Security vulnerability processing method and device based on blockchain

Abstract

The present invention discloses a method and device for processing security vulnerabilities based on blockchain, and relates to the field of blockchain technology. The method comprises: receiving and parsing: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries relevant data of the security vulnerability and identity information of a security vulnerability processor; obtaining from the blockchain: contact information corresponding to the identity information of the processor; according to the contact information, sending to the security vulnerability processor: a second 5G message link carrying relevant data of the security vulnerability; receiving a third 5G message link sent by the security vulnerability processor; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability processor according to the second 5G message link; and correcting the security vulnerability according to the parsing result of the third 5G message link. The present invention can improve the processing efficiency of security vulnerabilities, and improve the security and reliability of security vulnerability processing.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a method and device for processing security vulnerabilities based on blockchain. Background Art

[0002] This section is intended to provide a background or context to the embodiments of the invention recited in the claims. No admission is made that the description herein is prior art by inclusion in this section.

[0003] At present, there are generally two ways to deal with security vulnerabilities in enterprise systems:

[0004] The first method is to manually handle security vulnerabilities:

[0005] For example, most banking companies rely on manual operations to handle security vulnerabilities. For example, it is necessary to manually record and maintain the management ledger of security vulnerabilities and implement the handling of security vulnerabilities. When handling security vulnerabilities manually, data update delays and data loss are inevitable, resulting in information asynchrony between the party that uploads the security vulnerability data and the security vulnerability handling method, which can easily cause missing and delayed recording and handling of security vulnerabilities, reducing the efficiency of handling security vulnerabilities.

[0006] The second method is to use the security vulnerability management system to handle it:

[0007] The security vulnerability management systems currently in use generally store security vulnerability related data in traditional databases, which are extremely susceptible to tampering and attacks, reducing the security and reliability of security vulnerability processing. Summary of the invention

[0008] The embodiment of the present invention provides a security vulnerability processing method based on blockchain, which is used to improve the processing efficiency of security vulnerabilities and improve the security and reliability of security vulnerability processing. The method includes:

[0009] Receive and parse: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of the security vulnerability handler;

[0010] Obtain from the blockchain: contact information corresponding to the identity information of the processing party;

[0011] According to the contact information, a second 5G message link carrying data related to the security vulnerability is sent to the security vulnerability handling party;

[0012] Receive a third 5G message link sent by the security vulnerability handler; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability handler according to the second 5G message link;

[0013] Based on the analysis results of the third 5G message link, the security vulnerability is corrected.

[0014] The embodiment of the present invention also provides a security vulnerability processing device based on blockchain, which is used to improve the processing efficiency of security vulnerabilities and improve the security and reliability of security vulnerability processing. The device includes:

[0015] The first 5G message link receiving module is used to receive and parse: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of a security vulnerability handler;

[0016] The blockchain data acquisition module is used to obtain from the blockchain: contact information corresponding to the identity information of the processing party;

[0017] A second 5G message link sending module is used to send, according to the contact information, a second 5G message link carrying security vulnerability related data to the security vulnerability handling party;

[0018] A third 5G message link receiving module is used to receive a third 5G message link sent by the security vulnerability processing party; the third 5G message link carries the security vulnerability processing data fed back by the security vulnerability processing party according to the second 5G message link;

[0019] The correction processing module is used to correct the security vulnerability according to the analysis result of the third 5G message link.

[0020] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above-mentioned blockchain-based security vulnerability processing method when executing the computer program.

[0021] An embodiment of the present invention also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned blockchain-based security vulnerability processing method is implemented.

[0022] An embodiment of the present invention also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the above-mentioned blockchain-based security vulnerability processing method is implemented.

[0023] In an embodiment of the present invention, receiving and parsing: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries relevant data of the security vulnerability and identity information of a security vulnerability processor; obtaining from the blockchain: contact information corresponding to the identity information of the processor; sending to the security vulnerability processor according to the contact information: a second 5G message link carrying relevant data of the security vulnerability; receiving a third 5G message link sent by the security vulnerability processor; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability processor according to the second 5G message link; and correcting the security vulnerability according to the parsing result of the third 5G message link. Compared with the technical solution of manually processing security vulnerabilities in the prior art, the 5G message link can be used to automatically obtain relevant data in the security vulnerability processing process, and the automatic processing of security vulnerabilities can be realized, thereby avoiding the situation in which the efficiency of security vulnerability processing is reduced due to manual errors and omissions under the prior art, and improving the processing efficiency of security vulnerabilities; compared with the security vulnerability management system in the prior art, the blockchain can be used to more safely realize the reading of security vulnerability processing related data, and the security and reliability of security vulnerability processing can be improved with the security of the blockchain network. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the prior art descriptions. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. In the drawings:

