Blockchain-based Resource Sharing Method, Device, Storage Medium and Electronic Device

Abstract

The present disclosure relates to a blockchain-based resource sharing method, apparatus, storage medium, and electronic device. The method is applied to a resource owner and includes: processing a target resource to be shared based on a resource key to obtain a plurality of encrypted sub-resources of the target resource; for each of the encrypted sub-resources, constructing a non-fungible token (NFT) corresponding to the encrypted sub-resource in a blockchain network, where the NFT includes a first hash value of the encrypted sub-resource, target identification information of the target resource, and a hash value list, and the hash value list includes the first hash values of the respective encrypted sub-resources of the target file; and performing attribute encryption on the target resource through the plurality of encrypted sub-resources, so that the target resource can be decrypted when the NFTs of the respective encrypted sub-resources of the target resource are available.

Description

Technical Field

[0001] The present disclosure relates to the field of computer technologies, and in particular, to a blockchain-based resource sharing method, apparatus, storage medium, and electronic device. Background Art

[0002] With the development of computer technologies, people can not only share resources offline, but also share resources in the network through terminals.

[0003] When a user terminal shares resources, steps such as resource authorization and resource transmission may be required. In some scenarios, this resource sharing method may face problems of low flexibility in the sharing process and difficulty in identifying resource permissions. Summary of the Invention

[0004] The purpose of the present disclosure is to provide a blockchain-based resource sharing method, apparatus, storage medium, and electronic device to solve the above-mentioned related technical problems.

[0005] To achieve the above purpose, according to the first aspect of the embodiments of the present disclosure, a blockchain-based resource sharing method is provided, which is applied to a resource owner, and the method includes:

[0006] Process a target resource to be shared based on a resource key to obtain a plurality of encrypted sub-resources of the target resource;

[0007] For each of the encrypted sub-resources, construct a non-fungible token (NFT) corresponding to the encrypted sub-resource in a blockchain network, where the NFT includes a first hash value of the encrypted sub-resource, target identification information of the target resource, and a hash value list, and the hash value list includes the first hash values of the respective encrypted sub-resources of the target file;

[0008] Perform attribute encryption on the target resource through the plurality of encrypted sub-resources, so that the target resource can be decrypted when the NFTs of the respective encrypted sub-resources of the target resource are available.

[0009] Optionally, the performing attribute encryption on the target resource through the plurality of encrypted sub-resources includes:

[0010] Encrypt the first hash value of a first encrypted sub-resource through the resource key to obtain a first encrypted hash value, where the first encrypted sub-resource is any one of the plurality of encrypted sub-resources;

[0011] Determine a first polynomial according to Lagrange interpolation and the first encrypted hash values of the respective encrypted sub-resources;

[0012] Input the resource key into the first polynomial to obtain a first decryption value;

[0013] Maintain the first decryption value in the NFT of the first encrypted sub-resource.

[0014] Optionally, it includes:

[0015] Receive a first resource acquisition request, where the first resource acquisition request includes resource requester information and the target identification information;

[0016] Determine the NFT with the identification information being the target identification information from the NFTs owned by the resource requester to obtain a target NFT;

[0017] Generate a hash value set according to the first hash value of the encrypted sub-resource corresponding to the target NFT;

[0018] When the hash value set includes each first hash value in the hash value list, determine the first polynomial according to the Lagrange interpolation method and the first encrypted hash values of the saved encrypted sub-resources;

[0019] Use the first decryption value as the output of the first polynomial and calculate to obtain the resource key;

[0020] Send the resource key to the resource requester, and the resource key is used for the resource requester to obtain the target resource.

[0021] Optionally, a target random number is also maintained in the NFT, and the method further includes:

[0022] Receive a second resource acquisition request sent by the resource requester, where the second resource acquisition request includes the target identification information and a first encrypted random number, and the first encrypted random number is encrypted by the resource requester based on the resource key for the target random number;

[0023] Encrypt the target random number based on the local resource key to obtain a second encrypted random number;

[0024] When the first encrypted random number is the same as the second encrypted random number, send the encrypted sub-resource corresponding to the target identification information owned by the resource owner to the resource requester.

[0025] Optionally, it further includes:

[0026] Determine the first attribute set of the requestor to be authorized;

[0027] Maintain the first attribute set in the NFT;

[0028] Encrypt the attributes of the target resource through the first attribute set, so that a resource requester whose attribute set matches the first attribute set can obtain the target resource.

[0029] Optionally, the encrypting the attributes of the target resource through the first attribute set includes:

[0030] Calculate a second hash value of a target attribute, where the target attribute is any attribute in the first attribute set;

[0031] Encrypt the second hash value through the resource key to obtain a second encrypted hash value;

[0032] Determine a second polynomial according to Lagrange interpolation and the second encrypted hash values of the respective attributes in the first attribute set;

[0033] Input the resource key into the second polynomial to obtain a second decryption value;

[0034] Maintain the second decryption value in the NFT.

[0035] Optionally, it includes:

[0036] Receive a third resource acquisition request, where the third resource acquisition request includes the target identification information and the distributed digital identity of the resource requester;

[0037] Send an identity acquisition request to the distributed digital identity blockchain network, where the identity acquisition request includes the distributed digital identity;

[0038] Receive a digital identity credential sent by the distributed digital identity blockchain network, where the digital identity credential includes a second attribute set corresponding to the distributed digital identity;

[0039] Match the second attribute set with the first attribute set;

[0040] When the second attribute set matches the first attribute set, determine a second polynomial according to Lagrange interpolation and the saved second encrypted hash values;

[0041] Use the second decryption value as the output of the second polynomial to calculate and obtain a resource key;

[0042] Send the resource key to the resource requester, where the resource key is used for the resource requester to obtain the target resource.

[0043] According to the second aspect of the embodiments of the present disclosure, there is provided a blockchain-based resource sharing device, which is applied to a resource owner, and the device includes:

[0044] The first processing module is used to process the target resource to be shared based on the resource key to obtain multiple encrypted sub - resources of the target resource;

[0045] The first construction module is used to construct, for each of the encrypted sub - resources, an NFT corresponding to the encrypted sub - resource in the blockchain network. The NFT includes the first hash value of the encrypted sub - resource, the target identification information of the target resource, and a hash value list. The hash value list includes the first hash values of all the encrypted sub - resources of the target file;

[0046] The first encryption module is used to perform attribute encryption on the target resource through the multiple encrypted sub - resources, so that the target resource can be decrypted when the NFTs of all the encrypted sub - resources of the target resource are available.

