A data management method, device and equipment based on a blockchain network

Abstract

Embodiments of the present specification disclose a data management method, device and equipment based on a blockchain network. The scheme can include: a user can use a blockchain network and a personal target verifiable statement to store target data generated by the user in the process of using a first application in at least one data storage mechanism, and subsequently, when the user needs to use the target data, the user can use the blockchain network to determine the first communication address information of the target data storage mechanism that can provide the target data, so as to obtain the target data from the target data storage mechanism by using the first communication address information and the target verifiable statement.

Description

Technical Field

[0001] This application relates to the field of blockchain technology, and in particular to a data management method, apparatus and device based on a blockchain network. Background Technology

[0002] Previously, data was primarily considered information. However, with the deep integration of data and the real economy, the integration of online and offline channels, and the development of technologies such as fintech and digital currencies, data increasingly represents value. The concept of "data as an asset" has gained widespread acceptance, leading to a greater emphasis on data assets. Currently, people typically generate substantial amounts of data assets while using various applications. These data assets are usually stored, managed, and used by the service providers of these applications, which not only affects the security of users' data assets but also creates inconvenience for users in managing their personal data assets across different applications.

[0003] Therefore, how to enable users to manage their personal data assets securely and conveniently has become an urgent technical problem to be solved. Summary of the Invention

[0004] This specification provides a data management method, apparatus, and device based on a blockchain network, enabling users to manage their personal data assets securely and conveniently.

[0005] To solve the above-mentioned technical problems, the embodiments in this specification are implemented as follows:

[0006] This specification provides an embodiment of a data management method based on a blockchain network, including:

[0007] The terminal device obtains a user's data acquisition request for target data; the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim.

[0008] In response to the data acquisition request, a request to determine a target data storage institution that can provide the target data is sent to the blockchain network;

[0009] Receive the first communication address information of the target data storage institution fed back by the blockchain network;

[0010] Based on the target verifiable claim and the first communication address information, the target data is obtained from the target data storage institution.

[0011] This specification provides an embodiment of a data management method based on a blockchain network, including:

[0012] The blockchain network receives a request sent by a terminal device to determine a target data storage institution that can provide the target data; the request is generated by the terminal device based on a user's data acquisition request for the target data, the target data being a data asset generated by the user during the use of a first application, and the target data being stored by the user at at least one data storage institution based on the blockchain network and a target verifiable claim;

[0013] In response to the request, the first communication address information of the target data storage institution is determined;

[0014] Send the first communication address information to the terminal device.

[0015] This specification provides an embodiment of a data management device based on a blockchain network, comprising:

[0016] The first acquisition module is used to enable the terminal device to acquire the user's data acquisition request for target data; the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user in at least one data storage institution based on a blockchain network and a target verifiable claim.

[0017] A request sending module is configured to, in response to the data acquisition request, send a request to the blockchain network to determine a target data storage institution that can provide the target data;

[0018] The receiving module is used to receive the first communication address information of the target data storage institution fed back by the blockchain network;

[0019] The second acquisition module is used to acquire the target data from the target data storage institution based on the target verifiable declaration and the first communication address information.

[0020] This specification provides an embodiment of a data management device based on a blockchain network, comprising:

[0021] The acquisition module is used to enable the blockchain network to acquire a request sent by a terminal device for determining a target data storage institution that can provide target data; the request is generated by the terminal device based on the user's data acquisition request for the target data, the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on the blockchain network and a target verifiable claim;

[0022] The first determining module is configured to determine the first communication address information of the target data storage institution in response to the request;

[0023] The first sending module is used to send the first communication address information to the terminal device.

[0024] This specification provides an embodiment of a data management device based on a blockchain network, comprising:

[0025] At least one processor; and,

[0026] A memory communicatively connected to the at least one processor; wherein,

[0027] The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to:

[0028] Obtain a user's data acquisition request for target data; the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim.

[0029] In response to the data acquisition request, a request to determine a target data storage institution that can provide the target data is sent to the blockchain network;

[0030] Receive the first communication address information of the target data storage institution fed back by the blockchain network;

[0031] Based on the target verifiable claim and the first communication address information, the target data is obtained from the target data storage institution.

[0032] This specification provides an embodiment of a data management device based on a blockchain network. The device is located within the blockchain network and includes:

[0033] At least one processor; and,

[0034] A memory communicatively connected to the at least one processor; wherein,

[0035] The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to:

[0036] The terminal device receives a request from the terminal device to determine a target data storage institution that can provide the target data; the request is generated by the terminal device based on the user's data acquisition request for the target data, the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on the blockchain network and the target verifiable claim;

[0037] In response to the request, the first communication address information of the target data storage institution is determined;

[0038] Send the first communication address information to the terminal device.

[0039] At least one embodiment provided in this specification can achieve the following beneficial effects:

[0040] Users can pre-store target data generated during their use of a first application at at least one data storage institution using a blockchain network and their personal target verifiable claims. Subsequently, when the user needs to access the target data, they can use the blockchain network to determine the first communication address of the target data storage institution that can provide the data, and then use that address and the target verifiable claims to retrieve the data. This solution allows users to manage their data assets generated across various applications in a unified manner using a blockchain network and their personal verifiable claims, improving the convenience of managing personal data assets. Furthermore, the privacy of personal verifiable claims and the tamper-proof and deletion-resistant nature of the blockchain network also enhance the security of personal data asset management, thus protecting user rights. Attached Figure Description

[0041] To more clearly illustrate the technical solutions in the embodiments or prior art of this specification, the drawings used in the description of the embodiments or prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0042] Figure 1 A flowchart illustrating a data management method based on a blockchain network, provided as an embodiment of this specification;

[0043] Figure 2 A flowchart illustrating another data management method based on a blockchain network provided in the embodiments of this specification;

[0044] Figure 3 The embodiments provided in this specification correspond to Figure 1 and Figure 2 A swimlane flowchart illustrating a blockchain-based data management method.

[0045] Figure 4 The embodiments provided in this specification correspond to Figure 1 A schematic diagram of a data management device based on a blockchain network;

[0046] Figure 5 The embodiments provided in this specification correspond to Figure 2 A schematic diagram of a data management device based on a blockchain network;

[0047] Figure 6 The embodiments provided in this specification correspond to Figure 1 A schematic diagram of a data management device based on a blockchain network;

[0048] Figure 7 The embodiments provided in this specification correspond to Figure 2 A schematic diagram of the structure of a data management device based on a blockchain network. Detailed Implementation

[0049] To make the objectives, technical solutions, and advantages of one or more embodiments of this specification clearer, the technical solutions of one or more embodiments of this specification will be clearly and completely described below in conjunction with specific embodiments and corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of this specification, and not all of them. Based on the embodiments in this specification, all other embodiments obtained by those skilled in the art without creative effort are within the protection scope of one or more embodiments of this specification.

[0050] The technical solutions provided in the various embodiments of this specification are described in detail below with reference to the accompanying drawings.

[0051] In existing technologies, data assets can refer to data resources, recorded physically or electronically, that are owned or controlled by an individual or enterprise and may generate future revenue for that individual or enterprise. Currently, data generated by users while using applications may constitute their data assets. These data assets are typically stored on the servers of various application service providers. This affects the privacy, trustworthiness, and security of users' data assets. Furthermore, because different application service providers typically cannot share data, users need to manage their personal data assets across different applications separately. This results in fragmented distribution and management of users' data assets, impacting the convenience of managing their personal data assets.

[0052] To address the shortcomings of existing technologies, this solution provides the following embodiments:

[0053] Figure 1 This is a flowchart illustrating a data management method based on a blockchain network, provided as an embodiment of this specification. From a programming perspective, the executor of this process can be a user's terminal device, or an application installed on the user's terminal device. Figure 1As shown, the process may include the following steps:

[0054] Step 102: The terminal device obtains the user's data acquisition request for the target data; the target data is the data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim.

[0055] In this embodiment of the specification, after a user generates target data that can be used as the user's data asset during the use of the first application, the user can use the blockchain network and the user's target verifiable declaration to store the target data in at least one data storage institution. Then, when the user needs to use the target data again, a data retrieval request can be generated to request the target data stored in the data storage institution.

[0056] In blockchain, a blockchain can be understood as a data chain composed of multiple blocks stored sequentially. Each block's header contains a timestamp of the current block, the hash value of the previous block, and the hash value of the current block's information. This enables mutual verification between blocks, forming an immutable blockchain. Each block can be understood as a data unit (a unit for storing data). As a decentralized database, a blockchain is a chain of data blocks linked together using cryptographic methods. Each data block contains information about a network transaction, used to verify the validity of the information (anti-counterfeiting) and generate the next block. The chain formed by linking blocks end-to-end constitutes the blockchain. Modifying data within a block requires modifying the content of all subsequent blocks and updating the backup data of all nodes in the blockchain network. Therefore, blockchains are difficult to tamper with or delete, and once data is stored on the blockchain, it serves as a reliable method for maintaining content integrity.