[0025] Figure 1 This is a flowchart of a method for handling security vulnerabilities based on blockchain in an embodiment of the present invention;

[0026] Figure 2 This is a specific example diagram of a security vulnerability processing method based on blockchain in an embodiment of the present invention;

[0027] Figure 3 This is a schematic diagram of the structure of a security vulnerability processing device based on blockchain in an embodiment of the present invention;

[0028] Figure 4 This is a specific example diagram of a security vulnerability processing device based on blockchain in an embodiment of the present invention;

[0029] Figure 5 This is a specific example diagram of a blockchain-based security vulnerability processing device in an embodiment of the present invention. DETAILED DESCRIPTION

[0030] To make the purpose, technical solution and advantages of the embodiments of the present invention more clear, the embodiments of the present invention are further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments of the present invention and their descriptions are used to explain the present invention, but are not intended to limit the present invention.

[0031] Currently, the security vulnerability management of most enterprises and banks relies on manual records and maintenance of vulnerability management ledgers. There are statistical omissions and delays due to information asynchrony. In addition, the vulnerability feedback found in daily inspections does not have a unified format and needs to be manually incorporated into the vulnerability management ledger, which is a lot of work.

[0032] Some use vulnerability systems provided by third parties, but the development quality of such systems varies greatly, vulnerability information does not have a unified format, and requires registration and logging into the system, which is cumbersome. Moreover, vulnerability information is stored in traditional databases, which are easy to be tampered with and attacked.

[0033] In order to solve the above problems, the embodiment of the present invention provides a security vulnerability processing method based on blockchain, which is used to improve the processing efficiency of security vulnerabilities and improve the security and reliability of security vulnerability processing. Figure 1 As shown, the method includes:

[0034] Step 101: Receive and parse: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of the security vulnerability handler;

[0035] Step 102: Obtain from the blockchain: contact information corresponding to the identity information of the processing party;

[0036] Step 103: Sending, according to the contact information, to the security vulnerability handling party: a second 5G message link carrying security vulnerability related data;

[0037] Step 104: Receive a third 5G message link sent by the security vulnerability handler; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability handler according to the second 5G message link;

[0038] Step 105: Based on the analysis results of the third 5G message link, correct the security vulnerability.

[0039] In an embodiment of the present invention, receiving and parsing: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of a security vulnerability processor; obtaining from the blockchain: contact information corresponding to the identity information of the processor; sending to the security vulnerability processor according to the contact information: a second 5G message link carrying data related to the security vulnerability; receiving a third 5G message link sent by the security vulnerability processor; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability processor according to the second 5G message link; and correcting the security vulnerability according to the parsing result of the third 5G message link. Compared with the technical solution of manually processing security vulnerabilities in the prior art, the 5G message link can be used to automatically obtain relevant data in the security vulnerability processing process, and the automatic processing of security vulnerabilities can be realized, thereby avoiding the situation in which the efficiency of security vulnerability processing is reduced due to manual errors and omissions under the prior art, and improving the processing efficiency of security vulnerabilities; compared with the security vulnerability management system in the prior art, the blockchain can be used to more safely realize the reading of security vulnerability processing related data, and the security and reliability of security vulnerability processing can be improved with the security of the blockchain network.

[0040] During specific implementation, first receive and parse: the first 5G message link sent by the party uploading the security vulnerability; the first 5G message link carries the relevant data of the security vulnerability and the identity information of the party handling the security vulnerability.

[0041] In an embodiment, a blockchain-based security vulnerability processing method provided by an embodiment of the present invention may further include: authenticating the security vulnerability uploader according to the identity identifier of the security vulnerability uploader;

[0042] Receive and parse: the first 5G message link sent by the party uploading the security vulnerability, including:

[0043] When the verification is passed, receive and parse: the first 5G message link sent by the security vulnerability uploader.

[0044] In an embodiment, the data related to the security vulnerability include: one or any combination of a security vulnerability identifier, a security vulnerability name, a product involved in the security vulnerability, and a security vulnerability risk level.

