockchain are met, and then notifies all nodes in the mutable blockchain to write the detailed information of the new APP or the new version of the APP. All nodes in the mutable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP. The use of the mutable blockchain can help new APPs or new versions of APPs go online quickly for some users with privacy judgment conditions to use first. Moreover, after writing to the mutable blockchain, regulators, other network companies, terminal manufacturers, etc. can all conduct inspections. Users with privacy judgment conditions can also be mobilized to make privacy compliance judgments.

[0057] Optionally, the corresponding block information of the detailed information of the new APP or the new version of the APP written to all nodes in the variable blockchain includes: using the chameleon hash function to generate the variable corresponding block information according to the detailed information of the new APP or the new version of the APP; writing the variable block information into the block. It is difficult to find collisions with traditional cryptographic hash functions. However, the chameleon hash function can artificially set a "weakness" or "backdoor": once you master it, you can easily find collisions. Although the two collision resistances of the hash function listed above are destroyed, for most people, these characteristics still exist, and this hash is still safe. Therefore, the corresponding block information can be generated using the chameleon hash function. The block information is generated using the detailed information of the previous block and the new APP or the new version of the APP combined with random variables.

[0058] S150, the node in the trusted blockchain determines whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain according to the trusted smart contract.

[0059] By writing into a mutable blockchain, on the one hand, it can be provided to some advanced users, and on the other hand, advanced users, regulators, Internet companies and terminal manufacturers can fully test the privacy compliance of new apps or new versions of apps.

[0060] On the basis of meeting the conditions of the smart contract, the new APP or the new version of the APP can be written into the trusted blockchain.

[0061] Exemplarily, the smart contract may include: no privacy non-compliance information reports about this APP are received within a set time period; and trusted blockchain representative nodes exceeding a preset number of trusted nodes report compliance detection.

[0062] S160, if the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, notify all nodes in the trusted blockchain to write the detailed information of the new APP or the new version of the APP; otherwise, notify all nodes in the variable blockchain to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP.

[0063] On the basis of satisfying the above-mentioned trusted smart contracts, the trusted blockchain representative node that reports compliance holds a vote. After the vote is passed, all nodes in the trusted blockchain are notified to write the new APP or APP new version information into the trusted blockchain. Since the nodes of the trusted blockchain include a large number of application market nodes, after writing the new APP or APP new version information, the application market node can quickly launch the new APP or APP new version online for ordinary users to download and use.

[0064] If the conditions of the above-mentioned trusted smart contract are not met, it means that the new APP or the new version of the APP has major privacy compliance issues. Not only can it not be written into the trusted blockchain, but it also needs to be deleted in the variable blockchain. When the common nodes of the trusted blockchain and the variable blockchain do not receive a notification of writing into the trusted blockchain within a preset time period, all the variable blockchain nodes are notified to delete the corresponding block information of the detailed information of the new APP or the new version of the APP. After receiving the notification, all the variable blockchain nodes delete the corresponding block information of the detailed information of the new APP or the new version of the APP.

[0065] Optionally, deleting the corresponding block information of the detailed information of the new APP or the new version of the APP by all nodes in the variable blockchain may include: solving a random number using a private key in a chameleon hash; and decoupling the block information from the next block information using the random number, and establishing the coupling of the next block information with the previous block of the block information using a chameleon hash function.

[0066] Since the Chameleon hash function has a secret key, its principle is "ChamelelonHash(m)=ChamelelonHash(m'), where m is not equal to m'". Using the corresponding secret key, m' can be quickly solved. Based on m', the coupling with the previous block information can be released, and the next block information can be coupled with the previous block information using the Chameleon hash function to form a new block information, which is essentially equivalent to deleting the block information corresponding to the original new APP or APP new version information. Ensure that the verified corresponding block data in the mutable blockchain is correct.

[0067] In this embodiment, by selecting nodes of a trusted blockchain and a variable blockchain, the nodes of the trusted blockchain are partially identical to the nodes of the variable blockchain; providing detailed information of a new APP or a new version of an APP to each node of the variable blockchain; the nodes in the variable blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain according to the variable smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain, all nodes in the variable blockchain are notified to write the detailed information of the new APP or the new version of the APP, and all nodes in the variable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP; the nodes in the trusted blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain according to the trusted smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, all nodes in the trusted blockchain are notified to write the detailed information of the new APP or the new version of the APP, otherwise, all nodes in the variable blockchain are notified to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP. Taking full advantage of the establishment of two blockchains, new apps or new versions of apps can be quickly tested and uploaded to the chain for download and use by terminals with detection capabilities. The waiting time for detection is reduced, and terminals with detection capabilities can also be used to fully check the privacy compliance of apps. Security is improved. The advantage of the mutable blockchain can be used to remove apps that do not meet the requirements. For apps that meet the requirements, they are written through the trusted blockchain and provided to major application markets for download and use by ordinary users. Under the premise of ensuring the privacy compliance of apps, the detection time of apps is effectively shortened, which promotes the listing of apps as soon as possible, and further improves the user experience of users and developers.