[0047] Optionally, the first encryption module includes:

[0048] The first encryption sub - module is used to encrypt the first hash value of the first encrypted sub - resource through the resource key to obtain a first encrypted hash value. The first encrypted sub - resource is any one of the multiple encrypted sub - resources;

[0049] The first determination sub - module is used to determine a first polynomial according to Lagrange interpolation and the first encrypted hash values of all the encrypted sub - resources;

[0050] The first input sub - module is used to input the resource key into the first polynomial to obtain a first decryption value;

[0051] The first execution sub - module is used to maintain the first decryption value in the NFT of the first encrypted sub - resource.

[0052] Optionally, it includes:

[0053] The first receiving module is used to receive a first resource acquisition request, and the first resource acquisition request includes resource requester information and the target identification information;

[0054] The first determination module is used to determine the NFT with the identification information being the target identification information from the NFTs owned by the resource requester to obtain a target NFT;

[0055] The first generation module is used to generate a hash value set according to the first hash values of the encrypted sub - resources corresponding to the target NFT;

[0056] The second determination module is used to determine a first polynomial according to Lagrange interpolation and the first encrypted hash values of all the encrypted sub - resources that have been saved when the hash value set includes all the first hash values in the hash value list;

[0057] A first calculation module, configured to calculate a resource key by using the first decryption value as an output of a first polynomial.

[0058] A first sending module, configured to send the resource key to the resource requester, where the resource key is used by the resource requester to obtain the target resource.

[0059] Optionally, a target random number is further maintained in the NFT, and the apparatus further includes:

[0060] A second receiving module, configured to receive a second resource acquisition request sent by a resource requester, where the second resource acquisition request includes the target identification information and a first encrypted random number, and the first encrypted random number is obtained by the resource requester encrypting the target random number based on the resource key.

[0061] A second encryption module, configured to encrypt the target random number based on the local resource key to obtain a second encrypted random number.

[0062] A second sending module, configured to send, when the first encrypted random number is the same as the second encrypted random number, an encrypted sub-resource corresponding to the target identification information and owned by the resource owner to the resource requester.

[0063] Optionally, it further includes:

[0064] A third determination module, configured to determine a first attribute set of a requestor to be authorized.

[0065] An attribute maintenance module, configured to maintain the first attribute set in the NFT.

[0066] A third encryption module, configured to perform attribute encryption on the target resource by using the first attribute set, so that a resource requester whose attribute set matches the first attribute set can obtain the target resource.

[0067] Optionally, the third encryption module includes:

[0068] A first calculation sub-module, configured to calculate a second hash value of a target attribute, where the target attribute is any attribute in the first attribute set.

[0069] A second encryption sub-module, configured to encrypt the second hash value by using the resource key to obtain a second encrypted hash value.

[0070] A second determination sub-module, configured to determine a second polynomial according to Lagrange interpolation and the second encrypted hash values of the respective attributes in the first attribute set.

[0071] A second input sub-module, configured to input the resource key into the second polynomial to obtain a second decryption value;

[0072] A second execution sub-module, configured to maintain the second decryption value in the NFT.

[0073] Optionally, it includes:

[0074] A third receiving module, configured to receive a third resource acquisition request, where the third resource acquisition request includes the target identification information and the distributed digital identity of the resource requester;

[0075] A third sending module, configured to send an identity acquisition request to a distributed digital identity blockchain network, where the identity acquisition request includes the distributed digital identity;

[0076] A fourth receiving module, configured to receive a digital identity credential sent by the distributed digital identity blockchain network, where the digital identity credential includes a second attribute set corresponding to the distributed digital identity;

[0077] A matching module, configured to match the second attribute set and the first attribute set;

[0078] A fourth determination module, configured to, when the second attribute set matches the first attribute set, determine a second polynomial according to Lagrange interpolation and a saved second encryption hash value;

[0079] A second calculation module, configured to use the second decryption value as the output of the second polynomial to calculate a resource key;

[0080] A fourth sending module, configured to send the resource key to the resource requester, where the resource key is used by the resource requester to acquire the target resource.

[0081] According to a third aspect of the embodiments of the present disclosure, there is provided a non-transitory computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, the steps of the method described in any one of the first aspects above are implemented.

[0082] According to a fourth aspect of the embodiments of the present disclosure, there is provided an electronic device, including:

[0083] A memory, on which a computer program is stored;

[0084] A processor, configured to execute the computer program in the memory to implement the steps of the method described in any one of the first aspects above.

[0085] In the above technical solution, the target resource to be shared can be processed based on a resource key to obtain multiple encrypted sub-resources of the target resource, and NFTs corresponding to each of the encrypted sub-resources can be constructed in the blockchain network. In addition, the target resource can be encrypted in terms of attributes through the multiple encrypted sub-resources, so that the target resource can be decrypted when the NFTs of each encrypted sub-resource of the target resource are owned.

[0086] In this way, if a user owns all the NFTs of the target resource, the user obtains the access right to the target resource. That is to say, the above technical solution can conduct transactions and authorizations on the target file based on NFTs, and integrate the transaction process and the authorization process, thereby simplifying the process of resource sharing.

[0087] Moreover, the owner information of the NFT is recorded in the NFT, that is, the NFT is bound to the user identity. In this way, it helps to identify the ownership right of the resource. Therefore, compared with the resource authorization method through passwords in the related art, the above NFT-based resource sharing method can prevent the resource from being misappropriated. And since the NFT is bound to the user identity, there is no need to re-authorize even when the participating party environment changes, which helps to ensure the efficiency of resource sharing. In addition, the owner of the NFT can also transfer the NFT to other identities based on the transferable attribute of the NFT, thereby transferring the resource permission. In this way, it can improve the flexibility of resource sharing.