[0045] In one embodiment, a blockchain-based security vulnerability handling method provided by an embodiment of the present invention may also include: storing contact information corresponding to identity information of different security vulnerability handling parties in the blockchain.

[0046] In one embodiment, the party uploading the security vulnerability may be a security vulnerability administrator. The subject executing the above method may be a pre-set security vulnerability server. In the above embodiment, the user information (such as name, ID card, mobile phone number, etc.) and user authority information of the vulnerability administrator are pre-embedded in the blockchain. In the stage of vulnerability identification and discovery, the vulnerability manager only needs to use a mobile device to send vulnerability-related information and person-in-charge-related information to the designated device in the form of 5G messages. The vulnerability server will record the vulnerability information in the blockchain storage to prevent tampering and facilitate traceability.

[0047] In specific implementation, after receiving and parsing: the first 5G message link sent by the party uploading the security vulnerability, obtain from the blockchain: the contact information corresponding to the identity information of the party processing it.

[0048] In specific implementation, after obtaining the contact information corresponding to the identity information of the processor from the blockchain, a second 5G message link carrying security vulnerability related data is sent to the security vulnerability processor based on the contact information.

[0049] In one embodiment, the security vulnerability handler may be the person responsible for the security vulnerability.

[0050] In an embodiment, after receiving the request, the security vulnerability server can parse the information of the person in charge of the security vulnerability from the blockchain, filter out the contact mobile phone number of the person in charge, and send a notification message to the vulnerability person in charge in the form of a 5G message connection, informing him of the occurrence of a new vulnerability and urging him to deal with it, thereby achieving the purpose of vulnerability warning.

[0051] During specific implementation, after sending a second 5G message link carrying security vulnerability related data to the security vulnerability handler according to the contact information, a third 5G message link sent by the security vulnerability handler is received; the third 5G message link carries the security vulnerability processing data fed back by the security vulnerability handler based on the second 5G message link.

[0052] In specific implementation, a blockchain-based security vulnerability handling method provided by an embodiment of the present invention may also include: storing the contact information and the processor authority identification corresponding to the identity information of different security vulnerability handlers in the blockchain; the above-mentioned processor authority identification includes the processor's authority information, identity information and terminal device information.

[0053] In an embodiment, the method further includes: before sending the second 5G message link, sending a fourth 5G message link to the security vulnerability handler according to the contact method; the fourth 5G message link is used to obtain a verification identifier of the security vulnerability handler; the verification identifier includes authority information, identity information and terminal device information;

[0054] Receive and parse the fifth 5G message link sent by the security vulnerability handler; the fifth 5G message link carries the verification identifier fed back by the security vulnerability handler according to the fourth 5G message link;

[0055] Match the verification identifier in the fifth 5G message link with the processor authority identifier in the blockchain;

[0056] Send to the security vulnerability handler: a second 5G message link carrying data related to the security vulnerability, including:

[0057] When the match is successful, a second 5G message link carrying security vulnerability related data is sent to the security vulnerability handler.

[0058] For example, the person responsible for the security vulnerability can click on the chatbot component in the 5G message link to view the vulnerability information. The vulnerability system server can verify in the blockchain whether the query device is consistent with the person in charge information entered by the administrator. If they are consistent, the vulnerability information will be returned. If they are inconsistent, the request will be rejected.

[0059] During specific implementation, after receiving the third 5G message link sent by the security vulnerability handler; the above-mentioned third 5G message link carries the security vulnerability processing data fed back by the security vulnerability handler based on the second 5G message link, the security vulnerability is corrected according to the analysis result of the third 5G message link.

[0060] In an embodiment, by correcting the security vulnerability according to the analysis result of the third 5G message link, it can help the security vulnerability handler to achieve timely processing of the security vulnerability.

[0061] In specific implementation, a blockchain-based security vulnerability processing method provided by an embodiment of the present invention may also include: when the match fails, issuing an alarm message indicating that the security vulnerability processing party's authority verification has failed.

[0062] In the embodiment, issuing an alarm message can help to control the security vulnerability handling process and achieve timely handling of security vulnerabilities.