[0068] Embodiment 2

[0069] Figure 2 The flowchart of the method for managing the privacy block information of an APP based on blockchain provided in the second embodiment of the present invention is as follows. This embodiment is optimized based on the above embodiment. In this embodiment, the conditions of the block information of the variable blockchain are specifically optimized as follows: the privacy permissions of the new APP are consistent with the number and types of privacy permissions of similar APPs that have been detected before; whether the number and types of new permissions of the privacy permissions of the new version of the APP exceed the set permission threshold compared with the previous version.

[0070] Accordingly, the blockchain-based APP privacy block information management method provided in this embodiment specifically includes:

[0071] S210, selecting nodes of a trusted blockchain and a variable blockchain, wherein the nodes of the trusted blockchain are partially identical to the nodes of the variable blockchain.

[0072] S220, providing detailed information of the new APP or the new version of the APP to each node of the mutable blockchain.

[0073] S230, the node in the mutable blockchain determines whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain according to the mutable smart contract.

[0074] S240, if the privacy permissions of the new APP or the new version of the APP meet the same level as the number and types of privacy permissions of similar APPs that have been detected before, and whether the number and types of new permissions of the new version of the APP exceed the set permission threshold compared with the previous version, then notify all nodes in the mutable blockchain to write detailed information of the new APP or the new version of the APP.

[0075] Usually, the new APP or new version of APP written into the mutable blockchain has not undergone a complete privacy compliance test, and can only be judged by some relatively basic conditions whether it can initially meet the privacy compliance requirements. In this embodiment, the new APP or the new version of APP can be initially judged by the condition that the privacy permissions of the new APP meet the same level as the number and type of privacy permissions of the same type of APP that has been previously tested. For the new APP, it can be classified into a certain type of APP. For example, the corresponding permissions of the previous privacy-compliant APP can be used to compare with the corresponding privacy permissions in the privacy statement of the new APP. When the number of permissions exceeds the preset number threshold, it can be considered that it does not meet the privacy compliance. For the new version of APP, it is judged whether the number and type of new permissions of the privacy permissions of the new version of APP exceeds the set permission threshold compared with the previous version. If it does not exceed, it is considered that the corresponding privacy permissions corresponding to the new function meet the requirements.

[0076] S250, all nodes in the mutable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP.

[0077] S260, the node in the trusted blockchain determines whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain according to the trusted smart contract.

[0078] S270, if the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, notify all nodes in the trusted blockchain to write the detailed information of the new APP or the new version of the APP; otherwise, notify all nodes in the variable blockchain to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP.

[0079] This embodiment optimizes the conditions of the block information of the variable blockchain to: the privacy permissions of the new APP are at the same level as the number and types of privacy permissions of similar APPs that have been detected before; whether the number and types of new permissions of the new version of the APP exceed the set permission threshold compared with the previous version. In the case that the new APP or the new version of the APP has not undergone a complete privacy detection, the basic conditions can be used to preliminarily determine whether it preliminarily meets the privacy permission requirements. It ensures that the credibility of the written block data in the variable blockchain meets certain conditions, reducing the possibility of modifying the variable blockchain later. At the same time, it also reduces the number of APPs that undergo comprehensive privacy compliance testing later.

[0080] In another preferred implementation of this embodiment, the condition of the block information of the variable blockchain may also include: when the number and type of newly added permissions of the new version of the APP exceed the set permission threshold compared with the previous version, determine whether the newly added permissions are in the permission declaration. This is to conduct an effective preliminary test on whether the newly added privacy permissions of the new version of the APP are compliant.

[0081] Embodiment 3

[0082] Figure 3 : is a schematic diagram of the structure of an APP privacy management system provided in Embodiment 3 of the present invention, wherein the APP privacy management system is used to implement the blockchain-based APP privacy block information management method provided in the above embodiment, such as Figure 3 As shown, the device comprises:

[0083] A trusted blockchain node, which is used to write block information corresponding to detailed information of a new APP or a new version of an APP that has passed a comprehensive review of privacy compliance;

[0084] A variable blockchain node, which is used to write the block information corresponding to the detailed information of the new APP or the new version of the APP that has passed the preliminary review of privacy compliance, and delete the block information of the new APP or the new version of the APP when the new APP or the new version of the APP does not meet the comprehensive review of privacy compliance;

[0085] Some nodes of the variable blockchain are also trusted blockchain nodes, and the nodes of the variable blockchain are not exactly the same as the nodes of the trusted blockchain.

[0086] The blockchain-based APP privacy block information management device provided in this embodiment selects nodes of a trusted blockchain and a variable blockchain, and the nodes of the trusted blockchain are partially the same as the nodes of the variable blockchain; the detailed information of the new APP or the new version of the APP is provided to each node of the variable blockchain; the nodes in the variable blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain according to the variable smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the variable blockchain, all nodes in the variable blockchain are notified to write the detailed information of the new APP or the new version of the APP, and all nodes in the variable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP; the nodes in the trusted blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain according to the trusted smart contract; if the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, all nodes in the trusted blockchain are notified to write the detailed information of the new APP or the new version of the APP, otherwise, all nodes in the variable blockchain are notified to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP. Taking full advantage of the establishment of two blockchains, new apps or new versions of apps can be quickly tested and uploaded to the chain for download and use by terminals with detection capabilities. The waiting time for detection is reduced, and terminals with detection capabilities can also be used to fully check the privacy compliance of apps. Security is improved. The advantage of the mutable blockchain can be used to remove apps that do not meet the requirements. For apps that meet the requirements, they are written through the trusted blockchain and provided to major application markets for download and use by ordinary users. Under the premise of ensuring the privacy compliance of apps, the detection time of apps is effectively shortened, which promotes the listing of apps as soon as possible, and further improves the user experience of users and developers.

