Data processing method, device, equipment and storage medium
Through blockchain platform and privacy computing technology, the user side independently chooses data storage methods and adopts smart contracts and NFT mechanisms to solve the problems of personal data abuse and leakage, and realizes data autonomous control and privacy protection.
Patent Information
- Application Number
- CN202211648501.1
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2022-12-21
- Publication Date
- 2025-08-15
- Estimated Expiration
- 2042-12-21
AI Technical Summary
Personal data is easily abused and leaked on the Internet, making it difficult for users to control the data storage, management and use, resulting in reduced security.
Through the blockchain platform and privacy computing technology, smart contracts and non-fungible tokens (NFT) mechanisms are adopted, and the user side independently chooses the data storage method and applies for query permissions from the user side through smart contracts. Privacy computing technology ensures data privacy and security and prevents private storage and abuse of data usage.
It realizes users' independent control over personal data, ensures trust mechanism and privacy security during data processing, avoids data leakage, meets the query needs of the data user side, and minimizes data authorization.
Smart Images

Figure CN115879155B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of communication technology, and in particular to a data processing method, apparatus, device, and storage medium. Background Art
[0002] With the rapid development of Internet technology, personal data of natural persons is widely obtained, stored, and used online. Personal data of natural persons can be generated and stored by data generators, and data users can apply to users for use of their personal data through the data generators.
[0003] However, since the user side has difficulty in controlling the storage, management and use of personal data, the data user side sometimes excessively or even forcibly requires user authorization, causing the data generator side to excessively collect and privately store original and plaintext personal data, resulting in the abuse of personal data. At the same time, the data generator side sometimes also sends the original personal data to the data generation side. If the data generator side and the data user side cannot properly preserve and use user data, it is easy to cause personal information leakage and reduce the security of the above-mentioned links of personal data. Summary of the Invention
[0004] The embodiments of the present application provide a data processing method, apparatus, device, and storage medium, which can solve the problem in related technologies that personal data is easily leaked and abused.
[0005] In a first aspect, embodiments of the present application provide a data processing method, which is applied to a blockchain platform. The method may include:
[0006] Receive a data query request sent by a data user, the data query request including a query task and a task query condition of the query task;
[0007] According to the data query request, a verification instruction is sent to the user terminal related to the query task. The verification instruction includes a first smart contract. The first smart contract is determined by the query task and the task query condition. The verification instruction is used to instruct the user terminal to provide an authorization identifier corresponding to the task query condition based on the first smart contract;
[0008] When the second smart contract receives feedback from the user, a non-fungible token is sent to the data user according to the authorization identifier in the second smart contract;
[0009] Among them, non-homogeneous tokens include the query results of the query task and user evidence. The query result is the result of whether the task query conditions are met. The user evidence is provided by the user end. The user evidence carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user evidence is a certificate that represents the authenticity of the original data.
[0010] In a second aspect, an embodiment of the present application provides a data processing method, applied to a user terminal, which may include:
[0011] Obtaining original data sent by the data generation end, where the original data is determined by the user personal information of the user end and the first digital signature of the data generation end;
[0012] Generate user evidence based on the attribute characteristics of the original data and the second data signature of the user end;
[0013] Send user proof to the blockchain platform, which is the certificate that represents the authenticity of the original data;
[0014] Receiving a verification instruction sent by the blockchain platform, the verification instruction including a first smart contract, the first smart contract being determined by a query task and a task query condition of the query task in a data query request provided by the data user;
[0015] According to the query task in the first smart contract, the task query condition is marked by the authorization identifier to obtain the second smart contract;
[0016] Send the second smart contract to the blockchain platform.
[0017] In a third aspect, an embodiment of the present application provides a data processing method, which is applied to a data generation end. The method may include:
[0018] Obtain user personal information on the user side;
[0019] Encrypting the user's personal information using a second preset encryption algorithm to obtain a second encryption result;
[0020] Generate original data of the user's personal information based on the second encryption result and the first digital signature of the data generation end;
[0021] When receiving a data acquisition request sent by a user terminal, the original data is sent to the user terminal.
[0022] In a fourth aspect, an embodiment of the present application provides a data processing method, which is applied to a data user end. The method may include:
[0023] Send a data query request to the blockchain platform. The data query request includes the query task and the task query conditions of the query task. The data query request is used to request the blockchain platform to send the query results of the query task;
[0024] Receive the non-fungible token sent by the blockchain. The non-fungible token includes the query result of the query task and the user certificate. The query result is the result of whether the task query conditions are met. The user certificate is provided by the user end. The user certificate carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user certificate is the certificate that represents the authenticity of the original data.
[0025] In a fifth aspect, an embodiment of the present application provides a data processing device, which is applied to a blockchain platform and may include:
[0026] A receiving module is used to receive a data query request sent by a data user, wherein the data query request includes a query task and a task query condition of the query task;
[0027] A sending module, configured to send a verification instruction to a user terminal related to the query task based on the data query request, wherein the verification instruction includes a first smart contract, the first smart contract being determined by the query task and the task query condition, and the verification instruction is used to instruct the user terminal to provide an authorization identifier corresponding to the task query condition based on the first smart contract;
[0028] The sending module is further configured to, upon obtaining a second smart contract fed back by the user, send a non-fungible token to the data user according to the authorization identifier in the second smart contract;
[0029] Among them, non-homogeneous tokens include the query results of the query task and user evidence. The query result is the result of whether the task query conditions are met. The user evidence is provided by the user end. The user evidence carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user evidence is a certificate that represents the authenticity of the original data.
[0030] In a sixth aspect, an embodiment of the present application provides a data processing device, applied to a user terminal, which may include:
[0031] An acquisition module, configured to acquire original data sent by a data generation end, where the original data is determined by the user personal information of the user end and the first digital signature of the data generation end;
[0032] A generation module, configured to generate a user certificate based on the attribute characteristics of the original data and the second data signature of the user terminal;
[0033] The sending module is used to send user certificates to the blockchain platform. User certificates are certificates that represent the authenticity of the original data;
[0034] A receiving module, configured to receive a verification instruction sent by the blockchain platform, the verification instruction including a first smart contract, the first smart contract being determined by a query task and a task query condition of the query task in a data query request provided by the data user;
[0035] A marking module, configured to mark the task query condition according to the query task in the first smart contract through the authorization identifier to obtain the second smart contract;
[0036] The sending module is also used to send the second smart contract to the blockchain platform.
[0037] In a seventh aspect, an embodiment of the present application provides a data processing device, applied to a data generation end, which may include:
[0038] The acquisition module is used to obtain the user's personal information on the user side;
[0039] An encryption module, configured to encrypt the user's personal information using a second preset encryption algorithm to obtain a second encryption result;
[0040] A generating module, configured to generate original data of the user's personal information based on the second encryption result and the first digital signature of the data generating terminal;
[0041] The sending module is used to send original data to the user terminal when receiving a data acquisition request sent by the user terminal.