[0063] A specific example is given below to illustrate the specific application of the method of the present invention. Figure 2 In this embodiment, the method of the present invention can be implemented by a security vulnerability server, and the method may include the following steps:

[0064] 1. First, embed the vulnerability administrator’s user information (such as name, ID card, mobile phone number, etc.) and permission information in the blockchain;

[0065] 2. During the vulnerability identification and discovery stage, no user needs to log in to the system. The security vulnerability administrator only needs to use a mobile device to send vulnerability-related information and person-in-charge-related information to a designated device in the form of 5G messages. The vulnerability server will record the vulnerability information in the blockchain storage to prevent tampering and facilitate traceability.

[0066] After receiving the request, the security vulnerability server parses the vulnerability person in charge information, selects the contact phone number of the person in charge, and sends the notification information to the vulnerability person in charge in the form of a 5G message link, informing him of the new vulnerability and urging him to deal with it, thus achieving the purpose of vulnerability early warning; in this example, the security vulnerability administrator and the security vulnerability person in charge access the system of the present invention through a personal terminal, and the communication method adopts the form of 5G message. The request content can be generated into a 5G message and sent to the personal user terminal through the operator's 5G network;

[0067] 3. The person in charge of the security vulnerability clicks on the chatbot component in the 5G message to view the vulnerability information. The security vulnerability server then goes to the blockchain to verify whether the query device is consistent with the person in charge information entered by the administrator. If they are consistent, the vulnerability information is returned. If they are inconsistent, the request is rejected.

[0068] In the above example, the blockchain pre-stores the personal information of the security administrator, including name, ID number, mobile phone number, etc. When the security administrator sends a request to the system, the identity is verified by querying the administrator information in the blockchain to ensure security. The blockchain also stores security vulnerability information, including vulnerability unique identifier, vulnerability name, involved products, vulnerability risk level, vulnerability responsible person name, vulnerability responsible person mobile phone number, etc. When the vulnerability responsible person opens the 5G message to view the vulnerability information, it will carry the vulnerability unique identifier and terminal mobile phone number. After receiving it, this system will query the vulnerability information in the blockchain and compare it with the uploaded information. If it does not match, access will be denied. This mechanism ensures the security of vulnerability sensitive information. Only the relevant security vulnerability responsible person can view and operate it.

[0069] Of course, it is understandable that the above detailed process may have other variations, and the relevant variations should all fall within the protection scope of the present invention.

[0070] In an embodiment of the present invention, receiving and parsing: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of a security vulnerability processor; obtaining from the blockchain: contact information corresponding to the identity information of the processor; sending to the security vulnerability processor according to the contact information: a second 5G message link carrying data related to the security vulnerability; receiving a third 5G message link sent by the security vulnerability processor; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability processor according to the second 5G message link; and correcting the security vulnerability according to the parsing result of the third 5G message link. Compared with the technical solution of manually processing security vulnerabilities in the prior art, the 5G message link can be used to automatically obtain relevant data in the security vulnerability processing process, and the automatic processing of security vulnerabilities can be realized, thereby avoiding the situation in which the efficiency of security vulnerability processing is reduced due to manual errors and omissions under the prior art, and improving the processing efficiency of security vulnerabilities; compared with the security vulnerability management system in the prior art, the blockchain can be used to more safely realize the reading of security vulnerability processing related data, and the security and reliability of security vulnerability processing can be improved with the security of the blockchain network.

[0071] As described above, the embodiments of the present invention have the following advantages:

[0072] 1. Use blockchain to store vulnerability information to prevent tampering and facilitate traceability.

[0073] 2. Use 5G messages to interact with the system without a series of tedious steps such as downloading APP, visiting the website, registering, and logging in.

[0074] 3. Use blockchain combined with 5G messages to automatically authenticate users, which is convenient, fast and highly reliable

[0075] 4. Use 5G messages for vulnerability warning, notification, and processing.

[0076] The embodiment of the present invention also provides a security vulnerability processing device based on blockchain, as described in the following embodiment. Since the principle of solving the problem by the device is similar to the security vulnerability processing method based on blockchain, the implementation of the device can refer to the implementation of the security vulnerability processing method based on blockchain, and the repeated parts will not be repeated.