[0088] Other features and advantages of the present disclosure will be described in detail in the subsequent specific implementation part. Brief Description of the Drawings

[0089] The drawings are used to provide a further understanding of the present disclosure, and constitute a part of the specification. Together with the following specific implementation, they are used to explain the present disclosure, but do not constitute a limitation to the present disclosure. In the drawings:

[0090] Figure 1 is a flowchart of a blockchain-based resource sharing method shown in an exemplary embodiment of the present disclosure.

[0091] Figure 2 is a flowchart of an attribute encryption shown in an exemplary embodiment of the present disclosure.

[0092] Figure 3 is a flowchart of a blockchain-based resource sharing method shown in an exemplary embodiment of the present disclosure.

[0093] Figure 4 is a flowchart of a blockchain-based resource sharing method shown in an exemplary embodiment of the present disclosure.

[0094] Figure 5 It is a flowchart of attribute encryption shown in an exemplary embodiment of the present disclosure.

[0095] Figure 6 It is a block diagram of a blockchain-based resource sharing device shown in an exemplary embodiment of the present disclosure.

[0096] Figure 7 It is a block diagram of an electronic device 700 shown in an exemplary embodiment of the present disclosure. Detailed implementation manners

[0097] The following will describe the detailed implementation manners of the present disclosure in conjunction with the accompanying drawings. It should be understood that the detailed implementation manners described herein are only used to illustrate and explain the present disclosure, and are not used to limit the present disclosure.

[0098] Before introducing the blockchain-based resource sharing method, device, storage medium and electronic device of the present disclosure, the application scenarios of the present disclosure will be introduced first. Each embodiment provided by the present disclosure can be used in resource sharing scenarios, and these resources can be, for example, picture resources, file resources, audio resources, video resources, and so on.

[0099] In some resource sharing scenarios, the resource owner can store the resources in a ciphertext state in the cloud, distributed storage or private storage space. In this resource sharing scenario, the resource owner needs to authorize the access to the resources and transmit the decryption key of the file to the peer in a peer-to-peer (P2P) transmission manner. When the environment of the participants in resource sharing changes (such as the change of the host location, the change of the file storage location, the change of the host permissions, etc.), the original authorization will no longer be valid. In this case, re-authorization is required, resulting in low efficiency of resource sharing.

[0100] Moreover, the security of the authorization credentials of the resources (such as file extraction codes) is relatively low and is prone to leakage. When the authorization credentials are stolen, the resources may be misappropriated, resulting in the loss of control of resource sharing. For the resources circulating in the network, there is no way to determine the attribution permissions. At the same time, the resource sharing transaction process in related scenarios relies heavily on centralized websites, and the circulation records of resources are stored in various centralized institutions, making it difficult to interconnect. The resource records provided by centralized institutions cannot verify the authenticity, so the credibility is relatively low.

[0101] In some scenarios, the resources to be shared can be transmitted in a manner of being encrypted with the public key of the recipient, but this also causes the user side to need to frequently encrypt the files when sharing resources, resulting in a more cumbersome resource sharing process and a higher resource overhead on the user side.

[0102] To this end, the present disclosure provides a blockchain-based resource sharing method applied to a resource owner. Among them, the resource owner can be various stationary or movable computing devices, such as laptops, tablets, servers, and so on. The resource owner can be a node in the blockchain network or a device capable of interacting with the blockchain network.

[0103] Figure 1 is a flowchart of a blockchain-based resource sharing method shown in the present disclosure. Referring to Figure 1 , the method includes:

[0104] In step S11, the target resource to be shared is processed based on the resource key to obtain multiple encrypted sub-resources of the target resource.

[0105] For example, in a possible implementation, the resource owner can pre-generate a resource key, and the resource key can be a symmetric key. The resource owner can encrypt the target resource based on the resource key to obtain an encrypted target resource. In this way, multiple encrypted sub-resources can be obtained by splitting the encrypted target resource. As an example, the encrypted target resource can be split into 3 encrypted sub-resources, namely encrypted sub-resource A, encrypted sub-resource B, and encrypted sub-resource C.

[0106] In a possible implementation, the resource owner can also split the target resource to obtain multiple sub-resources. In this way, the resource owner can encrypt the multiple sub-resources respectively with the resource key to obtain multiple encrypted sub-resources of the target resource.

[0107] In step S12, for each encrypted sub-resource, an NFT corresponding to the encrypted sub-resource is constructed in the blockchain network.

[0108] Among them, the NFT includes the first hash value of the encrypted sub-resource, the target identification information of the target resource, and a hash value list, and the hash value list includes the first hash values of the respective encrypted sub-resources of the target file.

[0109] Continuing with the above example, an NFT for the encrypted sub-resource A can be constructed in the blockchain network to obtain NFT-A. After the construction of NFT-A is completed, it can be stored in the blockchain of the blockchain network. Among them, NFT-A can store the encrypted sub-resource A or the relevant information of the encrypted sub-resource A, such as the hash value of the encrypted sub-resource A, the identification information of the target resource corresponding to the encrypted sub-resource A, the hash value list, and so on. Continuing with the above example, the hash value list may include the first hash value hash(A) of the encrypted sub-resource A, the first hash value hash(B) of the encrypted sub-resource B, and the first hash value hash(C) of the encrypted sub-resource C. The identification information of the target resource may include the token ID of the target file, the hash value of the target resource, the description information of the target resource, the resource category, and so on.

[0110] Similarly, an NFT-B for the encrypted sub-resource B and an NFT-C for the encrypted sub-resource C can be constructed.

[0111] It should be noted that for the same encrypted sub-resource, multiple NFTs can be constructed. Among them, multiple NFTs of the same encrypted sub-resource can be distinguished by the identification field. In this way, the resource owner can authorize the encrypted sub-resource to each of the resource requesters by trading the multiple NFTs to different resource requesters.

[0112] In addition, the NFT can also include the owner information of the NFT. As an example, in the initial state, the identity information of the file owner can be maintained in the NFT as the owner information of the NFT.

[0113] In some implementation scenarios, an NFT smart contract can also be deployed in the blockchain network, and the NFT can be constructed and maintained through the NFT smart contract. As an example, the NFT smart contract can include the following fields:

[0114] {

[0115] Token ID

[0116] Encrypted sub-resource hash value

[0117] Resource hash value

[0118] Hash value list

[0119] Resource category

[0120] Resource description

[0121] First decryption value

[0122] Target random number

[0123] URL (Uniform Resource Location, Uniform Resource Locator)

[0124] The owner of the NFT

[0125] }

[0126] In this way, when calling the NFT smart contract, the resource owner can input the above field information to construct or maintain the NFT.