[0057] A verifiable claim (Claim) is a descriptive statement issued by an issuer endorsing certain attributes of a user, accompanied by the issuer's digital signature; it can be considered a digital certificate. This allows users to use the verifiable claim to prove the trustworthiness of certain attributes of themselves to other entities (individuals, organizations, specific things, etc.). Based on this, a target verifiable claim can be a verifiable claim generated by an identity verification agency after verifying a user's target identity information. During the storage of target data, users can use the target verifiable claim to prove the trustworthiness of their personal identity information, enabling the blockchain network and data storage institution to determine the identity information of the target data's owner.

[0058] The types of target data generated by users during the use of the first application can be varied, and the types of target data that users can generate are also different for different types of first applications. For example, if the first application is a short video social software, the target data may include video data, audio data, etc. created by the user. Or, if the first application is a social media platform, the target data may include article data, image data, etc. that the user needs to publish. In addition, target data may also include basic user information, user transaction information, etc., without specific limitations.

[0059] Step 104: In response to the data acquisition request, send a request to the blockchain network to determine a target data storage institution that can provide the target data.

[0060] In the embodiments of this specification, since the user's target data may be stored in multiple data storage institutions, but the efficiency and conditions of different data storage institutions in providing the target data to the user may be inconsistent, in order to improve the experience of obtaining the target data, the user can first request the blockchain network to determine the data storage institution that can currently provide the target data to the user as the target data storage institution. Subsequently, the user can obtain the target data from any one or more target data storage institutions.

[0061] Step 106: Receive the first communication address information of the target data storage institution fed back by the blockchain network.

[0062] In the embodiments described in this specification, after the blockchain network determines the target data storage institution, it can send the first communication address information of the target data storage institution to the user so that the user can communicate and interact with the target data storage institution through the first communication address information, thereby obtaining the target data.

[0063] The first communication address information of the target data storage institution can be communication address information that can be used to establish a communication connection with the device at the target data storage institution. In practical applications, the type of this first communication address information can be various, such as Internet Protocol address (IP address) and Uniform Resource Locator (URL) information, etc., without specific limitations.

[0064] Step 108: Based on the target verifiable declaration and the first communication address information, obtain the target data from the target data storage institution.

[0065] In this embodiment of the specification, in order to prevent others from stealing the user's target data and affecting the security of the user's data assets, the user needs to use the target verifiable statement used when storing the target data to prove to the target data storage institution that they have ownership or right to use the target data in order to obtain the target data from the target data storage institution.

[0066] Figure 1 The proposed method allows users to pre-store target data generated during their use of a first application at at least one data storage institution using a blockchain network and their personal target verifiable claims. Subsequently, when the user needs to access the target data, they can use the blockchain network to determine the first communication address of the target data storage institution that can provide the data, and then use that address and the target verifiable claims to retrieve the data. This scheme allows users to manage their data assets generated across various applications in a unified manner using a blockchain network and their personal verifiable claims, improving the convenience of managing personal data assets. Furthermore, the privacy of personal verifiable claims and the tamper-proof and deletion-resistant nature of the blockchain network also enhance the security of personal data asset management, thus protecting user rights.

[0067] based on Figure 1 In addition to the method described in the embodiments of this specification, some specific implementation schemes of the method are also provided, which will be described below.

[0068] To facilitate understanding, the implementation methods for users to store target data in various data storage institutions will be explained.

[0069] Specifically, before step 102: obtaining the user's data retrieval request for the target data, it may also include:

[0070] Obtain the data storage request generated by the user through the first application; the data storage request is used to request that the target data be stored at the data storage institution based on the blockchain network and the target verifiable statement; the target verifiable statement is a verifiable statement generated by the target identity verification institution after the target identity information has been verified.

[0071] Determine whether the stated target verifiable claim exists to obtain the first determination result.

[0072] If the first judgment result indicates that the target verifiable declaration exists, then it is determined whether the user has the permission to use the target verifiable declaration, and a second judgment result is obtained.

[0073] If the second determination result indicates that the user has the right to use the target verifiable claim, then based on the blockchain network and the target verifiable claim, the target data is stored at the data storage institution.

[0074] In the embodiments described in this specification, the user's terminal device may be equipped with a first application and a target application for managing the user's data assets. Figure 1 The specific steps of the method can be performed by the target application. Specifically, the first application may be equipped with a Software Development Kit (SDK) for communicating and interacting with the target application. This allows users to use the target application to generate, store, and manage their personal target verifiable claims, interact with the blockchain network and data storage institutions to store the target data generated by the first application in the data storage institution, and retrieve the target data already stored in the data storage institution.

[0075] In practical applications, to enhance the security of user data asset management, the target application can run in a Trusted Execution Environment (TEE) on the terminal device. Alternatively, all verifiable user claims and private data such as user private keys can be stored in the TEE. This TEE can be implemented using software technology or a hardware-based trusted chip; there are no specific limitations.

[0076] In this embodiment of the specification, the identity verification authority can refer to an authoritative organization capable of authenticating and endorsing the identity of a user. The identity verification authority can provide endorsement and authentication by issuing verifiable statements to users. In practical applications, depending on the identity verification authority issuing the verifiable statement, the identity information used by the user when generating the verifiable statement, and the verification method employed by the identity verification authority when verifying the user's identity, a user can have multiple verifiable statements.

[0077] Therefore, users can specify the target verifiable claim to be used when storing target data. Specifically, the data storage request generated by the user through the operation of the first application can carry: the category information of the target identity information used to generate the target verifiable claim, the unique identifier information of the target identity information, the unique identifier information of the target identity verification agency that generates the target verifiable claim, the data asset category to which the target data belongs, the index information of the target data (i.e., the identifier information of the data asset), and the target data to be stored, etc.

[0078] The target identity information can include categories such as ID cards, passports, and application accounts. Its unique identifier can include ID card numbers, passport numbers, and application account information. The unique identifier of the target identity verification agency can be its decentralized identity identifier (DID) on the blockchain network. The data asset category to which the target data belongs can be video assets or image assets in the first application. The index information of the target data (i.e., the data asset identifier) ​​can be a digest value obtained by hashing the target data. The target data to be stored can be data obtained by converting the user's target data to a different format (e.g., binary Hex format data). No specific limitations are imposed on the above information.

[0079] In this embodiment of the specification, after receiving a data storage request generated by the first application, the target application needs to determine whether the user possesses the target verifiable claim specified by the user. For example, if the target application finds the target verifiable claim stored in the trusted execution environment, it can determine that the user possesses the target verifiable claim, thereby generating a first determination result indicating the existence of the target verifiable claim. Specifically, since the verifiable claim file usually contains category information of the target identity information used to generate the verifiable claim, unique identifier information of the target identity information, unique identifier information of the identity verification agency that generated the verifiable claim, etc., the target application can perform a consistency comparison between the information carried in the data storage request and the information in each verifiable claim file stored in the trusted execution environment. If a verifiable claim that passes the consistency comparison is found, it can be determined as the target verifiable claim.

[0080] In practical applications, to prevent unauthorized use of a user's target verifiable claim, users can pre-set access permission verification methods for the target verifiable claim. When a user needs to use the target verifiable claim to store target data, the target application can verify whether the user requesting to store the target data has the necessary permissions according to the pre-set access permission verification method. If so, the user is allowed to use the target verifiable claim to store the target data in the data storage institution. The access permission verification methods set for the target verifiable claim can include facial recognition verification, fingerprint verification, password verification, etc., without specific limitations.

[0081] In the embodiments of this specification, after determining that a target verifiable claim exists and that the user has the right to use the target verifiable claim, the user also needs to specify the data storage institution that can be used to store the target data and interact with the data storage institution to store the target data in the data storage institution.

[0082] Based on this, storing the target data at the data storage institution based on the blockchain network and the target verifiable claim can specifically include:

[0083] A first blockchain transaction message for requesting storage of the target data is sent to the blockchain network; the blockchain network is used to determine, by invoking a first smart contract, a second communication address of a data storage institution that meets the data storage requirement information carried in the first blockchain transaction message.

[0084] Receive the second communication address information fed back by the blockchain network.

[0085] Based on the second communication address information and the target verifiable declaration, the target data is sent to each of the data storage institutions.

[0086] In the embodiments described in this specification, users may have certain requirements for the performance of the storage process of the target data. Therefore, users can use the target application to request the blockchain network to provide data storage institutions that can meet their data storage needs. Specifically, the blockchain network can deploy a first smart contract for filtering data storage institutions that meet the user's data storage needs, thereby enabling the target application to generate first blockchain transaction information to call the first smart contract.

[0087] The data storage requirement information carried in the first blockchain transaction information can be used as input parameters for the first smart contract. In practical applications, the data storage requirement information may include: the user's current geographical location, the amount of target data, the index information of the target data (i.e., the identification information of the data asset), the data version information of the target data, the number of backup data copies, the bandwidth requirements for the data storage process, and the security level requirements, etc., without specific limitations.