[0077] The embodiment of the present invention also provides a security vulnerability processing device based on blockchain, which is used to improve the processing efficiency of security vulnerabilities and improve the security and reliability of security vulnerability processing. Figure 3 As shown, the device comprises:

[0078] The first 5G message link receiving module 301 is used to receive and parse: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of a security vulnerability handler;

[0079] The blockchain data acquisition module 302 is used to acquire from the blockchain: contact information corresponding to the identity information of the processing party;

[0080] The second 5G message link sending module 303 is used to send, according to the contact information, a second 5G message link carrying security vulnerability related data to the security vulnerability handling party;

[0081] The third 5G message link receiving module 304 is used to receive a third 5G message link sent by the security vulnerability processing party; the third 5G message link carries the security vulnerability processing data fed back by the security vulnerability processing party according to the second 5G message link;

[0082] The correction processing module 305 is used to correct the security vulnerability according to the analysis result of the third 5G message link.

[0083] In one embodiment, Figure 4 As shown, it also includes:

[0084] The identity verification module 306 is used to verify the identity of the security vulnerability uploader according to the identity of the security vulnerability uploader;

[0085] The first 5G message link receiving module is specifically used for:

[0086] When the verification is passed, receive and parse: the first 5G message link sent by the security vulnerability uploader.

[0087] In one embodiment, Figure 5 As shown, it also includes:

[0088] The first blockchain storage module 307 is used to store contact information corresponding to identity information of different security vulnerability handlers in the blockchain.

[0089] In one embodiment, it further includes:

[0090] The second blockchain storage module is used to store the contact information and the authority identifier of the processor corresponding to different security vulnerability processors in the blockchain; the authority identifier of the processor includes the authority information, identity information and terminal device information of the processor;

[0091] The above device also includes: a verification module, which is used to:

[0092] Before sending the second 5G message link, a fourth 5G message link is sent to the security vulnerability handler according to the contact method; the fourth 5G message link is used to obtain the verification identifier of the security vulnerability handler; the verification identifier includes authority information, identity information and terminal device information;

[0093] Receive and parse the fifth 5G message link sent by the security vulnerability handler; the fifth 5G message link carries the verification identifier fed back by the security vulnerability handler according to the fourth 5G message link;

[0094] Match the verification identifier in the fifth 5G message link with the processor authority identifier in the blockchain;

[0095] Send to the security vulnerability handler: a second 5G message link carrying data related to the security vulnerability, including:

[0096] When the match is successful, a second 5G message link carrying security vulnerability related data is sent to the security vulnerability handler.

[0097] In one embodiment, it further includes:

[0098] The alarm module is used to issue an alarm message of security vulnerability handling party authority verification failure when the match fails.

[0099] In one embodiment, the data related to the security vulnerability include: one or any combination of a security vulnerability identifier, a security vulnerability name, a product involved in the security vulnerability, and a security vulnerability risk level.

[0100] An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the blockchain-based security vulnerability processing method when executing the computer program.

[0101] An embodiment of the present invention also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned blockchain-based security vulnerability processing method is implemented.

[0102] An embodiment of the present invention also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the above-mentioned blockchain-based security vulnerability processing method is implemented.

[0103] In an embodiment of the present invention, receiving and parsing: a first 5G message link sent by a security vulnerability uploader; the first 5G message link carries data related to the security vulnerability and identity information of a security vulnerability processor; obtaining from the blockchain: contact information corresponding to the identity information of the processor; sending to the security vulnerability processor according to the contact information: a second 5G message link carrying data related to the security vulnerability; receiving a third 5G message link sent by the security vulnerability processor; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability processor according to the second 5G message link; and correcting the security vulnerability according to the parsing result of the third 5G message link. Compared with the technical solution of manually processing security vulnerabilities in the prior art, the 5G message link can be used to automatically obtain relevant data in the security vulnerability processing process, and the automatic processing of security vulnerabilities can be realized, thereby avoiding the situation in which the efficiency of security vulnerability processing is reduced due to manual errors and omissions under the prior art, and improving the processing efficiency of security vulnerabilities; compared with the security vulnerability management system in the prior art, the blockchain can be used to more safely realize the reading of security vulnerability processing related data, and the security and reliability of security vulnerability processing can be improved with the security of the blockchain network.