[0127] In step S13, the target resource is encrypted by multiple encrypted sub-resources so that the target resource can be decrypted when having the NFTs of each encrypted sub-resource of the target resource.

[0128] Figure 2 is a flowchart of an attribute encryption shown in the present disclosure. Referring to Figure 2 , encrypting the target resource by multiple encrypted sub-resources (step S13) may include:

[0129] In step S131, the first hash value of the first encrypted sub-resource is encrypted by the resource key to obtain the first encrypted hash value, and the first encrypted sub-resource is any one of the multiple encrypted sub-resources.

[0130] Continuing with the above example, hash(A), hash(B), and hash(C) can be encrypted by the resource key respectively to obtain m-hash(A), m-hash(B), and m-hash(C).

[0131] After calculating the first encrypted hash value, the resource owner can save the first encrypted hash value to the private data space. When there are multiple owners of the resource, each resource owner can save the first encrypted hash value calculated based on the encrypted sub-resource they own.

[0132] In step S132, the first polynomial is determined according to the Lagrange interpolation method and the first encrypted hash values of each encrypted sub-resource.

[0133] Here, each first encrypted hash value can be used as a value point for Lagrange interpolation. The construction method of the value points is not limited in the present disclosure. As an example, the value points can be {encrypted sub-resource number (such as the number in the hash value list), first encrypted hash value}. In this way, based on the above example, the value points {encrypted sub-resource A number, m-hash(A)}, {encrypted sub-resource B number, m-hash(B)}, and {encrypted sub-resource C number, m-hash(C)} can be obtained.

[0134] Through Lagrange interpolation, a first polynomial of degree n - 1 can be constructed from n value points.

[0135] In step S133, the resource key is input into the first polynomial to obtain a first decryption value.

[0136] For example, the resource key can be used as the variable value (x) of the first polynomial, so as to calculate the first decryption value (y1).

[0137] In step S134, the first decryption value is maintained in the NFT of the first encrypted sub-resource.

[0138] It should be noted that for the above method embodiments, for the sake of simple description, they are all expressed as a series of action combinations. However, those skilled in the art should know that the present disclosure is not limited by the described action sequence.

[0139] For example, in the above embodiment, there is no sequence distinction between the attribute encryption process and the NFT construction process. That is to say, in some embodiments, the first decryption value can be determined first through the Figure 2 shown attribute encryption process, so as to construct an NFT according to the first decryption value. In some embodiments, an NFT can also be constructed first, and after attribute encryption, the relevant first decryption value can be maintained in the NFT. The present disclosure does not limit this.

[0140] In the above technical solution, the target resource to be shared can be processed based on the resource key to obtain multiple encrypted sub-resources of the target resource, and NFTs corresponding to each of the encrypted sub-resources can be constructed in the blockchain network. In addition, the target resource can be attribute-encrypted through the multiple encrypted sub-resources, so that the target resource can be decrypted when having the NFTs of each encrypted sub-resource of the target resource.

[0141] In this way, if the user owns all the NFTs of the target resource, the user obtains the access right to the target resource. That is to say, the above technical solution can be used for trading and authorization of the target file based on NFTs, and realize the integration of the trading process and the authorization process, thereby simplifying the resource sharing process.

[0142] Moreover, the owner information of the NFT is recorded in the NFT, that is, the NFT is bound to the user identity. In this way, it helps to identify the ownership rights of resources. Therefore, compared with the resource authorization method through passwords in the related art, the above-mentioned resource sharing method based on NFT can prevent resources from being misappropriated. And since the NFT is bound to the user identity, there is no need to re-authorize even when the participating party environment changes, which helps to ensure the efficiency of resource sharing. In addition, the owner of the NFT can also transfer the NFT to other identities based on the transferable attribute of the NFT, so as to transfer the resource permissions. In this way, it can improve the flexibility of resource sharing.

[0143] Figure 3 is a flowchart of a blockchain-based resource sharing method shown in the present disclosure. Referring to Figure 3 , the method further includes on the basis of Figure 1 :

[0144] In step S14, a first resource acquisition request is received, and the first resource acquisition request includes resource requester information and target identification information.

[0145] When acquiring the target resource, the resource requester may send the first resource acquisition request to the resource owner, and the first resource acquisition request includes resource requester information and target identification information. Among them, the resource requester information may include the identity information of the resource requester, the blockchain registration public key, etc.

[0146] In step S15, an NFT with the identification information being the target identification information is determined from the NFTs owned by the resource requester to obtain a target NFT.

[0147] Here, the NFTs owned by the resource requester can be obtained by querying the blockchain. In this way, an NFT with the resource identification being consistent with the target identification information can be determined from the queried NFTs to obtain the target NFT.

[0148] In step S16, a hash value set is generated according to the first hash value of the encrypted sub-resource corresponding to the target NFT.

[0149] In step S17, when the hash value set includes each first hash value in the hash value list, a first polynomial is determined according to the Lagrange interpolation method and the first encrypted hash values of the saved encrypted sub-resources.

[0150] Exemplarily, in the case where the target resource is divided into encrypted sub-resource A, encrypted sub-resource B, and encrypted sub-resource C, it is possible to check whether the hash value set includes the first hash value hash(A) of encrypted sub-resource A, the first hash value hash(B) of encrypted sub-resource B, and the first hash value hash(C) of encrypted sub-resource C. That is to say, it is possible to check whether the target NFT includes NFT-A, NFT-B, and NFT-C.

[0151] In the case where the hash value set includes each of the first hash values in the hash value list, the first polynomial can be determined according to the Lagrange interpolation method and the first encrypted hash values of the saved encrypted sub-resources.

[0152] In step S18, the first decryption value is used as the output of the first polynomial, and the resource key is calculated.

[0153] In step S19, the resource key is sent to the resource requester, and the resource key is used by the resource requester to obtain the target resource.

[0154] Here, in a possible implementation, the encrypted sub-resources are maintained in the NFT. In this case, the resource requester can decrypt the encrypted sub-resources in the NFT to obtain the target resource.