[0088] In practical applications, the first blockchain transaction information can also carry task ID information generated by the target application for the user's current data storage needs, unique identifier information VCID of the target verifiable declaration, public key bound to the target verifiable declaration, and digital signature information generated using the private key corresponding to the public key. This facilitates the blockchain network's trusted verification of the first blockchain transaction information and enables accurate response and management of the user's various data storage tasks. The public key bound to the target verifiable declaration can be the public key bound to the user's DID, which is typically stored on the blockchain network, while the corresponding private key can be stored in the trusted execution environment of the user's device.

[0089] In this embodiment of the specification, after the first smart contract runs, it can initially screen out data storage institutions that meet the data storage requirements. However, to protect the rights and interests of the data storage institutions, the blockchain network can also send data storage notification information to the initially screened data storage institutions, so that the data storage institutions can determine whether they are willing to store the user's target data based on the data storage notification information. The data storage notification information may include: task ID of the data storage task, index information of the target data (i.e., identification information of the data asset), data storage requirements, data upload validity period, unique identifier information VCID of the target verifiable claim, the public key bound to the target verifiable claim, and digital signature information generated using the private key corresponding to the public key, etc.

[0090] If a data storage institution determines, based on the data storage notification information, that it is willing to store a user's target data, it can send back confirmation information indicating its willingness to store the data, along with its second communication address, to the blockchain network. The blockchain network can then send this second communication address information back to the user, allowing the user to store the target data in one or more data storage institutions that meet their data storage needs. Alternatively, if a data storage institution is willing to store a user's target data, it can also communicate directly with the user's terminal device to send back the second communication address information; this is not specifically limited.

[0091] The confirmation message may include: the decentralized identity (DID) of the data storage institution, the task identifier (taskID) of the data storage task, the index information of the target data (i.e., the identifier of the data asset), the unique identifier (VCID) of the verifiable claim of the target, and digital signature information generated using the private key bound to the DID of the data storage institution. The second communication address information can be an Internet Protocol address (i.e., IP address), a Uniform Resource Locator (URL), etc., without specific limitations.

[0092] In practical applications, to prevent data storage institutions from using the target data they store to leak user privacy, users can also store the target data in encrypted form to the data storage institution.

[0093] Based on this, before sending the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration, the process may further include: encrypting the target data to obtain encrypted target data.

[0094] Correspondingly, the step of sending the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration may specifically include: sending the encrypted target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration.

[0095] In the embodiments described in this specification, the target application can use the user's personal public key to encrypt the target data, obtaining encrypted target data. The target application can also, based on the second communication address information, send the following to the data storage institution: task ID of the data storage task, VCID of the target verifiable claim, the encrypted target data, the index information of the encrypted target data (i.e., the identification information of the data asset), the data asset category to which the target data belongs, the data version information of the target data, the public key bound to the target verifiable claim, and the digital signature information generated using the private key corresponding to the public key.

[0096] Data storage institutions can use their generated confirmation messages and the public key stored on the blockchain network, which is bound to the target verifiable claim, to verify the information sent by the target application. If the verification is successful, the encrypted target data and the unique identifier (VCID) of the target verifiable claim can be associated and stored off-chain. Figure 1 The method described in the article dynamically allocates data storage institutions that can be used to store users' data assets based on contracts. Each data storage institution can store users' digital assets off-chain on its own device. At the same time, users can manage their personal data assets through the target application and blockchain network as an entry point. This makes users' data assets physically distributed but logically centralized, thereby improving the security and convenience of user asset management.

[0097] In practical applications, the data storage institution can also be used to store target data / encrypted target data and then send storage completion verification information for the target data to the blockchain network for storage. The storage completion verification information can be information sent to the blockchain network by the data storage institution through a smart contract deployed in the blockchain network for verification. This information may include: task ID of the data storage task, VCID of the target verifiable declaration, index information of the encrypted target data (i.e., data asset identification information), data version information of the target data, DID of the data storage institution, digital signature information generated using the private key bound to the DID of the data storage institution, timestamps, and other information.

[0098] Users may also need to query whether the data storage institution has completed the storage task for the target data. Based on this, after sending the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration, the process may further include:

[0099] A second blockchain transaction message for querying whether each of the data storage institutions has stored the target data is sent to the blockchain network; the blockchain network is used to generate a query result by calling a second smart contract based on the storage completion certificate information stored in the blockchain network.

[0100] Receive the query results fed back by the blockchain network.

[0101] The query results are displayed in the first application.

[0102] In this embodiment, the second smart contract can determine whether the data storage institution has completed the storage task for the target data based on the storage completion certificate information stored on the blockchain network, and generate query results reflecting whether the data storage institution corresponding to each second communication address information has completed the storage task for the target data. This allows users to easily and quickly understand the completion status of the data storage task for the target data.

[0103] In the embodiments of this specification, when a user expects to use the target verifiable claim to store target data, there may be a situation where the user has not yet obtained the target verifiable claim. Therefore, an implementation method is also provided that allows the user to use the target application to obtain the target verifiable claim.

[0104] Specifically, after determining whether a verifiable declaration of the target exists and obtaining the first determination result, the process may further include:

[0105] If the first determination result indicates that the target verifiable statement does not exist, then a third blockchain transaction message for generating the target verifiable statement is sent to the blockchain network; the blockchain network is used to obtain the third communication address information of the target identity verification authority that can generate the target verifiable statement by calling a third smart contract.

[0106] Receive the third communication address information of the target identity verification agency fed back by the blockchain network.

[0107] Based on the third communication address information, the identity verification credentials provided by the user for the target identity information are sent to the target identity verification agency.

[0108] Receive the target verifiable statement generated by the target identity verification agency after the identity verification certificate has been verified.

[0109] In the embodiments described in this specification, the third smart contract can be a smart contract used to request the generation of a verifiable claim (VC). The third blockchain transaction information may include: the target identity verification authority's ID, the category information of the target identity information to be used in generating the target verifiable claim, a challenge code to prevent replay attacks, the request time, the user's ID, and digital signature information generated using the private key corresponding to the public key bound to the user's ID, etc.

[0110] After a third-party blockchain transaction triggers the execution of a third-party smart contract, it can notify the target identity verification authority, allowing the authority to prepare the corresponding identity verification process off-chain. The target identity verification authority can also return the identity verification task ID, identity verification challenge code, identity verification validity period information, the target identity verification authority's third-party communication address, and digital signature information generated using the private key corresponding to the public key bound to the target identity verification authority's DI ID to the blockchain network. This serves two purposes: firstly, it serves as proof of the identity verification task; secondly, it allows the target identity verification authority's third-party communication address information to be fed back to the user via the blockchain network. The target identity verification authority's third-party communication address can be a URL address used to execute the identity verification process corresponding to the target verifiable claim.

[0111] In practical applications, the target application installed on a user's terminal device can have a trusted user interface (User Interface), allowing the user to access third-party communication address information and input identity verification credentials and perform corresponding human-computer interactions through the trusted user interface, thereby completing the identity verification process corresponding to the target verifiable claim. This identity verification process may include facial recognition, SMS verification, email verification, or filling in some basic information, while identity verification credentials may include: an image of an ID card, a passport image, the application account password, facial information collected from the user, a verification SMS message entered by the user, a verification email sent via email, etc., without specific limitations.

[0112] Once the target identity verification authority has verified the identity verification credentials submitted by the user, it can issue a target verifiable claim to the user and send the complete target verifiable claim file to the user. This target verifiable claim file may include: the target identity verification authority's DID, the category information of the target identity information provided by the user, the unique identifier of the target identity information, the unique identifier of the target verifiable claim (VCID), a timestamp, the claim verification address, and the target identity verification authority's private key signature information, etc.

[0113] In the embodiments described in this specification, users can typically register their personal DID on a blockchain network and use their personal DID to manage various verifiable claims they have obtained.

[0114] Based on this, the step of sending the identity verification credential provided by the user for the target identity information to the target identity verification agency based on the third communication address information may specifically include:

[0115] Based on the third communication address information, the identity verification credential and the user's distributed digital identity identifier (DID) on the blockchain network are sent to the target identity verification authority; the target identity verification authority is used to store the association information between the target verifiable statement and the distributed digital identity identifier (DID) on the blockchain network after generating the target verifiable statement.

[0116] In practical applications, target identity verification authorities can store the association information between the unique identifier information VCID of the target verifiable claim and the user's DID in the blockchain network. This makes it convenient for users to manage each verifiable claim using their personal DID. In addition, the target verifiable claim file can also include the user's DID and the public key bound to the user's DID, making it convenient for others to verify the credibility of the target verifiable claim.

[0117] In addition, users can store the public key bound to their personal DID in the blockchain network and keep the corresponding private key safe. They can use the private key to sign and encrypt the generated and used verifiable claims, as well as the stored and used target data, to ensure the security of the user's data asset management process.

[0118] In this embodiment of the specification, the user can set a usage credential for a target verifiable claim stored in the terminal device. Subsequently, the user needs to provide the usage credential to the terminal device to prove that they have the right to use the target verifiable claim, thereby preventing the target verifiable claim from being stolen.