[0104] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0105] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0106] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0107] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0108] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A method for handling security vulnerabilities based on blockchain, characterized in that: include: Receive and parse: the first 5G message link sent by the party uploading the security vulnerability; The first 5G message link carries data related to the security vulnerability and identity information of the party handling the security vulnerability; Obtain from the blockchain: contact information corresponding to the identity information of the processing party; According to the contact information, a second 5G message link carrying data related to the security vulnerability is sent to the security vulnerability handling party; Receive a third 5G message link sent by the security vulnerability handler; the third 5G message link carries security vulnerability processing data fed back by the security vulnerability handler according to the second 5G message link; According to the analysis result of the third 5G message link, the security vulnerability is corrected; It also includes: storing the contact information and the authority identifier of the processor corresponding to the identity information of different security vulnerability processors in the blockchain; the authority identifier of the processor includes the authority information, identity information and terminal device information of the processor; The method further includes: before sending the second 5G message link, sending a fourth 5G message link to the security vulnerability handler according to the contact method; the fourth 5G message link is used to obtain a verification identifier of the security vulnerability handler; the verification identifier includes authority information, identity information and terminal device information; receiving and parsing a fifth 5G message link sent by the security vulnerability handler; the fifth 5G message link carries a verification identifier fed back by the security vulnerability handler according to the fourth 5G message link; matching the verification identifier in the fifth 5G message link with the handler authority identifier in the blockchain; Sending to the security vulnerability handler: a second 5G message link carrying security vulnerability related data, including: when the match is successful, sending to the security vulnerability handler: a second 5G message link carrying security vulnerability related data; It also includes: when the match fails, an alarm message is issued indicating that the authority verification of the security vulnerability handler has failed.

2. The method according to claim 1, characterized in that Also includes: Authentication of the party that uploaded the security vulnerability is performed based on the identity of the party that uploaded the security vulnerability; Receive and parse: the first 5G message link sent by the party uploading the security vulnerability, including: When the verification is passed, receive and parse: the first 5G message link sent by the security vulnerability uploader.

3. The method according to claim 1, characterized in that The relevant data of the security vulnerability includes: one or any combination of: security vulnerability identification, security vulnerability name, products involved in the security vulnerability and security vulnerability risk level.

4. A security vulnerability processing device based on blockchain, characterized in that: include: The first 5G message link receiving module is used to receive and parse: a first 5G message link sent by a security vulnerability uploader; The first 5G message link carries data related to the security vulnerability and identity information of the party handling the security vulnerability; The blockchain data acquisition module is used to obtain from the blockchain: contact information corresponding to the identity information of the processing party; A second 5G message link sending module is used to send, according to the contact information, a second 5G message link carrying security vulnerability related data to the security vulnerability handling party; A third 5G message link receiving module is used to receive a third 5G message link sent by the security vulnerability processing party; the third 5G message link carries the security vulnerability processing data fed back by the security vulnerability processing party according to the second 5G message link; A correction processing module, used to correct the security vulnerability according to the analysis result of the third 5G message link; It also includes: a second blockchain storage module, which is used to store the contact information and the authority identifier of the processor corresponding to the identity information of different security vulnerability processors in the blockchain; the authority identifier of the processor includes the authority information, identity information and terminal device information of the processor; The device also includes: a verification module, which is used to: before sending the second 5G message link, send a fourth 5G message link to the security vulnerability handler according to the contact method; the fourth 5G message link is used to obtain the verification identifier of the security vulnerability handler; the verification identifier includes authority information, identity information and terminal device information; receive and parse the fifth 5G message link sent by the security vulnerability handler; the fifth 5G message link carries the verification identifier fed back by the security vulnerability handler according to the fourth 5G message link; match the verification identifier in the fifth 5G message link with the handler authority identifier in the blockchain; Sending to the security vulnerability handler: a second 5G message link carrying security vulnerability related data, including: when the match is successful, sending to the security vulnerability handler: a second 5G message link carrying security vulnerability related data; It also includes: an alarm module, which is used to issue an alarm message of security vulnerability handling party authority verification failure when the match fails.

5. The device according to claim 4, characterized in that Also includes: An identity verification module is used to verify the identity of the party that uploaded the security vulnerability based on the identity of the party that uploaded the security vulnerability. The first 5G message link receiving module is specifically used for: When the verification is passed, receive and parse: the first 5G message link sent by the security vulnerability uploader.

6. The device according to claim 4, characterized in that The relevant data of the security vulnerability includes: one or any combination of: security vulnerability identification, security vulnerability name, products involved in the security vulnerability and security vulnerability risk level.

7. A computer device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 3 is implemented.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 3 is implemented.

9. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 3 is implemented.

Images