[0042] In an eighth aspect, an embodiment of the present application provides a data processing device, applied to a data user end, which may include:
[0043] The sending module is used to send a data query request to the blockchain platform. The data query request includes a query task and a task query condition of the query task. The data query request is used to request the blockchain platform to send the query result of the query task;
[0044] The receiving module is used to receive the non-fungible token sent by the blockchain. The non-fungible token includes the query result of the query task and the user certificate. The query result is the result of whether the task query condition is met. The user certificate is provided by the user end. The user certificate carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user certificate is a certificate that represents the authenticity of the original data.
[0045] In a ninth aspect, an embodiment of the present application provides a computer device, the computer device comprising: a processor and a memory storing computer program instructions;
[0046] When the processor executes computer program instructions, it implements the data processing method as shown in the first aspect, the data processing method as shown in the second aspect, the data processing method as shown in the third aspect, or the data processing method as shown in the fourth aspect.
[0047] In the tenth aspect, an embodiment of the present application provides a computer storage medium, on which computer program instructions are stored. When the computer program instructions are executed by a processor, the data processing method as shown in the first aspect, the data processing method as shown in the second aspect, the data processing method as shown in the third aspect, or the data processing method as shown in the fourth aspect is implemented.
[0048] In the eleventh aspect, an embodiment of the present application provides a chip, which includes a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run programs or instructions to implement the data processing method shown in the first aspect, the data processing method shown in the second aspect, the data processing method shown in the third aspect, or the data processing method shown in the fourth aspect.
[0049] In the twelfth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the data processing method shown in the first aspect, the data processing method shown in the second aspect, the data processing method shown in the third aspect, or the data processing method shown in the fourth aspect.
[0050] The data processing method, apparatus, device and storage medium of the embodiments of the present application receive a data query request sent by a data user end, the data query request includes a query task and a task query condition of the query task; according to the data query request, a verification instruction is sent to the user end related to the query task, the verification instruction includes a first smart contract, the first smart contract is determined by the query task and the task query condition, and the verification instruction is used to instruct the user end to provide an authorization identifier corresponding to the task query condition based on the first smart contract; when a second smart contract is obtained as feedback from the user end, a non-fungible token is sent to the data user end according to the authorization identifier in the second smart contract; wherein the non-fungible token includes a query result of the query task and a user certificate, the query result is the result of whether the task query condition is met, the user certificate is provided by the user end, the user certificate carries a first data signature of the data generation end and a second data signature of the user end, the data generation end is a platform for generating original data of the user's personal information of the user end, and the user certificate is a certificate representing the authenticity of the original data.
[0051] Based on this, users can independently download the original data of their personal information, expanding their choice of personal data storage methods. That is, users can independently select data storage methods, such as storing it on a third-party blockchain platform. When data users want to query the corresponding data, they can also request it from the user through the blockchain platform. This allows the user to participate in the decision-making process of storing, managing, and using user personal information, making the responsibility of protecting user rights clear. Furthermore, the blockchain platform can reliably store the original data of user personal information, ensuring a trust mechanism in the data processing process. The blockchain platform's smart contracts provide data users with a way to request query permissions from the user. Here, the blockchain platform also uses privacy computing technology to ensure the privacy and security of data in smart contracts, making the original data available but invisible to data users, preventing data users from privately storing and abusing the original data. In addition, in the embodiment of the present application, the query results and user evidence are output in the form of non-homogeneous tokens NFT through smart contracts supported by privacy computing technology. In this way, since the content of the NFT is encrypted, only the data user can recognize the NFT, so the leakage of the output query results and user evidence is avoided, making the original data available but invisible. The resource user cannot obtain the original data and can only obtain the query results of the query task. While meeting the query needs of the data user, it achieves data authorization minimization, protects the privacy and security of user personal information, and avoids the leakage of user personal information. For the data user, through the query results of the query task and the first data signature of the data generation end and the second data signature of the user end carried in the user evidence, even if the data user fails to obtain the original data of the user's personal information, the authenticity of the original data can be verified through the data signatures of multiple parties. BRIEF DESCRIPTION OF THE DRAWINGS
[0052] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.
[0053] Figure 1 is a schematic diagram of a data processing system according to an embodiment of the data processing method provided by the present application;
[0054] Figure 2 A flowchart of a data processing method based on a blockchain platform provided in an embodiment of the present application;
[0055] Figure 3 A flowchart of a user-side data processing method provided in an embodiment of the present application;
[0056] Figure 4A flowchart of a data processing method based on a data generation end provided in an embodiment of the present application;
[0057] Figure 5 A flowchart of a data processing method based on a data user terminal provided in an embodiment of the present application;
[0058] Figure 6 This is a schematic diagram of the structure of a data processing device based on a blockchain platform provided by one embodiment of the present application;
[0059] Figure 7 This is a schematic diagram of the structure of a user-side data processing device provided by an embodiment of the present application;
[0060] Figure 8 This is a structural diagram of a data processing device based on a data generation end provided by an embodiment of the present application;
[0061] Figure 9 This is a structural diagram of a data processing device based on a data user end provided by an embodiment of the present application;
[0062] Figure 10 It is a structural diagram of a computer device provided in one embodiment of the present application. DETAILED DESCRIPTION
[0063] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is merely to provide a better understanding of the present application by illustrating the examples of the present application.
[0064] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising..." does not exclude the presence of additional identical elements in the process, method, article, or device comprising the element.
[0065] With the rapid development of internet technology, personal data of natural persons is widely collected, stored, and used online. Personal data of natural persons can be generated and stored by data generators, and data users can apply to users through the data generators for access to their personal data. However, some data users, driven by profit, often excessively or even force user authorization, collecting and privately storing large amounts of personal data, thereby profiting from personal data and causing abuse of personal data. For users, it is difficult to independently select who can store their personal data, and their options for specifying who can use the data are limited. Users can only determine who can use their data on the platform designated by the data generator. This makes it difficult for users to control the storage, management, and use of their personal data. Furthermore, since users cannot see how their personal data is used, their personal data could be maliciously used by third parties without their permission. Furthermore, if data generators and users fail to properly store and use user data, personal information can be easily leaked, compromising the security of personal data in all these aspects of storage, management, and use.
[0066] In related technologies, the Data Transfer Project (DTP) and the Distributed Data Transfer Protocol (DDTP) enable users to become key participants in the transmission of personal data. However, the former prevents users from independently selecting the location and method of data storage, and the data transmission trust mechanism relies too heavily on the confidentiality and credibility of a single platform, resulting in low transparency in data transmission and unclear responsibilities for protecting user rights. The latter cannot prevent data users from privately storing personal data, nor can it guarantee that data users truthfully upload and use records of their personal data.