[0155] In a possible implementation, the encrypted sub-resources are maintained by the resource owner. In this case, the resource requester can obtain the encrypted sub-resources from the resource owner based on the resource key and decrypt them to obtain the target resource.

[0156] As an example, in some implementation scenarios, the target random number is also maintained in the NFT, and the method further includes:

[0157] Receiving a second resource acquisition request sent by the resource requester, the second resource acquisition request including the target identification information and a first encrypted random number, the first encrypted random number being encrypted by the resource requester based on the resource key for the target random number;

[0158] Encrypting the target random number based on the local resource key to obtain a second encrypted random number;

[0159] In the case where the first encrypted random number and the second encrypted random number are the same, sending the encrypted sub-resource corresponding to the target identification information owned by the resource owner to the resource requester.

[0160] That is to say, the resource owner can set the extraction code for the encrypted sub-resource, and the extraction code is obtained by encrypting the target random number with the resource key. In this way, after obtaining the resource key, the resource requester can obtain the target random number from the NFT, and encrypt the target random number based on the resource key to obtain the first encrypted random number. And send a second resource acquisition request including the first encrypted random number and the target identification information to the resource requester.

[0161] The resource owner can, in response to the second resource acquisition request, determine the target resource requested by the resource requester based on the target identification information. And encrypt the target random number in the NFT of the target resource based on the local resource key to obtain the second encrypted random number.

[0162] In this way, when the first encrypted random number is consistent with the second encrypted random number, the resource owner can determine the correctness of the resource key and send the encrypted sub-resource corresponding to the target identification information owned by the resource owner to the resource requester.

[0163] In some implementation scenarios, the resource owner can also save the encrypted sub-resource to the cloud server, maintain the cloud address URL of the encrypted sub-resource in the NFT, and set the extraction code for the encrypted sub-resource, where the extraction code is obtained by encrypting the target random number with the resource key. In this case, the resource requester can initiate a resource acquisition request to the cloud server based on the URL in the NFT, and the cloud server verifies the correctness of the resource key.

[0164] In this way, the process of sending and verifying resources can be transferred to the cloud server for processing, thereby reducing the local communication overhead of the resource owner during the resource sharing process.

[0165] In a possible implementation manner, attribute encryption can also be performed based on the attribute set, so that resource requesters meeting the predetermined attributes can obtain the target resource.

[0166] Figure 4 is a flowchart of a blockchain-based resource sharing method shown in the present disclosure, and the method is applied to a resource owner. Refer to Figure 4 and the method includes:

[0167] In step S41, the target resource to be shared is processed based on the resource key to obtain multiple encrypted sub-resources of the target resource.

[0168] In step S42, for each encrypted sub-resource, an NFT corresponding to the encrypted sub-resource is constructed in the blockchain network.

[0169] In step S43, the target resource is encrypted by multiple encrypted sub-resources so that the target resource can be decrypted when the NFTs of the respective encrypted sub-resources of the target resource are available.

[0170] For the implementation manners of steps S41 to S43, please refer to the above-described Figure 1 embodiment description. For the sake of brevity of the specification, the present disclosure will not elaborate on this.

[0171] In step S44, a first attribute set of the requesting party to be authorized is determined.

[0172] Here, the first attribute set may include multiple attributes. For example, the first attribute set may include an identity attribute (such as a regulatory party), a permission attribute (such as a regulatory permission), and so on.

[0173] In step S45, the first attribute set is maintained in the NFT;

[0174] In step S46, the target resource is encrypted by the first attribute set so that a resource requester whose attribute set matches the first attribute set can obtain the target resource.

[0175] Figure 5 is a flowchart of an attribute encryption shown in the present disclosure. Refer to Figure 5 , the encrypting the target resource by the first attribute set so that a resource requester whose attribute set matches the first attribute set can obtain the target resource (step S46) includes:

[0176] In step S461, a second hash value of a target attribute is calculated, where the target attribute is any attribute in the first attribute set.

[0177] In step S462, the second hash value is encrypted by a resource key to obtain a second encrypted hash value.

[0178] Continuing with the above example, when the first attribute set includes an identity attribute and a permission attribute, the second hash value of the identity attribute and the second hash value of the permission attribute can be calculated. In this way, the second hash value of the identity attribute can be encrypted by the resource key to obtain the second encrypted hash value of the identity attribute. The resource owner can also encrypt the second hash value of the permission attribute by the resource key to obtain the second encrypted hash value of the permission attribute.

[0179] In step S463, a second polynomial is determined according to the Lagrange interpolation method and the second encrypted hash values of the respective attributes in the first attribute set.

[0180] Here, each second encrypted hash value can be used as a value-taking point for Lagrange interpolation. The present disclosure does not limit the construction method of the value-taking points. As an example, the value-taking points can be {attribute number (such as the number in the first attribute set of the NFT), second encrypted hash value}. In this way, through Lagrange interpolation, a second polynomial of degree n - 1 can be constructed from n value-taking points.

[0181] In step S464, the resource key is input into the second polynomial to obtain a second decryption value.

[0182] For example, the resource key can be used as the variable value (x) of the second polynomial, so as to calculate the second decryption value (y2).

[0183] In step S465, the second decryption value is maintained in the NFT.

[0184] It should be noted that for the above method embodiments, for the sake of simple description, they are all expressed as a series of action combinations. However, those skilled in the art should know that the present disclosure is not limited by the described action sequence.

[0185] For example, in the above embodiments, there is no sequence preference between the attribute encryption process and the NFT construction process. That is to say, in some embodiments, the second decryption value can be determined first through the Figure 5 shown attribute encryption process, so as to construct the NFT according to the second decryption value. In some embodiments, the NFT can also be constructed first, and after attribute encryption, the relevant second decryption value is maintained in the NFT. The present disclosure does not limit this.

[0186] The above technical solution can enable resource requesters who meet the corresponding attributes to obtain the resource acquisition permission by encrypting the target resource based on the attribute set. In this way, batch authorization can be performed on resource requesters with specified attributes, thereby improving the speed of resource sharing. In addition, the authorization method based on the attribute set also enables resource requesters who meet the attribute conditions to directly access the resources without obtaining the NFT corresponding to the resources. Therefore, the above technical solution is beneficial for the supervisor to supervise the resource circulation process (the supervisor does not need to purchase and obtain the NFT). At the same time, the authorization method based on the attribute set also enables resource requesters located in different blockchain networks to request resources through cross-chain methods, thereby realizing resource authorization between multiple blockchain networks, and further achieving the effect of improving the flexibility of resource authorization.