[0119] Based on this, after receiving the target verifiable statement generated by the target identity verification authority after the identity verification credential has been verified, the process may further include:

[0120] The target verifiable declaration is stored in a trusted execution environment at the terminal device.

[0121] Obtain the target usage credentials set by the user for the target verifiable declaration. The target usage credentials can be in the form of a password, fingerprint, facial features, etc., and are not specifically limited thereto.

[0122] Correspondingly, determining whether the target verifiable declaration exists may specifically include:

[0123] Determine whether the target verifiable claim is stored in the trusted execution environment.

[0124] The determination of whether the user has the verifiable usage rights declared for the target may specifically include:

[0125] Determine whether the usage credentials provided by the user for the target verifiable claim are consistent with the target usage credentials.

[0126] In the embodiments of this specification, the implementation method for users to obtain target data from the target data storage institution is also explained.

[0127] Specifically, step 102: Obtaining the user's data retrieval request for the target data may include:

[0128] Obtain data retrieval requests for target data generated by the user performing a target operation on a second application.

[0129] Correspondingly, step 104: In response to the data acquisition request, a request to determine a target data storage institution that can provide the target data is sent to the blockchain network, which may specifically include:

[0130] A fourth blockchain transaction message is sent to the blockchain network to request the identification of a target data storage institution that can provide the target data; the blockchain network is used to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information by invoking a fourth smart contract based on the data acquisition requirement information carried in the fourth blockchain transaction message.

[0131] Correspondingly, step 108: after obtaining the target data from the target data storage institution based on the target verifiable declaration and the first communication address information, may further include:

[0132] In response to the target operation, the second application performs business processing on the target data to generate a business processing result.

[0133] In the embodiments of this specification, after the user stores the target data generated during the use of the first application to the data storage institution, the user may need to retrieve the target data during subsequent use of the first application, or during subsequent use of other applications. For example, assuming that the target data is short video data created by the user in the first application, the user may need to use the short video data to publish again in the first application, or may need to use the short video data to publish in other applications. Therefore, the second application and the first application may be the same application or different applications, and no specific limitation is made in this regard.

[0134] In the embodiments described in this specification, the second application may also be equipped with a software development kit (SDK) that communicates with the target application, thereby enabling the user to use the target application to obtain the target data required by the second application from the data storage institution.

[0135] Specifically, after a user selects the index information (i.e., the identification information of the data asset) of the target data to be obtained using the second application, the second application can initiate a data read request to the target application. The request message of the data read request may include: the DID of the second application, the data asset category to which the target data belongs, the index information (i.e., the identification information of the data asset) of the target data, the VCID of the target verifiable claim, the category information of the target identity information used when generating the target verifiable claim, the unique identification information of the target identity information, the timestamp, the challenge code used to identify replay attacks, and the digital signature information generated by the private key bound to the DID of the second application.

[0136] Once the target application determines that the user has permission to use the target verifiable claim, it can respond to the data read request by generating fourth-chain transaction information to determine a target data storage institution that can meet the user's data read requirements for the target data. Specifically, the fourth-chain transaction information may carry the user's data read request, the VCID of the target verifiable claim, the index information of the target data (i.e., the identification information of the data asset), the data asset category to which the target data belongs, the timestamp, the public key bound to the user's DID, and the digital signature information generated using the private key corresponding to the public key. Among these, the data read requirements may include requirements for the storage location of the target data, data download bandwidth requirements, data version requirements of the target data, and security level requirements for the data download process.

[0137] After the fourth blockchain transaction information triggers the execution of the fourth smart contract, the execution result of the fourth smart contract may include: the DID information of the target data storage institution that meets the data acquisition requirements, the first communication address information of the target data storage institution, the data download task ID, the data download validity period, etc.

[0138] After obtaining the first communication address information, the target application on the user's terminal device can also send a data download request to the target data storage institution through the first communication address information. The data download request may carry: data download task ID, target verifiable declaration VCID, index information of the target data (i.e., data asset identification information), data asset category to which the target data belongs, data version information of the target data, public key bound to the user's DID, timestamp, and digital signature information generated using the private key corresponding to the public key, etc.

[0139] The target data storage institution can invoke a smart contract within the blockchain network used for rights confirmation to determine, based on the information carried in the data download request, whether the user has permission to access the target data. If so, the target data can be sent to the user's terminal device, and the completion of the data transmission can be stored in the blockchain network as evidence of the data usage. If not, the institution can refuse to send the target data to the user to ensure the security of the user's digital assets.

[0140] In practical applications, since the target data storage facility stores target data encrypted with the user's public key, the target application can also use the private key of the user it manages to decrypt the encrypted target data and generate a challenge code. The challenge code is then used to perform symmetric encryption on the decrypted target data. This results in the symmetrically encrypted target data, the challenge code, the complete file of the target verifiable claim, the index information of the target data (i.e., the identification information of the data asset), the data asset category to which the target data belongs, and the digital signature information generated using the user's private key being sent to the second application.

[0141] The second application can first use a challenge code to decrypt the symmetrically encrypted target data, and then verify the credibility of the target's verifiable complete file, digital signature information, and index information. If the credibility verification passes, it indicates that the decrypted target data obtained by the second application is authentic and trustworthy, and thus can be used for business processing. In practical applications, the second application can perform various types of business processing on the target data, such as publishing or modifying the target data, without specific limitations.

[0142] In practical applications, since the blockchain network stores the association and storage relationship information between each verifiable claim and each data asset, in order to facilitate users in selecting the target data they need to obtain from the data storage institution, it can also display relevant information about each data asset it possesses for users to choose from.

[0143] Based on this, before step 102: obtaining the user's data retrieval request for the target data, it may also include:

[0144] Obtain a query request from a user for identification information of a data asset that has an associated storage relationship with the target verifiable claim.

[0145] In response to the query request, a fifth blockchain transaction message is sent to the blockchain network to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim; the blockchain network is used to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim by invoking the fifth smart contract.

[0146] The blockchain network displays the identification information of the data assets that have an associated storage relationship with the target verifiable claim.

[0147] In the embodiments described in this specification, users can browse the unique identifier information (VCID) of each verifiable claim from the user interface (UI) provided by the target application and / or the second application. If a user needs to view the data assets managed using the target verifiable claim, the VCID of the target verifiable claim can be triggered, so that the target application can send a fifth blockchain transaction message carrying the VCID of the target verifiable claim to the blockchain network. This will display the identification information (i.e., the index information of the data stored using the target verifiable claim), data asset category information, etc., of the data assets associated with the VCID and fed back by the blockchain network to the user through the user interface (UI).

[0148] If a user selects the identifier information of the data asset corresponding to the target data in the user interface (UI), it indicates that the user needs to obtain the target data from the data storage institution, thereby enabling the target application to execute. Figure 1 The Chinese solution involves downloading the target data from the target data storage provider, which will not be elaborated upon here.

[0149] Figure 1 The method and its implementation in the article dynamically allocate data storage institutions that can be used to store users' data assets based on contracts. Each data storage institution can store users' digital assets off-chain locally on its own device. At the same time, users can manage their personal data assets through the target application running in the TEE and the blockchain network as an entry point. This makes users' data assets physically distributed but logically centralized, and the data management process is traceable throughout, thereby improving the security, reliability and convenience of user asset management.

[0150] Furthermore, users can use target applications to transfer their specific versions of data assets to various applications based on their actual needs. This is not only convenient and fast, but also helps to fully protect users' rights to their personal data assets.

[0151] Based on and Figure 1 Following the same approach as the solution shown, this specification also provides another data management method based on a blockchain network. Figure 2 This is a flowchart illustrating another data management method based on a blockchain network provided in the embodiments of this specification. The entity executing this process can be a blockchain node in the blockchain network, or an application running on a blockchain node in the blockchain network. Figure 2 As shown, the process may include:

[0152] Step 202: The blockchain network receives a request sent by the terminal device to determine a target data storage institution that can provide the target data; the request is generated by the terminal device based on the user's data acquisition request for the target data, the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on the blockchain network and the target verifiable claim.

[0153] In the embodiments of this specification, the request obtained by the blockchain network in step 202 to determine the target data storage institution that can provide the target data may be the same as the request sent to the blockchain network in step 104 to determine the target data storage institution that can provide the target data, and will not be described in detail here.

[0154] Step 204: In response to the request, determine the first communication address information of the target data storage institution.

[0155] In the embodiments of this specification, the first communication address information of the target data storage institution mentioned in step 202 and step 106 may be the same, which will not be elaborated further.

[0156] Step 206: Send the first communication address information to the terminal device.

[0157] Figure 2 The method described above allows users to manage their data assets across various applications in a unified manner by leveraging the blockchain network and their verifiable personal claims. This improves the ease of managing personal data assets. Furthermore, the privacy of personal verifiable claims and the tamper-proof and deletion-resistant nature of the blockchain network also enhance the security of personal data asset management, thus protecting user rights.