[0067] Based on this, in order to solve the above-mentioned problems, an embodiment of the present application provides a data processing method for user personal information based on a blockchain platform and privacy computing, by receiving a data query request sent by a data user end, the data query request includes a query task and a task query condition of the query task; according to the data query request, a verification instruction is sent to the user end related to the query task, the verification instruction includes a first smart contract, the first smart contract is determined by the query task and the task query condition, and the verification instruction is used to instruct the user end to provide an authorization identifier corresponding to the task query condition based on the first smart contract; when a second smart contract is obtained as feedback from the user end, a non-fungible token is sent to the data user end according to the authorization identifier in the second smart contract; wherein the non-fungible token includes a query result of the query task and a user certificate, the query result is the result of whether the task query condition is met, the user certificate is provided by the user end, and the user certificate carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is a platform that generates the original data of the user personal information of the user end, and the user certificate is a certificate representing the authenticity of the original data. In this way, users can participate in the decision-making process of storing, managing, and using their personal data (hereinafter referred to as user personal information). The responsibilities for protecting user rights are clearly defined, allowing users to download their personal data and independently choose the data storage method. Furthermore, the trust mechanism of the scheme is ensured by the generation and authorization records of user personal information through the blockchain platform's trusted evidence storage. A smart contract layer is set up on the blockchain platform, and data results are requested from users through the smart contracts provided by the smart contract. The privacy security of the data in the smart contract is protected by privacy computing technology. User personal information is available but invisible to the data user, preventing the data user from privately storing user personal information. This effectively prevents malicious use of user personal information by third parties. Users can control the scope of authorization and the objects of use of user personal information, expanding the scenarios for user authorization, reducing the possibility of user personal information leakage, and ensuring the security of user personal information.
[0068] Based on this, the embodiment of the present application provides a data processing method, device, equipment and storage medium. Figures 1 to 10 , describes in detail the data processing method, device, server and storage medium of the embodiments of the present application. It should be noted that these embodiments are not intended to limit the scope of disclosure of the present application.
[0069] First, the data processing system provided in the embodiment of the present application is described.
[0070] like Figure 1As shown, the data processing system 10 may include a data generation terminal 101, a user terminal 102, a blockchain platform 103, and a data usage terminal 104. The data generation terminal 101 may include at least one data generation terminal such as data generation terminal 1, data generation terminal 2, ..., data generation terminal M, where M is a positive integer; similarly, the data usage terminal 104 may include at least one data usage terminal such as data usage terminal 1, data usage terminal 2, ..., data usage terminal P, where P is a positive integer; and the blockchain platform 103 may include a proof storage platform and a smart contract layer.
[0071] It should be noted that the smart contracts involved in the embodiments of the present application, such as the first smart contract and the second smart contract, can be computer transaction protocols that can self-verify and automatically execute the terms of the contract without the need for an intermediary; secure multi-party computation (MPC) refers to the collaborative calculation of an agreed function by multiple participants without a trusted third party, ensuring that each party only obtains its own calculation results and cannot infer the input and output data of any other party from the interactive data during the calculation process. Garbled circuit (GC) can refer to an encryption algorithm involved in secure multi-party computation, which encrypts each operation and obtains the calculation result without revealing the initial value; oblivious transfer (OT) is a cryptographic protocol in which the sender transmits one of many potential information to the receiver, but the receiver remains unaware of the information received; non-fungible token (NFT) refers to a data unit on the digital ledger of a blockchain platform. Each token can represent a unique digital data and is used as an electronic authentication or certificate of ownership of virtual goods. It has the characteristic of being non-interchangeable.
[0072] Based on the above data processing architecture, the embodiment of the present application provides a detailed description of the above data processing system 10 from three stages: data storage, data verification, and data use.
[0073] First, regarding the data storage stage, user personal information can not only be stored on the data generation terminal 101, but can also be downloaded from the data generation terminal 101 by the user terminal 102 and stored in a customized manner. This way, even if the data generation terminal 101 ceases operations and no longer maintains the server, the user can still independently control their personal information.
[0074] Based on this, for the data generation terminal 101, in one example, the data generation terminal 101 can be used to obtain the user personal information of the user terminal 102, wherein the user personal information may include at least one of the following: name, ID number, mobile phone number, home address, location information, age, personal assets, health status, etc. In another example, the data generation terminal 101 can also be used to encrypt the user personal information D through a second preset encryption algorithm to obtain a second encryption result, and to generate the original data Sig of the user personal information based on the second encryption result and the first digital signature of the data generation terminal through a preset digital signature algorithm. generator (D) In another example, the data generation terminal 101 can also be used to, when receiving a data acquisition request sent by the user terminal 102, send the original data Sig to the user terminal 102 through the trusted transmission channel established between the data generation terminal 101 and the user terminal 102. generator (D), wherein the trusted transmission channel is determined by a preset agreement signed between the data generation terminal 101 and the user terminal 102. Here, the second preset encryption algorithm and the preset digital signature algorithm can both be secure multi-party computing algorithms.
[0075] For the user terminal 102, in one example, the user terminal 102 can be used to send a data acquisition request to the data generation terminal 101 based on a preset agreement signed between the user terminal 102 and the data generation terminal 101 to obtain the original data Sig generator (D) In another example, when the user terminal 102 obtains the original data, it independently selects a storage location for the original data, such as any cloud or local storage, so as to aggregate and manage the user's personal information.
[0076] Here, in order to ensure the authenticity of the user's personal information, the user terminal 102 can also upload the user certificate corresponding to the original data to the blockchain platform 103, so that the data user terminal 104 that wants to use the original data later can verify the authenticity of the original data.
[0077] Secondly, in the data verification stage, the user can upload evidence on the blockchain platform established by the authoritative organization to prove the authenticity of the original data.
[0078] Thus, for the user terminal 102, in one example, the user terminal 102 is used to encrypt (Crypto) and sign (Sign) the attribute (ATTR) of the original data. user ), generate user certificate Certify user =Sign user (Crypto(ATTR)) for third-party organizations such as blockchain platform 103 to verify the authenticity of the original data. In another example, the user terminal 102 can also be used to Certify the user's certificateuser =Sign user (Crypto(ATTR)) is uploaded to the blockchain platform 103 for storage. Among them, the attribute (ATTR) may include the user ID (ID user ), original data hash value (HASH (Sig generator (D))), timestamp and other information. Further, the timestamp is the timestamp when the user terminal 102 uploads the original data.
[0079] The blockchain platform 103 can be used to receive user evidence sent by the user terminal 102 and store it on the evidence platform.
[0080] Then, during the data usage phase, since the real needs of data users 104, such as third-party organizations, are often not the user's personal information, but rather the use of user personal information to verify certain results (such as whether it is the user, whether they are an adult, whether they meet the application criteria in a certain scenario, etc.), users often do not want to authorize the collection of their personal information on too many platforms, nor do they want to over-authorize a particular data user, but at the same time they want to enjoy the service convenience provided by the data user.
[0081] In this way, the data user end 104 can deploy a smart contract in the smart contract layer of the blockchain platform 102, and use privacy computing technology to apply for data query permissions from users. The smart contract ultimately outputs the query results and user evidence in the form of a non-fungible token (NFT), and stipulates the usage cycle or number of NFTs. In this way, the user's personal information on the user end can be used but not visible, which can not only meet the query needs of the data user end 104, but also minimize the exposure of user personal information. At the same time, NFT can not only ensure circulation efficiency, but also ensure that the use and circulation process of the calculation results can be traced.