[0187] In a possible implementation manner, the method further includes:

[0188] Receive a third resource acquisition request, where the third resource acquisition request includes the target identification information and the distributed digital identity of the resource requester. When acquiring the target resource, the resource requester may send the second resource acquisition request to the resource owner, and the second resource acquisition request includes the distributed digital identity of the resource requester and the target identification information.

[0189] In response to the third resource acquisition request, the resource owner may send an identity acquisition request to the distributed digital identity blockchain network, and the identity acquisition request includes the distributed digital identity.

[0190] After receiving the identity acquisition request, the distributed digital identity blockchain network may respond to the identity acquisition request. For example, in some implementation scenarios, the identity acquisition request may further include a private key signature generated by the resource requester according to the target private key, and the target private key is the private key in the identity key pair registered by the resource requester in the digital identity blockchain network. The distributed digital identity blockchain network may verify the private key signature according to the public key in the identity key pair registered by the resource requester in the digital identity blockchain network. In the case of successful verification, send the digital identity credential corresponding to the distributed digital identity to the resource owner, and the digital identity credential includes the second attribute set corresponding to the distributed digital identity.

[0191] The resource owner may receive the digital identity credential sent by the distributed digital identity blockchain network and match the second attribute set with the first attribute set to determine whether the resource requester has the attributes included in the first attribute set.

[0192] When the second attribute set matches the first attribute set, the resource owner may determine the second polynomial according to the Lagrange interpolation method and the saved second encrypted hash value; use the second decryption value as the output of the second polynomial to calculate the resource key; send the resource key to the resource requester, and the resource key is used for the resource requester to acquire the target resource.

[0193] Here, for the method by which the resource requester acquires the target resource through the resource key, please refer to the description in the above embodiments. For the sake of simplicity of the specification, the present disclosure will not elaborate on this.

[0194] The above technical solution can authorize resources based on the distributed digital identity and NFT. By encrypting the target resource based on the attribute set, it is possible to enable resource requesters who meet the corresponding attributes to obtain the resource acquisition permission. In this way, it is possible to batch-authorize resource requesters with specified attributes, thereby improving the speed of resource sharing.

[0195] In addition, it is worth noting that in some implementation scenarios, a verification smart contract can also be deployed in the blockchain network. In this way, the first resource acquisition request and the third resource acquisition request can be responded to through the verification smart contract. That is to say, in the above embodiments, the response process of the resource owner to the first resource acquisition request and the third resource acquisition request can also be implemented by the deployed verification smart contract, and the present disclosure does not limit this.

[0196] Based on the same inventive concept, the present disclosure also provides a blockchain-based resource sharing device, which is applied to a resource owner. Figure 6 is a block diagram of a blockchain-based resource sharing device shown in the present disclosure. Referring to Figure 6 , the blockchain-based resource sharing device includes:

[0197] A first processing module 601, configured to process a target resource to be shared based on a resource key to obtain a plurality of encrypted sub-resources of the target resource;

[0198] A first construction module 602, configured to construct, for each of the encrypted sub-resources, an NFT corresponding to the encrypted sub-resource in the blockchain network. The NFT includes a first hash value of the encrypted sub-resource, target identification information of the target resource, and a hash value list, and the hash value list includes the first hash values of the respective encrypted sub-resources of the target file;

[0199] A first encryption module 603, configured to perform attribute encryption on the target resource through the plurality of encrypted sub-resources, so that the target resource can be decrypted when the NFTs of all the encrypted sub-resources of the target resource are owned.

[0200] In the above technical solution, the target resource to be shared can be processed based on the resource key to obtain a plurality of encrypted sub-resources of the target resource, and an NFT corresponding to each of the encrypted sub-resources can be constructed in the blockchain network. In addition, the target resource can be subjected to attribute encryption through the plurality of encrypted sub-resources, so that the target resource can be decrypted when the NFTs of all the encrypted sub-resources of the target resource are owned.

[0201] In this way, if the user owns all the NFTs of the target resource, the user obtains the access right to the target resource. That is to say, the above technical solution can perform transactions and authorizations on the target file based on NFTs, and integrate the transaction process and the authorization process, thereby simplifying the resource sharing process.

[0202] Moreover, the NFT records the owner information of the NFT, that is, the NFT is bound to the user identity. In this way, it helps to identify the ownership rights of resources. Therefore, compared with the resource authorization method using passwords in related technologies, the above-mentioned NFT-based resource sharing method can prevent resources from being misappropriated. And since the NFT is bound to the user identity, there is no need to re-authorize even when the participating party environment changes, which helps to ensure the efficiency of resource sharing. In addition, the owner of the NFT can also transfer the NFT to other identities based on the transferable attribute of the NFT, thereby transferring the resource permissions. In this way, it can improve the flexibility of resource sharing.

[0203] Optionally, the first encryption module includes:

[0204] The first encryption sub-module is used to encrypt the first hash value of the first encrypted sub-resource with the resource key to obtain a first encrypted hash value, and the first encrypted sub-resource is any one of the multiple encrypted sub-resources;

[0205] The first determination sub-module is used to determine a first polynomial according to Lagrange interpolation method and the first encrypted hash values of each encrypted sub-resource;

[0206] The first input sub-module is used to input the resource key into the first polynomial to obtain a first decryption value;

[0207] The first execution sub-module is used to maintain the first decryption value in the NFT of the first encrypted sub-resource.

[0208] Optionally, it includes:

[0209] The first receiving module is used to receive a first resource acquisition request, and the first resource acquisition request includes resource requester information and the target identification information;

[0210] The first determination module is used to determine the NFT with the identification information being the target identification information from the NFTs owned by the resource requester to obtain a target NFT;

[0211] The first generation module is used to generate a hash value set according to the first hash value of the encrypted sub-resource corresponding to the target NFT;

[0212] The second determination module is used to determine a first polynomial according to Lagrange interpolation method and the first encrypted hash values of each saved encrypted sub-resource when the hash value set includes each first hash value in the hash value list;

[0213] The first calculation module is used to calculate the resource key by using the first decryption value as the output of the first polynomial.