[0158] based on Figure 2 In addition to the method described in the embodiments of this specification, some specific implementation schemes of the method are also provided, which will be described below.

[0159] Step 202: Before the blockchain network receives the request sent by the terminal device to determine the target data storage institution that can provide the target data, it may also include:

[0160] The terminal device receives a first blockchain transaction message requesting the storage of the target data based on the target verifiable claim.

[0161] In response to the first blockchain transaction information, it is determined whether the terminal device has the right to use the verifiable declaration of the target, and a determination result is obtained.

[0162] If the determination result indicates that the terminal device has the right to use the verifiable declaration of the target, then the first smart contract deployed in the blockchain system is invoked to determine the data storage institution that meets the data storage requirements based on the data storage requirement information carried in the first blockchain transaction information.

[0163] Send a storage notification message for the target data to the data storage institution.

[0164] If a confirmation message is received from the data storage institution regarding the storage notification information, the second communication address information of the data storage institution is sent to the terminal device; the terminal device is used to send the target data to the data storage institution for storage based on the second communication address information and the target verifiable declaration.

[0165] This embodiment and Figure 1 In the embodiments of the Chinese method, the first blockchain transaction information, the first smart contract, the storage notification information for the target data, and the confirmation information fed back for the storage notification information may be the same, and will not be elaborated further.

[0166] In this embodiment of the specification, after sending the second communication address information of the data storage institution to the terminal device, the method may further include:

[0167] The storage completion certificate information for the target data sent by the data storage institution is stored.

[0168] The terminal device receives second blockchain transaction information sent to query whether each of the data storage institutions has stored the target data.

[0169] The second smart contract deployed in the blockchain system is invoked to generate query results based on the storage completion and notarization information stored in the blockchain network.

[0170] The query results are sent to the terminal device.

[0171] This embodiment and Figure 1 The storage completion evidence information, second blockchain transaction information, second smart contract and query results mentioned in the embodiments of the Chinese method can be the same, and will not be elaborated further.

[0172] In this embodiment of the specification, before the receiving terminal device sends the first blockchain transaction information for requesting the storage of the target data based on the target verifiable claim, it may further include:

[0173] Receive third blockchain transaction information sent by the terminal device for generating the verifiable claim of the target.

[0174] The third smart contract deployed in the blockchain system is invoked to obtain the third communication address information of the target identity verification authority that can generate the target verifiable statement.

[0175] The third communication address information of the target identity verification authority is sent to the terminal device; the terminal device is used to perform user identity verification at the target identity verification authority based on the third communication address information, so that the target identity verification authority generates the target verifiable statement.

[0176] This embodiment and Figure 1 In the embodiments of the Chinese method, the third blockchain transaction information, the third smart contract, the third communication address information of the target identity verification agency, etc., mentioned can be the same, and will not be elaborated further.

[0177] In this embodiment of the specification, after sending the third communication address information of the target identity verification agency to the terminal device, it may further include:

[0178] Receive the association information between the target verifiable statement and the user's distributed digital identity on the blockchain network, sent by the target identity verification authority.

[0179] The information stored relates the target verifiable claim to the distributed digital identity.

[0180] This embodiment and Figure 1 The target verifiable claim, the user's distributed digital identity on the blockchain network, and the relationship information between the two mentioned in the embodiments of the Chinese method can be consistent, and will not be elaborated further.

[0181] In this embodiment of the specification, step 202: the blockchain network obtains a request sent by the terminal device to determine a target data storage institution that can provide the target data, which may specifically include:

[0182] The blockchain network acquires fourth-party blockchain transaction information used to request the identification of a target data storage institution that can provide the target data.

[0183] Step 204: In response to the request, determine the first communication address information of the target data storage institution, which may specifically include:

[0184] The fourth smart contract deployed in the blockchain system is invoked to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information based on the data acquisition requirement information carried in the fourth blockchain transaction information.

[0185] Step 206: After sending the first communication address information to the terminal device, it may further include:

[0186] Obtain the transmission completion certificate information for the target data sent by the target data storage institution.

[0187] The transmission completion certificate information is stored.

[0188] This embodiment and Figure 1 The fourth smart contract, fourth blockchain transaction information, and data acquisition requirement information mentioned in the embodiments of the Chinese method can be consistent, and will not be elaborated further. Furthermore, after providing the target data to the user, the target data storage institution can also store the completion certificate information for the transmission of the target data to the blockchain network, so that users or regulatory agencies can use the data stored on the blockchain network to reliably trace the usage of the target data, which is secure and convenient.

[0189] In the embodiments described in this specification, the blockchain network may store information reflecting the association between each verifiable claim and each data asset. When a user wants to view the data assets stored and managed using each verifiable claim, Figure 2 The methods may also include:

[0190] The fifth blockchain transaction information sent by the terminal device is used to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim.

[0191] The fifth smart contract deployed in the blockchain system is invoked to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim.

[0192] Send identification information of data assets that have an associated storage relationship with the target verifiable claim to the terminal device.

[0193] This embodiment and Figure 1 The blockchain transaction information, smart contract, and identification information of data assets associated with the target verifiable declaration mentioned in the embodiments of the Chinese method may be consistent with those in the embodiments of this specification, and will not be elaborated further.

[0194] Figure 3 The embodiments provided in this specification correspond to Figure 1 and Figure 2 A swimlane flowchart illustrating a blockchain-based data management method. (See diagram below.) Figure 3 As shown, this data management process based on a blockchain network can involve implementing entities such as user devices, data storage institutions, and the blockchain network.

[0195] During the data storage phase, the user equipment can obtain a data storage request from the user to store target data generated at the first application, utilizing a verifiable claim. In response to this request, if it is determined that the user has the authority to use the verifiable claim, the user equipment sends a first blockchain transaction message requesting the storage of the target data to the blockchain network. In response to the first blockchain transaction message, the blockchain network can invoke a first smart contract to determine and send the second communication address information of the data storage institutions that meet the user's data storage requirements to the user equipment. This allows the user equipment to send the target data to each data storage institution for storage based on the second communication address information and the verifiable claim. Upon receiving the target data, if each data storage institution determines that the target data is authentic and trustworthy, it can store the target data and send storage completion verification information to the blockchain network. The blockchain network can then store this storage completion verification information to facilitate monitoring of the target data storage status by users and regulatory agencies.

[0196] During the data usage phase, the user equipment can obtain a data acquisition request for target data generated by the user performing a target operation on a second application. In response to this data acquisition request, if it is determined that the user has access to the target verifiable claim, a fourth blockchain transaction message is sent to the blockchain network requesting the determination of a target data storage institution that can provide the target data. In response to the fourth blockchain transaction message, the blockchain network can invoke a fourth smart contract to determine and send the first communication address information of the target data storage institution that meets the user's data acquisition requirements to the user equipment. Based on the first communication address information and the target verifiable claim, the user equipment can generate and send a data download request for the target data to the target data storage institution. If the target data storage institution determines that the user has access to the target data, it can send the target data to the user equipment and send completion verification information for the target data to the blockchain network. This allows the user equipment to perform business processing on the target data using the second application and generate business processing results. Furthermore, it allows the blockchain network to store the completion verification information for the target data, facilitating monitoring of the target data usage by users and regulatory agencies.

[0197] Based on the same idea, embodiments of this specification also provide apparatus corresponding to the above methods. Figure 4 The embodiments provided in this specification correspond to Figure 1 A schematic diagram of a data management device based on a blockchain network. Figure 4 As shown, the device may include:

[0198] The first acquisition module 402 is used to enable the terminal device to acquire the user's data acquisition request for target data; the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim.

[0199] The request sending module 404 is used to send a request to the blockchain network to determine a target data storage institution that can provide the target data in response to the data acquisition request.

[0200] The receiving module 406 is used to receive the first communication address information of the target data storage institution fed back by the blockchain network.

[0201] The second acquisition 408 is used to acquire the target data from the target data storage institution based on the target verifiable declaration and the first communication address information.

[0202] based on Figure 4 The embodiments of this specification also provide some specific implementations of the device, which will be described below.

[0203] Optional, Figure 4 The device may further include:

[0204] The third acquisition module is used to acquire the data storage request generated by the user through the first application; the data storage request is used to request that the target data be stored at the data storage institution based on the blockchain network and the target verifiable statement; the target verifiable statement is a verifiable statement generated by the target identity verification institution after the target identity information has been verified.

[0205] The first judgment module is used to determine whether the target verifiable declaration exists and to obtain the first judgment result.

[0206] The second judgment module is used to determine whether the user has the right to use the target verifiable declaration if the first judgment result indicates that the target verifiable declaration exists, and to obtain the second judgment result.

[0207] The data storage module is used to store the target data at the data storage institution based on the blockchain network and the target verifiable declaration if the second judgment result indicates that the user has the right to use the target verifiable declaration.