[0082] Based on this, in one example, the data user 104 is configured to convert the first demand function F1 (factor) corresponding to the query task and the second demand function F2 (factor) corresponding to the task query condition into a calculation circuit C (factor), and then construct the corresponding obfuscation circuit (GC) based on the calculation circuit C. Where factor represents the user personal information required by the data user 104. In another example, the data user 10 is further configured to deploy the obfuscation circuit GC in the first smart contract of the smart contract layer and write information such as the purpose of use and the number of uses (or cycles) of the calculation result into the first smart contract. In yet another example, the data user 10 is further configured to send the first smart contract and the obfuscation table of the GC to the user via the blockchain platform 103.
[0083] In one example, the user terminal 102 is configured to, after confirming its agreement with the query task and the task query conditions in the first smart contract, perform N obfuscated transmissions with the data user terminal 104 based on the identity identifier of the data user terminal 104 in the first smart contract, to obtain an obfuscated value of the authorization identifier corresponding to the query task, i.e., factor. At this time, the obfuscated value can only be recognized by the data user terminal 104 that has performed N obfuscated transmissions with the user terminal 102, so that the NFT can be parsed based on the obfuscated value to obtain the query result. In another example, the user terminal 102 is further configured to input the obfuscated value into the GC in the first smart contract to obtain a second smart contract, and send the second smart contract to the blockchain platform 103.
[0084] In one example, blockchain platform 103 generates a non-fungible token (NFT) based on a second smart contract. The NFT only displays the calculation result and has a limited number of uses (or lifetime). Here, the final query result and user evidence are output in the form of an NFT. The data user 104 is required to use the query result for a specified period or number of times, and upload a true usage history. Because the NFT represents the query result of a privacy-preserving computation, the user does not authorize the data user to access the original data. Instead, the NFT authorizes the data user to determine whether the query result satisfies the task query conditions. Upon receiving the NFT, the data user 103 can provide services to the user 102. In another example, blockchain platform 103 can also receive tracking requests from the user 102 and provide feedback on the NFT's circulation process based on the tracking request. Here, the smart contract can compare and verify the attributes of the original data with the blockchain platform's evidence to ensure the data's authenticity.
[0085] It should be clear that after receiving the NFT, the data usage end 103 can be used to match the authorization identifier in the NFT based on the authorization identifier obtained through N times of blind transmission with the user end 102. If the two match, the plain text of the query result in the NFT can be extracted.
[0086] Thus, by receiving a data query request sent by the data user, the data query request includes a query task and a task query condition of the query task; according to the data query request, a verification instruction is sent to the user terminal related to the query task, the verification instruction includes a first smart contract, the first smart contract is determined by the query task and the task query condition, and the verification instruction is used to instruct the user terminal to provide an authorization identifier corresponding to the task query condition based on the first smart contract; in the case of obtaining a second smart contract feedback from the user terminal, a non-fungible token is sent to the data user terminal according to the authorization identifier in the second smart contract; wherein the non-fungible token includes the query result of the query task and the user certificate, the query result is the result of whether the task query condition is met, the user certificate is provided by the user terminal, the user certificate carries the first data signature of the data generation terminal and the second data signature of the user terminal, the data generation terminal is a platform for generating the original data of the user's personal information of the user terminal, and the user certificate is a certificate representing the authenticity of the original data. This allows users to independently download the original data of their personal information, expanding their choice of personal data storage options. Specifically, users can choose data storage methods, such as local or cloud storage. To ensure that data users can later verify the authenticity of their original data, users must upload the attributes of their original data and a user certificate generated by their second data signature to the blockchain platform to store proof of the authenticity of the original data. This allows third-party blockchain platforms and data users to query the corresponding data through the blockchain platform, enabling users to participate in decision-making regarding the storage, management, and use of their personal information, thus clarifying user rights and responsibilities. Furthermore, the blockchain platform can reliably store the original data of user personal information, ensuring trust in the data processing process. Smart contracts on the blockchain platform also provide data users with a way to request query permissions from the user. The blockchain platform also employs privacy-preserving computing technology to safeguard the privacy of data in smart contracts, making the original data available but invisible to data users, preventing them from privately storing and abusing the original data.
[0087] In addition, in the embodiment of the present application, the query results and user evidence are output in the form of non-homogeneous tokens NFT through smart contracts supported by privacy computing technology. In this way, since the content of the NFT is encrypted, only the data user can recognize the NFT, so the leakage of the output query results and user evidence is avoided, making the original data available but invisible. The resource user cannot obtain the original data and can only obtain the query results of the query task. While meeting the query needs of the data user, it achieves data authorization minimization, protects the privacy and security of user personal information, and avoids the leakage of user personal information. For the data user, through the query results of the query task and the first data signature of the data generation end and the second data signature of the user end carried in the user evidence, even if the data user fails to obtain the original data of the user's personal information, the authenticity of the original data can be verified through the data signatures of multiple parties.
[0088] It should be noted that the data processing method provided in the embodiment of the present application can be applied to the cross-jurisdictional generation of resident health codes. For example, the health departments in other jurisdictions can check the test results of residents without obtaining all the identity information of the residents. The data processing method provided in the embodiment of the present application can also be applied to proof of qualifications for house purchases. For example, the house sales agent does not need to obtain all the user's identity certificates, property certificates, family relationships and other materials. It only needs to state the qualification conditions in the smart contract, the user provides the data, and the contract finally generates a result that meets or does not meet the requirements to the seller. In addition, the data processing method provided in the embodiment of the present application can be applied to aggregated payment or cashier platforms. For example, users or merchants only need to open an account on the aggregation platform, and do not need to open wallets on multiple payment platforms. NFTs can be transmitted between data users and payees. Different data users use one account for cashiering. Conversely, users can use one account to pay multiple data users, so that each data user cannot obtain the original data, but can also obtain the query results of the query task.
[0089] Based on the above data processing system and application scenarios, in order to better illustrate the above content, the following Figures 2 to 5 The data processing method provided in the embodiment of the present application is described.
[0090] First, combine the following Figure 2 The data processing method based on the blockchain platform provided in the embodiment of the present application is described in detail.
[0091] Figure 2 A flowchart of a data processing method based on a blockchain platform provided in an embodiment of the present application.
[0092] like Figure 2 As shown, this data processing can be applied to Figure 1The blockchain platform shown in FIG. 1 may include the following steps:
[0093] Step 210: Receive a data query request from a data user. The data query request includes a query task and a task query condition for the query task. Step 220: Send a verification instruction to the user associated with the query task based on the data query request. The verification instruction includes a first smart contract. The first smart contract is determined by the query task and the task query condition. The verification instruction is used to instruct the user to provide an authorization identifier corresponding to the task query condition based on the first smart contract. Step 230: Upon receiving a second smart contract feedback from the user, send a non-fungible token to the data user based on the authorization identifier in the second smart contract. The non-fungible token includes the query result of the query task and a user certificate. The query result is the result of whether the task query condition is met. The user certificate is provided by the user and carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information. The user certificate is a certificate that represents the authenticity of the original data.