[0214] A first sending module, configured to send the resource key to the resource requester, where the resource key is used by the resource requester to obtain the target resource.

[0215] Optionally, a target random number is further maintained in the NFT, and the apparatus further includes:

[0216] A second receiving module, configured to receive a second resource acquisition request sent by a resource requester, where the second resource acquisition request includes the target identification information and a first encrypted random number, and the first encrypted random number is obtained by the resource requester encrypting the target random number based on the resource key;

[0217] A second encryption module, configured to encrypt the target random number based on the local resource key to obtain a second encrypted random number;

[0218] A second sending module, configured to, when the first encrypted random number is the same as the second encrypted random number, send an encrypted sub-resource corresponding to the target identification information owned by the resource owner to the resource requester.

[0219] Optionally, it further includes:

[0220] A third determination module, configured to determine a first attribute set of a requestor to be authorized;

[0221] An attribute maintenance module, configured to maintain the first attribute set in the NFT;

[0222] A third encryption module, configured to perform attribute encryption on the target resource through the first attribute set, so that a resource requester whose attribute set matches the first attribute set can obtain the target resource.

[0223] Optionally, the third encryption module includes:

[0224] A first calculation sub-module, configured to calculate a second hash value of a target attribute, where the target attribute is any attribute in the first attribute set;

[0225] A second encryption sub-module, configured to encrypt the second hash value through the resource key to obtain a second encrypted hash value;

[0226] A second determination sub-module, configured to determine a second polynomial according to Lagrange interpolation and the second encrypted hash values of the respective attributes in the first attribute set;

[0227] A second input sub-module, configured to input the resource key into the second polynomial to obtain a second decryption value;

[0228] A second execution sub-module, configured to maintain the second decryption value in the NFT.

[0229] Optionally, it includes:

[0230] A third receiving module, configured to receive a third resource acquisition request, where the third resource acquisition request includes the target identification information and the distributed digital identity of the resource requester;

[0231] A third sending module, configured to send an identity acquisition request to the distributed digital identity blockchain network, where the identity acquisition request includes the distributed digital identity;

[0232] A fourth receiving module, configured to receive a digital identity credential sent by the distributed digital identity blockchain network, where the digital identity credential includes a second attribute set corresponding to the distributed digital identity;

[0233] A matching module, configured to match the second attribute set and the first attribute set;

[0234] A fourth determination module, configured to determine a second polynomial according to Lagrange interpolation and the saved second encrypted hash value when the second attribute set matches the first attribute set;

[0235] A second calculation module, configured to calculate a resource key by using the second decryption value as the output of the second polynomial;

[0236] A fourth sending module, configured to send the resource key to the resource requester, where the resource key is used by the resource requester to acquire the target resource.

[0237] Regarding the device in the above embodiments, the specific manners in which each module performs operations have been described in detail in the embodiments related to the method, and will not be elaborated herein.

[0238] The present disclosure also provides a non-transitory computer-readable storage medium, on which a computer program is stored, and when the program is executed by a processor, the steps of the resource sharing method provided by the present disclosure are implemented.

[0239] The present disclosure also provides an electronic device, including:

[0240] A memory, on which a computer program is stored;

[0241] A processor, configured to execute the computer program in the memory to implement the steps of the resource sharing method provided by the present disclosure.

[0242] Figure 7 is a block diagram of an electronic device 700 shown according to an exemplary embodiment. AsFigure 7 As shown, the electronic device 700 may include: a processor 701 and a memory 702. The electronic device 700 may also include one or more of a multimedia component 703, an input / output (I / O) interface 704, and a communication component 705.

[0243] Among them, the processor 701 is used to control the overall operation of the electronic device 700 to complete all or part of the steps in the above blockchain-based resource sharing method. The memory 702 is used to store various types of data to support the operation of the electronic device 700. These data may include, for example, instructions for any application or method operating on the electronic device 700, as well as application-related data, such as contact data, received and sent messages, pictures, audio, video, and so on. The memory 702 may be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as Static Random Access Memory (SRAM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Erasable Programmable Read-Only Memory (EPROM), Programmable Read-Only Memory (PROM), Read-Only Memory (ROM), magnetic memory, flash memory, a magnetic disk, or an optical disc. The multimedia component 703 may include a screen and an audio component. The screen may be, for example, a touch screen, and the audio component is used to output and / or input audio signals. For example, the audio component may include a microphone for receiving external audio signals. The received audio signal may be further stored in the memory 702 or sent through the communication component 705. The audio component also includes at least one speaker for outputting audio signals. The I / O interface 704 provides an interface between the processor 701 and other interface modules, and the other interface modules may be a keyboard, a mouse, buttons, etc. These buttons may be virtual buttons or physical buttons. The communication component 705 is used for wired or wireless communication between the electronic device 700 and other devices. Wireless communication, such as Wi-Fi, Bluetooth, Near Field Communication (NFC), 2G, 3G, 4G, NB-IOT, eMTC, or other 5G, etc., or a combination of one or more of them, is not limited herein. Accordingly, the communication component 705 may include: a Wi-Fi module, a Bluetooth module, an NFC module, and so on.

[0244] In one exemplary embodiment, the electronic device 700 may be implemented by one or more application specific integrated circuits (ASICs), digital signal processors (DSPs), digital signal processing devices (DSPDs), programmable logic devices (PLDs), field programmable gate arrays (FPGAs), controllers, microcontrollers, microprocessors, or other electronic components, and is used to execute the above-mentioned blockchain-based resource sharing method.

[0245] In another exemplary embodiment, a computer-readable storage medium including program instructions is further provided. When the program instructions are executed by a processor, the steps of the above-mentioned blockchain-based resource sharing method are implemented. For example, the computer-readable storage medium may be the above-mentioned memory 702 including program instructions, and the above-mentioned program instructions may be executed by the processor 701 of the electronic device 700 to complete the above-mentioned blockchain-based resource sharing method.

[0246] In another exemplary embodiment, a computer program product is further provided. The computer program product includes a computer program that can be executed by a programmable device, and the computer program has a code part for executing the above-mentioned blockchain-based resource sharing method when executed by the programmable device.