[0208] Optionally, the data storage module specifically includes:

[0209] The first sending unit is used to send a first blockchain transaction message requesting the storage of the target data to the blockchain network; the blockchain network is used to determine the second communication address information of the data storage institution that meets the data storage requirement information by calling a first smart contract, based on the data storage requirement information carried in the first blockchain transaction message.

[0210] The first receiving unit is used to receive the second communication address information fed back by the blockchain network.

[0211] The second sending unit is used to send the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration.

[0212] Optionally, the data storage institution is used to store the target data and then send storage completion verification information for the target data to the blockchain network. Based on this, Figure 4 The device may further include:

[0213] The query module is used to send second blockchain transaction information to the blockchain network to query whether each of the data storage institutions has stored the target data; the blockchain network is used to generate query results by calling a second smart contract based on the storage completion certificate information stored in the blockchain network.

[0214] The query result receiving module is used to receive the query results fed back by the blockchain network.

[0215] The query results display module is used to display the query results in the first application.

[0216] Optional, Figure 4 The device may further include:

[0217] An encryption module is used to encrypt the target data to obtain encrypted target data;

[0218] The second sending unit can be specifically used to send the encrypted target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration.

[0219] Optional, Figure 4 The device may further include:

[0220] The transaction sending module is used to send third blockchain transaction information for generating the target verifiable statement to the blockchain network if the first judgment result indicates that the target verifiable statement does not exist; the blockchain network is used to obtain the third communication address information of the target identity verification authority that can generate the target verifiable statement by calling a third smart contract.

[0221] The feedback information receiving module is used to receive the third communication address information of the target identity verification agency fed back by the blockchain network;

[0222] The identity verification module is used to send the identity verification credentials provided by the user for the target identity information to the target identity verification agency based on the third communication address information;

[0223] The declaration receiving module is used to receive the target verifiable declaration generated by the target identity verification agency after the identity verification certificate has been verified.

[0224] Optionally, the identity verification module can be used to: send the identity verification credential and the user's distributed digital identity identifier in the blockchain network to the target identity verification agency based on the third communication address information; the target identity verification agency is used to store the association information between the target verifiable claim and the distributed digital identity identifier in the blockchain network.

[0225] Optional, Figure 4 The device may further include:

[0226] A declaration storage module is used to store the target verifiable declaration in the trusted execution environment of the terminal device.

[0227] The target usage credential acquisition module is used to acquire the target usage credential set by the user for the target verifiable declaration.

[0228] The first judgment module can be specifically used to: determine whether the target verifiable declaration is stored in the trusted execution environment.

[0229] The first judgment module can be specifically used to: determine whether the usage credentials provided by the user for the target verifiable declaration are consistent with the target usage credentials.

[0230] Optionally, the first acquisition module 402 may be specifically used to: acquire a data acquisition request for target data generated by the user through performing a target operation on the second application.

[0231] The request sending module 404 can be specifically used to: send fourth blockchain transaction information for requesting the determination of a target data storage institution that can provide the target data to the blockchain network; the blockchain network is used to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information by calling a fourth smart contract based on the data acquisition requirement information carried in the fourth blockchain transaction information.

[0232] Figure 4 The apparatus may further include: a business processing module, used to perform business processing on the target data using the second application in response to the target operation, and generate a business processing result.

[0233] Optionally, the blockchain network may store information on the association between each verifiable claim and each data asset.

[0234] Figure 4 The device may also include:

[0235] The query request acquisition module is used to acquire the user's query request for the identification information of the data asset that has an associated storage relationship with the target verifiable claim;

[0236] The asset identification request acquisition module is used to respond to the query request by sending fifth blockchain transaction information to the blockchain network for obtaining identification information of data assets that have an associated storage relationship with the target verifiable claim; the blockchain network is used to obtain the identification information of data assets that have an associated storage relationship with the target verifiable claim by calling the fifth smart contract.

[0237] The asset identification display module is used to display the identification information of data assets that have an associated storage relationship with the target verifiable claim, as fed back by the blockchain network.

[0238] Based on the same idea, embodiments of this specification also provide apparatus corresponding to the above methods. Figure 5 The embodiments provided in this specification correspond to Figure 2 A schematic diagram of a data management device based on a blockchain network. Figure 5 As shown, the device may include:

[0239] The acquisition module 502 is used to enable the blockchain network to acquire a request sent by the terminal device for determining a target data storage institution that can provide the target data; the request is generated by the terminal device based on the user's data acquisition request for the target data, the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on the blockchain network and the target verifiable claim.

[0240] The first determining module 504 is used to determine the first communication address information of the target data storage institution in response to the request.

[0241] The first sending module 506 is used to send the first communication address information to the terminal device.

[0242] based on Figure 5 The embodiments of this specification also provide some specific implementations of the device, which will be described below.

[0243] Optional, Figure 5 The device may further include:

[0244] The receiving module is used to receive first blockchain transaction information sent by the terminal device, which requests the storage of the target data based on the target verifiable claim.

[0245] The judgment module is used to respond to the first blockchain transaction information, determine whether the terminal device has the right to use the verifiable declaration of the target, and obtain the judgment result.

[0246] The second determining module is used to, if the determination result indicates that the terminal device has the right to use the verifiable declaration of the target, invoke the first smart contract deployed in the blockchain system to determine the data storage institution that meets the data storage requirement information based on the data storage requirement information carried in the first blockchain transaction information.

[0247] The second sending module is used to send storage notification information for the target data to the data storage institution.

[0248] The third sending module is used to send the second communication address information of the data storage institution to the terminal device if it receives confirmation information from the data storage institution regarding the storage notification information; the terminal device is used to send the target data to the data storage institution for storage based on the second communication address information and the target verifiable declaration.

[0249] Optional, Figure 5 The device may further include:

[0250] The evidence storage module is used to store the evidence storage information for the target data sent by the data storage institution.

[0251] The second blockchain transaction receiving module is used to receive second blockchain transaction information sent by the terminal device for querying whether each of the data storage institutions has stored the target data.

[0252] The second smart contract invocation module is used to invoke the second smart contract deployed in the blockchain system and generate query results based on the storage completion and notarization information stored in the blockchain network.

[0253] The fourth sending module is used to send the query result to the terminal device.

[0254] Optional, Figure 5 The device may further include:

[0255] The third blockchain transaction receiving module is used to receive third blockchain transaction information sent by the terminal device for generating the target verifiable statement.

[0256] The third smart contract invocation module is used to invoke the third smart contract deployed in the blockchain system to obtain the third communication address information of the target identity verification authority that can generate the target verifiable statement.

[0257] The fifth sending module is used to send the third communication address information of the target identity verification agency to the terminal device; the terminal device is used to perform user identity verification at the target identity verification agency based on the third communication address information, so that the target identity verification agency generates the target verifiable declaration.

[0258] Optional, Figure 5 The device may further include:

[0259] The association receiving module is used to receive the association information between the target verifiable statement and the user's distributed digital identity identifier in the blockchain network, sent by the target identity verification authority.

[0260] The association storage module is used to store the association information between the target verifiable claim and the distributed digital identity.

[0261] Optionally, module 502 can be used to: obtain fourth blockchain transaction information from the blockchain network for requesting and determining the target data storage institution that can provide the target data.

[0262] The first determining module 504 can be specifically used to: call the fourth smart contract deployed in the blockchain system, and determine the first communication address information of the target data storage institution that meets the data acquisition requirement information based on the data acquisition requirement information carried in the fourth blockchain transaction information.

[0263] Figure 5 The device may also include:

[0264] The evidence acquisition module is used to acquire the evidence acquisition information of the target data sent by the target data storage institution.

[0265] The evidence storage module is used to store the evidence storage information after the transmission is completed.

[0266] Figure 5 The device may also include:

[0267] The asset identifier request acquisition module is used to acquire the fifth blockchain transaction information sent by the terminal device for acquiring the identifier information of the data asset that has an associated storage relationship with the target verifiable claim.

[0268] The asset identification acquisition module is used to call the fifth smart contract deployed in the blockchain system to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable declaration.

[0269] The asset identification generation module is used to send identification information of data assets that have an associated storage relationship with the target verifiable claim to the terminal device.

[0270] Based on the same idea, this specification also provides devices corresponding to the above methods in its embodiments.

[0271] Figure 6 The embodiments provided in this specification correspond to Figure 1 A schematic diagram of the structure of a data management device based on a blockchain network. (See diagram below.) Figure 6 As shown, device 600 may include:

[0272] At least one processor 610; and,

[0273] Memory 630 communicatively connected to the at least one processor; wherein,

[0274] The memory 630 stores instructions 620 that can be executed by the at least one processor 610, the instructions being executed by the at least one processor 610 to enable the at least one processor 610 to:

[0275] Obtain a user's data acquisition request for target data; the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim.

[0276] In response to the data acquisition request, a request is sent to the blockchain network to determine a target data storage institution that can provide the target data.

[0277] Receive the first communication address information of the target data storage institution fed back by the blockchain network.

[0278] Based on the target verifiable claim and the first communication address information, the target data is obtained from the target data storage institution.