[0094] As a result, users can independently download the original data of their personal information, expanding their choice of personal data storage methods. This means users can choose data storage methods, such as on a third-party blockchain platform. When data users want to query relevant data, they can also make requests to the user through the blockchain platform, enabling the user to participate in decision-making regarding the storage, management, and use of their personal information, thus clarifying user rights and responsibilities. Furthermore, the blockchain platform can reliably store the original data of user personal information, ensuring a trust mechanism in the data processing process. Smart contracts on the blockchain platform also provide data users with a way to request query permissions from the user. The blockchain platform also employs privacy-preserving computing technology to safeguard the privacy of data in smart contracts, making the original data available but invisible to data users, preventing them from privately storing and abusing the original data. In addition, in the embodiment of the present application, the query results and user evidence are output in the form of non-homogeneous tokens NFT through smart contracts supported by privacy computing technology. In this way, since the content of the NFT is encrypted, only the data user can recognize the NFT, so the leakage of the output query results and user evidence is avoided, making the original data available but invisible. The resource user cannot obtain the original data and can only obtain the query results of the query task. While meeting the query needs of the data user, it achieves data authorization minimization, protects the privacy and security of user personal information, and avoids the leakage of user personal information. For the data user, through the query results of the query task and the first data signature of the data generation end and the second data signature of the user end carried in the user evidence, even if the data user fails to obtain the original data of the user's personal information, the authenticity of the original data can be verified through the data signatures of multiple parties.
[0095] The above steps are explained in detail below:
[0096] First, referring to step 210 , in one or more possible embodiments, the task query condition includes at least one of the following: purpose information of data use by the data user, and time information of data use.
[0097] For example, the above purpose information is related to the application scenario, such as purchasing a house, purchasing insurance, etc. The time information of the usage data may include the usage time interval and the usage frequency, that is, the usage may be annual or only counted twice a month.
[0098] Furthermore, query tasks can include whether conditions for purchasing a house are met, whether conditions for purchasing insurance are met, whether conditions for entering and exiting public places are met, and whether the person is of school age. Corresponding query task conditions may include, for example, in a query task on whether conditions for purchasing a house are met, the task query conditions may include, for example, assets greater than 100,000 yuan, social security payments for at least three years, and a stable income; in a query task on whether conditions for purchasing insurance are met, the task query conditions may include, for example, weight not exceeding 70 kilograms and age under 30; in a query task on whether conditions for entering and exiting public places are met, the task query conditions may include, for example, temperature below 36.5 degrees and identification documents; in a query task on whether the person is of school age, the task query conditions may include, for example, age not exceeding 10 years, health certificate, and permanent residence in City A. Here, the corresponding query result can include a yes or no conclusion, that is, for the query task of whether the conditions for purchasing a house are met, the query result is a query task that the conditions for purchasing a house are met or a query task that the conditions for purchasing a house are not met; similarly, for the query task of whether the conditions for purchasing insurance are met, the query result is a query task that the conditions for purchasing insurance are met or the conditions for purchasing insurance are not met.
[0099] In this way, the usage period or number of NFTs can be specified in the smart contract so that users can check them. This can ensure the efficiency of data flow while preventing NFTs from being abused, thereby ensuring data security.
[0100] Furthermore, in one or more other possible embodiments, before step 210, the data processing method may further include:
[0101] Receive user evidence sent by the user terminal, where the user evidence is determined by attribute characteristics of the original data, and the attribute characteristics include at least one of the following: the identity of the user terminal, the hash sequence of the original data, and the timestamp of uploading the original data.
[0102] Here, it should be noted that the attribute characteristics are the attribute characteristics of the original data. After the user evidence is generated based on the original data, the user evidence will also carry its attribute characteristics, and they are at least one of the following: the user's identity identification, the hash sequence of the original data, and the timestamp of uploading the original data.
[0103] Next, with respect to step 220, in one or more possible embodiments, before step 220, the data processing method may further include:
[0104] Step 2401: Obtain an obfuscation circuit and an initial smart contract constructed by a data user. The obfuscation circuit is obtained by converting a first requirement function corresponding to a query task and a second requirement function corresponding to a task query condition. The initial smart contract corresponds to the obfuscation circuit.
[0105] In step 2402, the query task and task query conditions are written into the initial smart contract through the obfuscation circuit to obtain the first smart contract.
[0106] In this way, and by minimizing data authorization, the use of original data can be traced and data privacy is protected. The data user applies to the user for data query through the smart contract layer of the blockchain platform using a confusion circuit. The user end and the data end transmit the data indiscriminately multiple times until the confusion finger is obtained in order to obtain the NFT.
[0107] Based on this, in one example, the above step 2401 may specifically include:
[0108] receiving a deployment request sent by a data user, the deployment request including an obfuscated circuit constructed by the data user;
[0109] Build the initial smart contract corresponding to the data user based on the deployment request;
[0110] Associate the obfuscated circuit and initial smart contract at the data usage end.
[0111] In one or more other possible embodiments, the first smart contract in the embodiment of the present application also includes an identity identifier of the data user end, and the authorization identifier is obtained by the user end based on the identity identifier of the data user end through N times of random transmission between the user end and the data user end, where N is a positive integer greater than 1.
[0112] Then, step 230 is involved. In one or more possible embodiments, step 230 may specifically include:
[0113] Step 2301: Input the authorization identifier in the second smart contract into the obfuscation circuit of the data user to obtain the target obfuscation circuit;
[0114] Step 2302: Using the target obfuscation circuit, the task query condition in the second smart contract and the authorization identifier corresponding to the task query condition are verified to obtain a query result for the query task.
[0115] Step 2303: Generate a non-fungible token based on the user's stored evidence and query results;
[0116] Step 2304: Send the non-fungible token to the data user.
[0117] Therefore, the NFT generated by smart contracts supported by privacy computing technology, the content of the NFT (use, purpose, raw data involved, etc.) is encrypted, and only the data user can understand the calculation results of the NFT. While making it impossible for the data user to obtain the source data, it can also solve the query needs based on the NFT. In this way, data authorization is minimized, and it is difficult for the data user to privately store user personal information, thereby protecting privacy and security.
[0118] In one or more other possible embodiments, the user evidence corresponds to summary data, and the summary data is used to represent the data type of the original data. Based on this, before step 230, the data processing method may further include:
[0119] Step 2501: Filter target summary data related to the query task from a plurality of pre-stored summary data according to the query task, where the target summary data corresponds to the target original data;
[0120] Step 2502: Determine the target user terminal corresponding to the target original data as the user terminal related to the query task.
[0121] Here, the above data types may be amount, age, blood pressure value, etc.
[0122] In addition, the data processing method provided in the embodiment of the present application may further include, after step 230:
[0123] receiving a tracking request sent by a user terminal, the tracking request including an identity identifier of the user terminal;
[0124] According to the identity of the user terminal, obtain the target non-homogeneous token corresponding to the user terminal;
[0125] Send access data corresponding to the target non-fungible token to the user;
[0126] The access data includes at least one of the following: an identity identifier of a data user accessing a target non-fungible token, a transaction record between the target non-fungible token and the data user, a first flow record of the target non-fungible token on the blockchain platform, and a second flow record of the target non-fungible token between the data user and the blockchain platform.