[0247] The preferred embodiments of the present disclosure have been described in detail above in conjunction with the accompanying drawings. However, the present disclosure is not limited to the specific details in the above embodiments. Within the scope of the technical concept of the present disclosure, various simple modifications can be made to the technical solutions of the present disclosure, and these simple modifications all fall within the protection scope of the present disclosure.

[0248] In addition, it should be noted that, in the above specific embodiments, the various specific technical features described can be combined in any suitable manner without contradiction. To avoid unnecessary repetition, the present disclosure will not separately describe various possible combination manners.

[0249] Furthermore, any combination can be made between various different embodiments of the present disclosure as long as it does not violate the idea of the present disclosure, and it should also be regarded as the content disclosed by the present disclosure.

Claims

1. A resource sharing method based on blockchain, characterized in that, Applied to the resource owner, the method includes: Processing the target resource to be shared based on the resource key to obtain multiple encrypted sub - resources of the target resource; For each of the encrypted sub - resources, constructing a non - fungible token (NFT) corresponding to the encrypted sub - resource in the blockchain network. The NFT includes the first hash value of the encrypted sub - resource, the target identification information of the target resource, and a hash value list. The hash value list includes the first hash values of all encrypted sub - resources of the target resource; Performing attribute encryption on the target resource through the multiple encrypted sub - resources, so that the target resource can be decrypted when having the NFTs of all encrypted sub - resources of the target resource; The performing attribute encryption on the target resource through the multiple encrypted sub - resources includes: Encrypting the first hash value of the first encrypted sub - resource with the resource key to obtain a first encrypted hash value. The first encrypted sub - resource is any one of the multiple encrypted sub - resources; Determining a first polynomial according to Lagrange interpolation method and the first encrypted hash values of all encrypted sub - resources; Inputting the resource key into the first polynomial to obtain a first decryption value; Maintaining the first decryption value in the NFT of the first encrypted sub - resource.

2. The method according to claim 1, characterized in that, Includes: Receiving a first resource acquisition request, which includes resource requester information and the target identification information; Determining the NFT with the identification information being the target identification information from the NFTs owned by the resource requester to obtain a target NFT; Generating a hash value set according to the first hash values of the encrypted sub - resources corresponding to the target NFT; When the hash value set includes all the first hash values in the hash value list, determining a first polynomial according to Lagrange interpolation method and the first encrypted hash values of all saved encrypted sub - resources; Calculating the resource key by taking the first decryption value as the output of the first polynomial; Sending the resource key to the resource requester, and the resource key is used for the resource requester to obtain the target resource.

3. The method according to claim 2, characterized in that, The target random number is also maintained in the NFT, and the method further includes: Receiving a second resource acquisition request sent by the resource requester. The second resource acquisition request includes the target identification information and a first encrypted random number, and the first encrypted random number is encrypted by the resource requester based on the resource key for the target random number; Encrypting the target random number based on the local resource key to obtain a second encrypted random number; When the first encrypted random number is the same as the second encrypted random number, sending the encrypted sub - resource corresponding to the target identification information owned by the resource owner to the resource requester.

4. The method according to any one of claims 1 to 3, characterized in that, Further includes: Determining a first attribute set of the requestor to be authorized; Maintaining the first attribute set in the NFT; Performing attribute encryption on the target resource through the first attribute set, so that the resource requester with an attribute set matching the first attribute set can obtain the target resource.

5. The method according to claim 4, characterized in that, Performing attribute encryption on the target resource through the first attribute set includes: Calculating a second hash value of a target attribute, where the target attribute is any attribute in the first attribute set; Encrypting the second hash value with the resource key to obtain a second encrypted hash value; Determining a second polynomial according to Lagrange interpolation method and the second encrypted hash values of the respective attributes in the first attribute set; Inputting the resource key into the second polynomial to obtain a second decryption value; Maintaining the second decryption value in the NFT.

6. The method according to claim 5, characterized in that, Including: Receiving a third resource acquisition request, where the third resource acquisition request includes the target identification information and the distributed digital identity of the resource requester; Sending an identity acquisition request to the distributed digital identity blockchain network, where the identity acquisition request includes the distributed digital identity; Receiving a digital identity credential sent by the distributed digital identity blockchain network, where the digital identity credential includes a second attribute set corresponding to the distributed digital identity; Matching the second attribute set with the first attribute set; In the case where the second attribute set matches the first attribute set, determining a second polynomial according to Lagrange interpolation method and the saved second encrypted hash values; Using the second decryption value as the output of the second polynomial to calculate and obtain a resource key; Sending the resource key to the resource requester, where the resource key is used by the resource requester to acquire the target resource.

7. A resource sharing device based on blockchain, characterized in that, Applied to the resource owner, the device includes: A first processing module, configured to process the target resource to be shared based on the resource key to obtain multiple encrypted sub-resources of the target resource; A first construction module, configured to construct, for each encrypted sub-resource, an NFT corresponding to the encrypted sub-resource in the blockchain network, where the NFT includes a first hash value of the encrypted sub-resource, the target identification information of the target resource, and a hash value list, and the hash value list includes the first hash values of the respective encrypted sub-resources of the target resource; A first encryption module, configured to perform attribute encryption on the target resource through the multiple encrypted sub-resources, so that the target resource can be decrypted in the case of having the NFTs of the respective encrypted sub-resources of the target resource; The first encryption module includes: A first encryption sub-module, configured to encrypt the first hash value of a first encrypted sub-resource with the resource key to obtain a first encrypted hash value, where the first encrypted sub-resource is any encrypted sub-resource in the multiple encrypted sub-resources; A first determination sub-module, configured to determine a first polynomial according to Lagrange interpolation method and the first encrypted hash values of the respective encrypted sub-resources; A first input sub-module, configured to input the resource key into the first polynomial to obtain a first decryption value; A first execution sub-module, configured to maintain the first decryption value in the NFT of the first encrypted sub-resource.

8. A non - temporary computer - readable storage medium, on which a computer program is stored, characterized in that, When the program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 6.

9. An electronic device, characterized in that, Including: A memory, on which a computer program is stored; A processor for executing the computer program in the memory to implement the steps of the method according to any one of claims 1 to 6.

Images