[0279] Based on the same idea, this specification also provides devices corresponding to the above methods in its embodiments.

[0280] Figure 7 The embodiments provided in this specification correspond to Figure 2 A schematic diagram of a data management device based on a blockchain network is provided. The device can be located within the blockchain network. Figure 7 As shown, device 700 may include:

[0281] At least one processor 710; and,

[0282] Memory 730 communicatively connected to the at least one processor; wherein,

[0283] The memory 730 stores instructions 720 that can be executed by the at least one processor 710, the instructions being executed by the at least one processor 710 to enable the at least one processor 710 to:

[0284] The terminal device receives a request from the terminal device to determine a target data storage institution that can provide the target data; the request is generated by the terminal device based on the user's data acquisition request for the target data, the target data being a data asset generated by the user during the use of the first application, and the target data being stored by the user at at least one data storage institution based on the blockchain network and a target verifiable claim.

[0285] In response to the request, the first communication address information of the target data storage institution is determined.

[0286] Send the first communication address information to the terminal device.

[0287] The various embodiments in this specification are described in a progressive manner. Similar or identical parts between embodiments can be referred to mutually. Each embodiment focuses on its differences from other embodiments. In particular, for... Figure 6 and Figure 7 As the device shown is basically similar to the method embodiment, the description is relatively simple, and relevant parts can be found in the description of the method embodiment.

[0288] In the 1990s, improvements to a technology could be clearly distinguished as either hardware improvements (e.g., improvements to the circuit structure of diodes, transistors, switches, etc.) or software improvements (improvements to the methodology). However, with technological advancements, many methodological improvements today can be considered direct improvements to the hardware circuit structure. Designers almost always obtain the corresponding hardware circuit structure by programming the improved methodology into the hardware circuit. Therefore, it cannot be said that a methodological improvement cannot be implemented using hardware physical modules. For example, a Programmable Logic Device (PLD) (such as a Field Programmable Gate Array (FPGA)) is such an integrated circuit whose logic function is determined by the user programming the device. Designers can program and "integrate" a digital system onto a PLD themselves, without needing chip manufacturers to design and manufacture dedicated integrated circuit chips. Furthermore, nowadays, instead of manually manufacturing integrated circuit chips, this programming is mostly implemented using "logic compiler" software. Similar to the software compiler used in program development, the original code before compilation must be written in a specific programming language, called a Hardware Description Language (HDL). There are many HDLs, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, and RHDL (Ruby Hardware Description Language). Currently, the most commonly used are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should understand that by simply performing some logic programming on the method flow using one of these hardware description languages ​​and programming it into an integrated circuit, the hardware circuit implementing the logical method flow can be easily obtained.

[0289] The controller can be implemented in any suitable manner. For example, it can take the form of a microprocessor or processor and a computer-readable medium storing computer-readable program code (e.g., software or firmware) executable by the (micro)processor, logic gates, switches, application-specific integrated circuits (ASICs), programmable logic controllers, and embedded microcontrollers. Examples of controllers include, but are not limited to, the following microcontrollers: ARC625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicon Labs C8051F320. A memory controller can also be implemented as part of the control logic of the memory. Those skilled in the art will also recognize that, in addition to implementing the controller in purely computer-readable program code form, the same functionality can be achieved by logically programming the method steps to make the controller take the form of logic gates, switches, ASICs, programmable logic controllers, and embedded microcontrollers. Therefore, such a controller can be considered a hardware component, and the means included therein for implementing various functions can also be considered as structures within the hardware component. Alternatively, the means for implementing various functions can be considered as both software modules implementing the method and structures within the hardware component.

[0290] The systems, devices, modules, or units described in the above embodiments can be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, a computer can be, for example, a personal computer, laptop computer, cellular phone, camera phone, smartphone, personal digital assistant, media player, navigation device, email device, game console, tablet computer, wearable device, or any combination of these devices.

[0291] For ease of description, the above devices are described separately by function as various units. Of course, in implementing this application, the functions of each unit can be implemented in one or more software and / or hardware.

[0292] Those skilled in the art will understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0293] This invention is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations and / or block diagrams. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0294] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0295] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0296] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0297] Memory may include non-persistent storage in computer-readable media, such as random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM. Memory is an example of computer-readable media.

[0298] Computer-readable media includes both permanent and non-permanent, removable and non-removable media that can store information using any method or technology. Information can be computer-readable instructions, data structures, modules of programs, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, CD-ROM, digital versatile optical disc (DVD) or other optical storage, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other non-transferable medium that can be used to store information accessible by a computing device. As defined herein, computer-readable media does not include transient computer-readable media, such as modulated data signals and carrier waves.

[0299] It should also be noted that the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0300] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0301] This application can be described in the general context of computer-executable instructions, such as program modules, that are executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc., that perform a specific task or implement a specific abstract data type. This application can also be practiced in distributed computing environments where tasks are performed by remote processing devices connected via a communication network. In distributed computing environments, program modules can reside in local and remote computer storage media, including storage devices.

[0302] The above description is merely an embodiment of this application and is not intended to limit the scope of this application. Various modifications and variations can be made to this application by those skilled in the art. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of this application should be included within the scope of the claims of this application.

Claims

1. A data management method based on a blockchain network, comprising: The terminal device acquires a data acquisition request for target data generated by the user through performing a target operation on a second application; The target data is a data asset generated by the user during the use of the first application. The target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim. A fourth blockchain transaction message is sent to the blockchain network to request the identification of a target data storage institution that can provide the target data; the blockchain network is used to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information by calling a fourth smart contract based on the data acquisition requirement information carried in the fourth blockchain transaction message. Receive the first communication address information of the target data storage institution fed back by the blockchain network; Based on the target verifiable claim and the first communication address information, the target data is obtained from the target data storage institution.

2. The method of claim 1, further comprising, before obtaining the data acquisition request for target data generated by the user performing a target operation on the second application: Obtain the data storage request generated by the user through the first application; The data storage request is used to request that the target data be stored at the data storage institution based on the blockchain network and the target verifiable statement; the target verifiable statement is a verifiable statement generated by the target identity verification institution after the target identity information has been verified. Determine whether the stated target verifiable claim exists, and obtain the first determination result; If the first judgment result indicates that the target verifiable declaration exists, then it is determined whether the user has the permission to use the target verifiable declaration, and a second judgment result is obtained; If the second determination result indicates that the user has the right to use the target verifiable claim, then based on the blockchain network and the target verifiable claim, the target data is stored at the data storage institution.

3. The method as described in claim 2, wherein storing the target data at the data storage facility based on the blockchain network and the target verifiable claim specifically includes: Send a first blockchain transaction message to the blockchain network requesting the storage of the target data; The blockchain network is used to determine the second communication address information of the data storage institution that meets the data storage requirements by calling the first smart contract and based on the data storage requirement information carried in the first blockchain transaction information. Receive the second communication address information fed back by the blockchain network; Based on the second communication address information and the target verifiable declaration, the target data is sent to each of the data storage institutions.

4. The method as described in claim 3, wherein the data storage institution is used to send storage completion verification information for the target data to the blockchain network after storing the target data; After sending the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration, the method further includes: A second blockchain transaction message for querying whether each of the data storage institutions has stored the target data is sent to the blockchain network; the blockchain network is used to generate a query result by calling a second smart contract based on the storage completion certificate information stored in the blockchain network; Receive the query results fed back by the blockchain network; The query results are displayed in the first application.

5. The method of claim 3, further comprising, before sending the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration: The target data is encrypted to obtain encrypted target data; The step of sending the target data to each of the data storage institutions based on the second communication address information and the target verifiable declaration specifically includes: Based on the second communication address information and the target verifiable declaration, the encrypted target data is sent to each of the data storage institutions.

6. The method of claim 2, after determining whether the target verifiable declaration exists and obtaining the first determination result, further includes: If the first determination result indicates that the target verifiable claim does not exist, then a third blockchain transaction message for generating the target verifiable claim is sent to the blockchain network; The blockchain network is used to obtain the third communication address information of the target identity verification authority that can generate the target verifiable claim by invoking a third smart contract; Receive the third communication address information of the target identity verification agency fed back by the blockchain network; Based on the third communication address information, the identity verification credentials provided by the user for the target identity information are sent to the target identity verification agency. Receive the target verifiable statement generated by the target identity verification agency after the identity verification certificate has been verified.

7. The method of claim 6, wherein sending the identity verification credential provided by the user for the target identity information to the target identity verification agency based on the third communication address information specifically includes: Based on the third communication address information, the identity verification certificate and the user's distributed digital identity identifier in the blockchain network are sent to the target identity verification agency. The target identity verification authority is used to store the association information between the target verifiable claim and the distributed digital identity in the blockchain network.