[0127] In this way, NFT can truthfully upload the original data usage records so that users can query and understand how their own user personal information has been accessed, and be informed of the subsequent circulation process of NFT, so that the user end can participate in the decision-making of user personal information in the storage, management and use links, making the responsibility of protecting user rights clear.
[0128] Secondly, based on the same inventive concept, the following Figure 3 The user-side data processing method provided in the embodiment of the present application is described in detail.
[0129] Figure 3 A flowchart of user-side data processing provided in an embodiment of the present application.
[0130] like Figure 3 As shown, this data processing can be applied to Figure 1For the user end shown, the data processing method may specifically include the following steps:
[0131] In step 310, the original data sent by the data generation end is obtained. The original data is determined by the user personal information of the user end and the first digital signature of the data generation end. In step 320, a user certificate is generated according to the attribute characteristics of the original data and the second data signature of the user end. In step 330, the user certificate is sent to the blockchain platform. The user certificate is a certificate that represents the authenticity of the original data. In step 340, the verification instruction sent by the blockchain platform is received. The verification instruction includes a first smart contract. The first smart contract is determined by the query task and the task query condition of the query task in the data query request provided by the data user end. In step 350, the task query condition is marked according to the query task in the first smart contract through the authorization identifier to obtain a second smart contract. In step 360, the second smart contract is sent to the blockchain platform.
[0132] Therefore, for the user side, it can support users to independently download the original data of their personal information, expanding the user's right to choose the storage method of personal data. That is, users can independently choose the data storage method, such as storing it on a third-party blockchain platform. When the data user wants to query the corresponding data, they can also make a request to the user side through the blockchain platform. This enables the user side to participate in the decision-making process of the storage, management and use of user personal information, making the user's rights protection responsibilities clear. In addition, to ensure the authenticity of the original data can be verified, the user side uploads user evidence that can prove the authenticity of the data to the blockchain platform led by an authoritative organization. With the location of personal data verification, the data user can verify the evidence through the blockchain platform to ensure that the data entered by the user is authentic.
[0133] The above steps are explained in detail below:
[0134] First, step 310 is involved. In one or more possible embodiments, step 310 may specifically include:
[0135] Sending a data acquisition request to the data generation end, the data acquisition request is used to request the data generation end to send the original data corresponding to the user end;
[0136] Receive the original data sent by the data generator.
[0137] In this way, users' right to choose the storage method of their personal data is expanded. Personal data is not only stored at the data generation end, but can also be downloaded from the data generation end by the user, and the user can choose the data storage method by himself and independently coordinate personal data.
[0138] Next, step 320 is involved. In one or more possible embodiments, step 320 may specifically include:
[0139] Encrypting the attribute characteristics of the original data using a first preset encryption algorithm to obtain a first encryption result;
[0140] The first encryption result is marked with a second data signature to obtain user evidence.
[0141] It should be noted that since the original data carries the first digital signature of the data generator, after encrypting the original data's attributes, the first encryption result is also marked with the second digital signature to obtain user evidence. This user evidence will then include both the first digital signature of the data generator and the second digital signature of the user. This allows the user to verify the authenticity of the original data using these two digital signatures when using the data. Furthermore, the first preset encryption algorithm may also be secure multi-party computation.
[0142] Furthermore, in step 350, in one or more possible embodiments, the first smart contract further includes an identity identifier of the data user. Before step 350, the data processing method may further include:
[0143] Based on the identity of the data user, N times of blind transmission are performed between the data user to obtain the authorization identifier corresponding to the query task.
[0144] At this time, the authorization identifier can be an obfuscated value, and the user end can send the obfuscated value to the data user end so that the data user can match the authorization identifier in the NFT based on the authorization identifier obtained through N times of obfuscated transmission with the user end. When the two match, the plaintext of the query result in the NFT can be extracted; or, the user end can send the obfuscation table corresponding to the obfuscated value to the data user end so that the data user end can verify the obfuscated value in the NFT based on the obfuscation table. When the two match, the plaintext of the query result in the NFT can be extracted; or, the data user end can obtain the authorization identifier together with the user end when performing N times of obfuscated transmission with the user end. Based on this, the data user end matches the authorization identifier obtained by itself with the authorization identifier in the NFT. When the two match, the plaintext of the query result in the NFT can be extracted.
[0145] Then, in step 360, in one or more possible embodiments, after step 360, the data processing method may further include:
[0146] receiving a first input from a user;
[0147] In response to the first input, a tracking request is sent to the blockchain platform, the tracking request including an identity of the user terminal, the tracking request being used to request the blockchain platform to send access data corresponding to a target non-fungible token, where the target non-fungible token corresponds to the user terminal;
[0148] Receive access data sent by the blockchain platform, where the access data includes at least one of the following: an identity identifier of a data user accessing a target non-fungible token, a transaction record between the target non-fungible token and the data user, a first flow record of the target non-fungible token on the blockchain platform, and a second flow record of the target non-fungible token between the data user and the blockchain platform.
[0149] In this way, through smart contracts supported by privacy-preserving computing technology, query results and user proof are output in the form of non-fungible tokens (NFTs). Since the NFT's content is encrypted, only the data user can identify the NFT, thus preventing the leakage of the output query results and user proof. This makes the original data available but invisible, and resource users cannot access the original data, only the query results of the query task. While meeting the query needs of the data user, it also minimizes data authorization, protects the privacy and security of user personal information, and prevents the leakage of user personal information. Furthermore, all records of NFT usage are recorded on the blockchain platform, allowing users to track the entire flow of NFTs through the blockchain platform, reducing violations on the data user side, preventing the leakage of user personal information, maintaining user data security, and enabling users to participate in decision-making in the storage, management, and use of user personal information, thus clarifying the responsibility for protecting user rights.
[0150] Secondly, based on the same inventive concept, the following Figure 4 The data processing method based on the data generation end provided in the embodiment of the present application is described in detail.
[0151] Figure 4 A flowchart of data processing based on a data generation end is provided in an embodiment of the present application.
[0152] like Figure 4 As shown, this data processing can be applied to Figure 1 At the data generating end shown, the data processing method may specifically include the following steps:
[0153] Step 410, obtaining user personal information from the user terminal; Step 420, encrypting the user personal information using a second preset encryption algorithm to obtain a second encryption result; Step 430, generating the original data of the user personal information based on the second encryption result and the first digital signature of the data generation terminal; Step 440, upon receiving a data acquisition request sent by the user terminal, sending the original data to the user terminal.
[0154] For example, first, the user's personal information can be obtained from the user terminal, where the user's personal information may include at least one of the following: name, ID number, mobile phone number, home address, location information, age, personal assets, health status, etc. Next, the user's personal information is encrypted using a second preset encryption algorithm to obtain a second encryption result. Then, using a preset digital signature algorithm, the original data of the user's personal information is generated based on the second encryption result and the first digital signature of the data generation terminal. Upon receiving a data acquisition request from the user terminal, the original data is transmitted to the user terminal via a trusted transmission channel established between the data generation terminal and the user terminal. The trusted transmission channel is determined by a preset agreement signed between the data generation terminal 101 and the user terminal 102.