[0087] On the basis of the above embodiments, the trusted blockchain nodes include: privacy compliance detection systems corresponding to regulatory agencies, Internet companies, application markets, advanced users and terminal manufacturers;

[0088] The variable blockchain nodes include: privacy compliance detection systems corresponding to advanced users, APP developers, regulatory agencies, terminal manufacturers, and Internet companies.

[0089] Note that the above are only preferred embodiments of the present invention and the technical principles used. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present invention. Therefore, although the present invention has been described in more detail through the above embodiments, the present invention is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present invention, and the scope of the present invention is determined by the scope of the appended claims.

Claims

1. A method for managing APP privacy block information based on blockchain, characterized in that: include: Select nodes of a trusted blockchain and a variable blockchain, where the nodes of the trusted blockchain are partially identical to the nodes of the variable blockchain, and the nodes of the trusted blockchain are used to write block information corresponding to detailed information of a new APP or a new version of the APP that has passed the comprehensive review of privacy compliance, and the nodes of the variable blockchain are used to write block information corresponding to detailed information of a new APP or a new version of the APP that has passed the preliminary review of privacy compliance, and delete the block information of the new APP or the new version of the APP when the new APP or the new version of the APP does not meet the comprehensive review of privacy compliance; Provide detailed information of the new APP or new version of the APP to each node of the mutable blockchain; The nodes in the mutable blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain according to the mutable smart contract; If the new APP or the new version of the APP meets the conditions for writing the block information of the mutable blockchain, all nodes in the mutable blockchain are notified to write the detailed information of the new APP or the new version of the APP, and all nodes in the mutable blockchain write the corresponding block information of the detailed information of the new APP or the new version of the APP; The nodes in the trusted blockchain determine whether the detailed information of the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain based on the trusted smart contract; If the new APP or the new version of the APP meets the conditions for writing the block information of the trusted blockchain, all nodes in the trusted blockchain are notified to write the detailed information of the new APP or the new version of the APP; otherwise, all nodes in the variable blockchain are notified to delete the block information of the detailed information of the new APP or the new version of the APP that has been written, and all nodes in the variable blockchain delete the corresponding block information of the detailed information of the new APP or the new version of the APP.

2. The method according to claim 1, characterized in that The selection of nodes of the trusted blockchain and the variable blockchain includes: According to the important indicator parameters of the nodes, some nodes are selected from the variable blockchain as nodes of the trusted blockchain.

3. The method according to claim 1, characterized in that The corresponding block information of the detailed information of the new APP or the new version of the APP written in all nodes in the mutable blockchain includes: Use the Chameleon hash function to generate variable corresponding block information based on the detailed information of the new APP or the new version of the APP; The variable block information is written into the block.

4. The method according to claim 3, characterized in that The corresponding block information of the detailed information of the new APP or the new version of the APP deleted by all nodes in the mutable blockchain includes: Use the private key in Chameleon Hash to solve the random number; The block information and the next block information are decoupled by using random numbers, and the next block information is coupled with the previous block of the block information by using a chameleon hash function.

5. The method according to claim 1, characterized in that The conditions for the block information of the variable blockchain include: The number and types of privacy permissions of the new app are consistent with those of similar apps that have been tested before; Whether the number and types of new privacy permissions of the new version of the APP exceed the set permission threshold compared with the previous version.

6. The method according to claim 5, characterized in that The conditions for the block information of the variable blockchain also include: When the number and types of new permissions of the privacy permissions of the new version of the APP exceed the set permission threshold compared with the previous version, it is determined whether the new permissions are in the permission declaration.

7. The method according to claim 1, characterized in that The conditions for writing block information into the trusted blockchain include: No privacy violations were reported to the app within the specified time period; and Trusted blockchain representative nodes exceeding the preset number of trusted nodes report compliance testing.

8. The method according to claim 1, characterized in that The method further comprises: The download conditions of the block information of the variable blockchain are set so that the terminal that meets the APP privacy detection conditions downloads the new APP or the new version of the APP corresponding to the block information.

9. The method according to claim 1, characterized in that: Some nodes of the variable blockchain are also trusted blockchain nodes, and the nodes of the variable blockchain are not exactly the same as the nodes of the trusted blockchain.

10. The method according to claim 9, characterized in that The trusted blockchain nodes include: privacy compliance detection systems corresponding to regulatory agencies, Internet companies, application markets, advanced users and terminal manufacturers; The variable blockchain nodes include: privacy compliance detection systems corresponding to advanced users, APP developers, regulatory agencies, terminal manufacturers, and Internet companies.

Images