8. The method of claim 6, further comprising, after receiving the target verifiable statement generated by the target identity verification authority after the identity verification credential has been verified, the method includes: The target verifiable declaration is stored in a trusted execution environment at the terminal device; Obtain the target usage credentials set by the user for the target verifiable declaration; The determination of whether the target verifiable declaration exists specifically includes: Determine whether the target verifiable claim is stored in the trusted execution environment; The determination of whether the user has the verifiable usage rights declared for the target specifically includes: Determine whether the usage credentials provided by the user for the target verifiable claim are consistent with the target usage credentials.

9. The method according to any one of claims 1-8, wherein after obtaining the target data from the target data storage institution based on the target verifiable claim and the first communication address information, the method further comprises: In response to the target operation, the second application performs business processing on the target data to generate a business processing result.

10. The method of claim 9, wherein the blockchain network stores information on the association storage relationship between each verifiable claim and each data asset; Before obtaining the data retrieval request for target data generated by the user performing a target operation on the second application, the method further includes: Obtain a user's query request for identification information of a data asset that has a verifiable storage relationship with the target; In response to the query request, a fifth blockchain transaction message is sent to the blockchain network to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim; the blockchain network is used to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim by invoking the fifth smart contract; The blockchain network displays the identification information of the data assets that have an associated storage relationship with the target verifiable claim.

11. A data management method based on a blockchain network, comprising: The blockchain network acquires fourth-chain transaction information used to request the identification of a target data storage institution that can provide the target data; The request is generated by the terminal device based on the user's data acquisition request for the target data. The target data is a data asset generated by the user during the use of the first application. The target data is stored by the user in at least one data storage institution based on the blockchain network and the target verifiable claim. The fourth smart contract deployed in the blockchain system is invoked to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information based on the data acquisition requirement information carried in the fourth blockchain transaction information. Send the first communication address information to the terminal device.

12. The method of claim 11, further comprising, before the blockchain network acquires fourth blockchain transaction information for requesting determination of a target data storage institution that can provide the target data: Receive a first blockchain transaction message sent by a terminal device requesting the storage of the target data based on the target verifiable claim; In response to the first blockchain transaction information, it is determined whether the terminal device has the right to use the verifiable declaration of the target, and a determination result is obtained; If the judgment result indicates that the terminal device has the right to use the verifiable declaration of the target, then the first smart contract deployed in the blockchain system is invoked to determine the data storage institution that meets the data storage requirements based on the data storage requirement information carried in the first blockchain transaction information. Send a storage notification message for the target data to the data storage institution; If a confirmation message is received from the data storage institution regarding the storage notification information, then the second communication address information of the data storage institution is sent to the terminal device; The terminal device is used to send the target data to the data storage institution for storage based on the second communication address information and the target verifiable declaration.

13. The method of claim 12, further comprising, after sending the second communication address information of the data storage institution to the terminal device: The storage completion certificate information for the target data sent by the data storage institution is stored. Receive second blockchain transaction information sent by the terminal device for querying whether each of the data storage institutions has stored the target data; The second smart contract deployed in the blockchain system is invoked to generate query results based on the storage completion and notarization information stored in the blockchain network; The query results are sent to the terminal device.

14. The method of claim 12, further comprising, before receiving the first blockchain transaction information sent by the receiving terminal device for requesting storage of the target data based on the target verifiable claim: Receive third blockchain transaction information sent by the terminal device for generating the verifiable claim of the target; Invoke the third smart contract deployed in the blockchain system to obtain the third communication address information of the target identity verification authority that can generate the target verifiable statement; The third communication address information of the target identity verification authority is sent to the terminal device; the terminal device is used to perform user identity verification at the target identity verification authority based on the third communication address information, so that the target identity verification authority generates the target verifiable statement.

15. The method of claim 14, further comprising, after sending the third communication address information of the target identity verification agency to the terminal device: Receive the association information between the target verifiable statement and the user's distributed digital identity on the blockchain network sent by the target identity verification authority; The information stored relates the target verifiable claim to the distributed digital identity.

16. The method of claim 11, further comprising, after sending the first communication address information to the terminal device: Obtain the transmission completion certificate information for the target data sent by the target data storage institution; The transmission completion certificate information is stored.

17. The method of claim 11, wherein the blockchain network stores information reflecting the associated storage relationship between each verifiable claim and each data asset, the method further comprising: The fifth blockchain transaction information sent by the terminal device is used to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim; The fifth smart contract deployed in the blockchain system is invoked to obtain the identification information of the data asset that has an associated storage relationship with the target verifiable claim; Send identification information of data assets that have an associated storage relationship with the target verifiable claim to the terminal device.

18. A data management device based on a blockchain network, comprising: The first acquisition module is used to enable the terminal device to acquire a data acquisition request for target data generated by the user through performing a target operation on the second application; The target data is a data asset generated by the user during the use of the first application. The target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim. The request sending module is used to send fourth blockchain transaction information to the blockchain network for requesting the determination of a target data storage institution that can provide the target data; The blockchain network is used to determine the first communication address information of the target data storage institution that meets the data acquisition requirements by calling the fourth smart contract and based on the data acquisition requirements carried in the fourth blockchain transaction information. The receiving module is used to receive the first communication address information of the target data storage institution fed back by the blockchain network; The second acquisition module is used to acquire the target data from the target data storage institution based on the target verifiable declaration and the first communication address information.

19. The apparatus of claim 18, further comprising: The third acquisition module is used to acquire the data storage request generated by the user through the first application; The data storage request is used to request that the target data be stored at the data storage institution based on the blockchain network and the target verifiable statement; the target verifiable statement is a verifiable statement generated by the target identity verification institution after the target identity information has been verified. The first judgment module is used to determine whether the target verifiable declaration exists and to obtain a first judgment result. The second judgment module is used to determine whether the user has the right to use the target verifiable declaration if the first judgment result indicates that the target verifiable declaration exists, and to obtain the second judgment result. The data storage module is used to store the target data at the data storage institution based on the blockchain network and the target verifiable declaration if the second judgment result indicates that the user has the right to use the target verifiable declaration.

20. The apparatus of claim 18, further comprising: The business processing module is used to respond to the target operation by using the second application to perform business processing on the target data and generate a business processing result.

21. A data management device based on a blockchain network, comprising: The acquisition module is used to enable the blockchain network to acquire fourth blockchain transaction information for requesting the determination of the target data storage institution that can provide the target data; The request is generated by the terminal device based on the user's data acquisition request for the target data. The target data is a data asset generated by the user during the use of the first application. The target data is stored by the user in at least one data storage institution based on the blockchain network and the target verifiable claim. The first determining module is used to call the fourth smart contract deployed in the blockchain system, and determine the first communication address information of the target data storage institution that meets the data acquisition requirement information based on the data acquisition requirement information carried in the fourth blockchain transaction information. The first sending module is used to send the first communication address information to the terminal device.

22. The apparatus of claim 21, further comprising: A receiving module is configured to receive a request from a terminal device for storing a verifiable declaration of the target. The first blockchain transaction information of the data; The judgment module is used to, in response to the first blockchain transaction information, determine whether the terminal device has the right to use the verifiable declaration of the target, and obtain the judgment result. The second determining module is used to, if the determination result indicates that the terminal device has the right to use the verifiable declaration of the target, call the first smart contract deployed in the blockchain system to determine the data storage institution that meets the data storage requirement information based on the data storage requirement information carried in the first blockchain transaction information. The second sending module is used to send storage notification information for the target data to the data storage institution; The third sending module is used to send the second communication address information of the data storage institution to the terminal device if it receives confirmation information from the data storage institution regarding the storage notification information. The terminal device is used to send the target data to the data storage institution for storage based on the second communication address information and the target verifiable declaration.

23. A data management device based on a blockchain network, comprising: At least one processor; as well as, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to: The system obtains a data acquisition request for target data generated by a user through performing a target operation on a second application; the target data is a data asset generated by the user during the use of the first application, and the target data is stored by the user at at least one data storage institution based on a blockchain network and a target verifiable claim. A fourth blockchain transaction message is sent to the blockchain network to request the identification of a target data storage institution that can provide the target data; the blockchain network is used to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information by calling a fourth smart contract based on the data acquisition requirement information carried in the fourth blockchain transaction message. Receive the first communication address information of the target data storage institution fed back by the blockchain network; Based on the target verifiable claim and the first communication address information, the target data is obtained from the target data storage institution.

24. A data management device based on a blockchain network, wherein the device is a device located within the blockchain network, comprising: At least one processor; as well as, A memory communicatively connected to the at least one processor; wherein, The memory stores instructions executable by the at least one processor, which, when executed by the at least one processor, enable the at least one processor to: Obtain fourth blockchain transaction information for requesting the determination of a target data storage institution that can provide target data; the request is generated by the terminal device based on the user's data acquisition request for the target data, the target data being data assets generated by the user during the use of the first application, and the target data being stored by the user at at least one data storage institution based on the blockchain network and a target verifiable claim; The fourth smart contract deployed in the blockchain system is invoked to determine the first communication address information of the target data storage institution that meets the data acquisition requirement information based on the data acquisition requirement information carried in the fourth blockchain transaction information. Send the first communication address information to the terminal device.

Images