[0155] Therefore, original data can be generated based on user personal information to support users to independently download the original data of their personal information, expanding the user's right to choose the storage method of their personal data. That is, users can independently choose the data storage method, such as storing it on a third-party blockchain platform, and when the data user wants to query the corresponding data, they can also make a request to the user end through the blockchain platform, so that the user end can participate in the decision-making of the storage, management and use of user personal information, making the user's rights protection responsibility clear.
[0156] Secondly, based on the same inventive concept, the following Figure 5 The data processing method based on the data user end provided in the embodiment of the present application is described in detail.
[0157] Figure 5 A flowchart of data processing based on a data user end is provided in an embodiment of the present application.
[0158] like Figure 5 As shown, this data processing can be applied to Figure 1 The data processing method may specifically include the following steps:
[0159] Step 510: Send a data query request to the blockchain platform. The data query request includes a query task and a task query condition of the query task. The data query request is used to request the blockchain platform to send the query result of the query task. Step 520: Receive a non-fungible token sent by the blockchain. The non-fungible token includes the query result of the query task and the user certificate. The query result is the result of whether the task query condition is met. The user certificate is provided by the user end. The user certificate carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user certificate is a certificate that represents the authenticity of the original data.
[0160] Therefore, for the data user, through the query results of the query task and the first data signature of the data generation end carried in the user evidence, the second data signature of the user end and other multiple data signatures, even if the data user fails to obtain the original data of the user's personal information, the authenticity of the original data can be verified through the data signatures of multiple parties.
[0161] The above steps are explained in detail below:
[0162] First, referring to step 510, in one or more possible embodiments, the task query condition includes at least one of the following: purpose information of data use by the data user, and time information of data use.
[0163] Then, referring to step 520, in one or more possible embodiments, after step 520, the data processing method may further include:
[0164] Step 530, receiving a second input from the user;
[0165] Step 540: In response to the second data, obtain a query task corresponding to the second input and a task query condition of the query task;
[0166] Step 550: Convert the first demand function corresponding to the query task and the second demand function corresponding to the task query condition using a preset conversion algorithm to obtain a confusion circuit.
[0167] Step 560: Send a deployment request to the blockchain platform. The deployment request includes the obfuscation circuit. The deployment request is used to request the blockchain to write the obfuscation circuit into the initial smart contract corresponding to the data user.
[0168] It should be noted that, in one example, step 510 may be performed after step 540 .
[0169] In addition, it is worth noting that the data signatures in the embodiments of the present application, such as the first data signature at the data generation end and the second data signature at the user end, are used to determine the legitimacy and authenticity of the user data, thereby ensuring that the original data cannot be tampered with in the entire data processing system, so as to ensure that the identities of both parties to the transaction are authentic and reliable.
[0170] Based on the above Figures 2 to 5 In order to better understand the data processing method provided in the embodiment of the present application, the embodiment of the present application specifically takes the qualification certificate for house purchase as an example, where the user end is user A and the data user end is the real estate seller for detailed description, as shown below.
[0171] Relevant regulations require real estate agents to verify users' eligibility to purchase a property, requiring them to provide various supporting documents, including personal information such as their identity, family information, marital status, income level, education level, and employment status. If real estate agents maliciously leak this personal information for profit or fail to properly store it, it poses a significant threat to users' safety and well-being. In practice, users are often left with limited control over where their personal information is stored, how much data they are authorized to access, and how to maintain evidence and pursue accountability if their personal information is leaked.
[0172] Based on this, an embodiment of the present application provides a data processing method, the specific steps of which are as follows.
[0173] Reference Figure 1 ,S1, the police station, civil affairs bureau, social security bureau, bank and other credible data generation terminals can generate user A's original data based on user A's user personal information and the first digital signature of the above data generation terminal.
[0174] In S2, the user downloads the original data from each data generator and selects a trusted storage platform for storage. This can be stored locally or in the cloud. To ensure the security of the original data and facilitate subsequent data user verification of its authenticity, the user uploads the attributes of the original data and a user certificate generated by the user's second data signature to the blockchain platform to store the authenticity certificate representing the original data.
[0175] Based on this, the user generates a user certificate based on the attributes of the original data and the user's second data signature. This certificate is then sent to the blockchain platform. The user certificate serves as proof of the authenticity of the original data. Upon receiving the user certificate, the blockchain platform can store it on the certificate storage platform for later verification of the original data's authenticity.
[0176] In S4, the real estate seller needs only the result, not User A's original data, to verify User A's eligibility. Therefore, the seller can deploy a privacy-preserving computing contract at the smart contract layer of the blockchain platform, write the verification process into an obfuscated circuit, write the circuit into a first smart contract, and send the first smart contract to User A via the blockchain platform.
[0177] In S5, user A performs multiple obfuscated transmissions with the real estate seller, and user A obtains the obfuscated value of the data required by the real estate seller. User A does not need to write the real original data into the first smart contract, but instead fills in the authorization identifier such as the obfuscated value to generate the second smart contract.
[0178] S6, user A sends the generated second smart contract to the smart contract layer in the blockchain platform.
[0179] At step S7, the blockchain platform accesses the user's stored evidence from the evidence storage platform and generates a non-fungible token (NFT) based on the user's stored evidence and the query result calculated based on the authorization identifier in the second smart contract. Specifically, the query result is calculated by the smart contract layer and represented as an NFT. The NFT represents the privacy-preserving calculation of User A's eligibility to purchase a property (eligible / ineligible). User A does not authorize the property seller to obtain the original data, but rather authorizes the seller to obtain the calculated result, i.e., the query result of whether User A meets or does not meet the eligibility requirements, through the NFT.
[0180] S8, the blockchain platform sends the NFT to the real estate seller, the real estate seller parses the NFT and obtains the result of user A’s home purchase qualifications (qualified / not qualified) to provide subsequent services to user A.
[0181] It should be noted that privacy-preserving computing technology supports NFTs generated by smart contracts. Only the real estate seller, who knows the obfuscated value, can decipher them. Other on-chain nodes can only see the NFT's ownership but not its meaning. The user's intention to purchase a property remains confidential. If other institutions wish to use the NFT, they must authorize the transaction from the real estate seller. The transaction process is recorded on the blockchain platform, allowing User A to track the entire NFT's flow, reducing data violations, preventing personal information leaks, and maintaining user data security.
[0182] In summary, users can independently download the original data of their personal information, expanding their choice of personal data storage methods. This means users can choose data storage methods, such as on a third-party blockchain platform. When data users wish to query relevant data, they can also request it from the user through the blockchain platform. This allows users to participate in decision-making regarding the storage, management, and use of their personal information, clarifying user rights and responsibilities. Furthermore, the blockchain platform can reliably store the original data of users' personal information, ensuring a trust mechanism in the data processing process. Smart contracts on the blockchain platform also provide data users with a way to request query permissions from the user. The blockchain platform also employs privacy-preserving computing technology to safeguard the privacy of data in smart contracts, making the original data available but invisible to data users, preventing them from privately storing and abusing it. In addition, in the embodiment of the present application, the query results and user evidence are output in the form of non-homogeneous tokens NFT through smart contracts supported by privacy computing technology. In this way, since the content of the NFT is encrypted, only the data user can recognize the NFT, so the leakage of the output query results and user evidence is avoided, making the original data available but invisible. The resource user cannot obtain the original data and can only obtain the query results of the query task. While meeting the query needs of the data user, it achieves data authorization minimization, protects the privacy and security of user personal information, and avoids the leakage of user personal information. For the data user, through the query results of the query task and the first data signature of the data generation end and the second data signature of the user end carried in the user evidence, even if the data user fails to obtain the original data of the user's personal information, the authenticity of the original data can be verified through the data signatures of multiple parties.
[0183] Based on the same inventive concept, the present application provides a data processing device. Figure 6 Provide detailed explanation.
[0184] Figure 6 This is a structural diagram of a data processing device based on a blockchain platform provided by an embodiment of the present application.
[0185] In some embodiments of the present application, Figure 6 The data processing device 60 shown can be arranged in Figure 1 In the blockchain platform shown.
[0186] like Figure 6 As shown, the data processing device 60 may specifically include:
[0187] Receiving module 601, configured to receive a data query request sent by a data user, the data query request including a query task and a task query condition of the query task;
[0188] A sending module 602 is configured to send a verification instruction to a user terminal associated with the query task based on the data query request. The verification instruction includes a first smart contract, which is determined by the query task and the task query condition. The verification instruction is configured to instruct the user terminal to provide an authorization identifier corresponding to the task query condition based on the first smart contract.
[0189] The sending module 602 is further configured to, upon obtaining the second smart contract feedback from the user end, send a non-fungible token to the data user end according to the authorization identifier in the second smart contract;
[0190] Among them, non-homogeneous tokens include the query results of the query task and user evidence. The query result is the result of whether the task query conditions are met. The user evidence is provided by the user end. The user evidence carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user evidence is a certificate that represents the authenticity of the original data.
[0191] The data processing device 60 in the embodiment of the present application is described in detail below.
[0192] In one or more optional embodiments, the data processing device 60 in the embodiment of the present application may further include a first acquisition module and a writing module; wherein,
[0193] A first acquisition module is used to obtain an obfuscation circuit and an initial smart contract constructed by a data user. The obfuscation circuit is obtained by converting a first requirement function corresponding to the query task and a second requirement function corresponding to the task query condition. The initial smart contract corresponds to the obfuscation circuit.
[0194] The writing module is used to write the query task and the task query condition into the initial smart contract through the obfuscation circuit to obtain the first smart contract.
[0195] In another or more optional embodiments, the data processing device 60 in the embodiment of the present application may further include a construction module and an association module; wherein,
[0196] The receiving module 601 may also be configured to receive a deployment request sent by a data user, the deployment request including the obfuscation circuit constructed by the data user;
[0197] The construction module is used to build the initial smart contract corresponding to the data user according to the deployment request;
[0198] The association module is used to associate the obfuscated circuit and the initial smart contract at the storage data user end.
[0199] In one or more optional embodiments, the data processing device 60 in the embodiment of the present application may further include an input module, a verification module and a generation module; wherein,
[0200] An input module, configured to input the authorization identifier in the second smart contract into the obfuscation circuit of the data-consuming end to obtain a target obfuscation circuit;
[0201] a verification module, configured to verify the task query condition in the second smart contract and the authorization identifier corresponding to the task query condition through a target obfuscation circuit, to obtain a query result of the query task;
[0202] The generation module is used to generate non-fungible tokens based on the query results of user evidence storage and query tasks;
[0203] The sending module 602 is also used to send non-homogeneous tokens to the data user.
[0204] In one or more optional embodiments, the data processing device 60 in the embodiment of the present application may further include a screening module and a determination module; wherein,
[0205] A screening module is used to screen target summary data related to the query task from a plurality of pre-stored summary data according to the query task, when the user stores corresponding summary data, and the summary data is used to represent the data type of the original data, wherein the target summary data corresponds to the target original data;
[0206] The determination module is used to determine the target user terminal corresponding to the target original data as the user terminal related to the query task.
[0207] In one or more optional embodiments, the first smart contract also includes an identity identifier of the data user end, and the authorization identifier is obtained by the user end through N times of blind transmission between the user end and the data user end based on the identity identifier of the data user end, where N is a positive integer greater than 1.
[0208] In one or more optional embodiments, the data processing device 60 in the embodiment of the present application may further include a second acquisition module; wherein,
[0209] The receiving module 601 may also be configured to receive a tracking request sent by a user terminal, the tracking request including an identity identifier of the user terminal;
[0210] The second acquisition module is used to obtain the target non-fungible token corresponding to the user terminal according to the identity identifier of the user terminal;
[0211] The sending module 602 can also be used to send access data corresponding to the target non-fungible token to the user terminal; wherein,
[0212] The access data includes at least one of the following: an identity identifier of a data user accessing a target non-fungible token, a transaction record between the target non-fungible token and the data user, a first flow record of the target non-fungible token on the blockchain platform, and a second flow record of the target non-fungible token between the data user and the blockchain platform.
[0213] In one or more optional embodiments, the user evidence is determined by attribute characteristics of the original data, and the attribute characteristics include at least one of the following: an identity identifier of the user terminal, a hash sequence of the original data, and a timestamp of uploading the original data;
[0214] The task query condition includes at least one of the following: purpose information of data use by the data user and time information of data use.
[0215] Thus, the blockchain platform can be used to reliably store the original data of user personal information, ensuring the trust mechanism in the data processing process, and providing a way for the data user to apply for query permissions from the user end through the smart contract of the blockchain platform. Here, the blockchain platform also uses privacy computing technology to protect the privacy and security of the data in the smart contract, making the original data available but invisible to the data user end, preventing the data user end from privately storing and abusing the original data. In addition, in the embodiment of the present application, the smart contract supported by privacy computing technology outputs the query results and user evidence in the form of a non-homogeneous token NFT. In this way, since the content of the NFT is encrypted, only the data user end can recognize the NFT, so the leakage of the output query results and user evidence is avoided, making the original data available but invisible. The resource user cannot obtain the original data, but can only obtain the query results of the query task. While meeting the query needs of the data user end, it achieves the minimization of data authorization, protects the privacy and security of user personal information, and avoids the leakage of user personal information.
[0216] Based on the same inventive concept, the present application provides a data processing device. Figure 7 Provide detailed explanation.
[0217] Figure 7 It is a structural diagram of a user-side data processing device provided in one embodiment of the present application.
[0218] In some embodiments of the present application, Figure 7 The data processing device 70 shown can be arranged in Figure 1 In the user terminal shown.
[0219] like Figure 7 As shown, the data processing device 70 may specifically include:
[0220] An acquisition module 701 is configured to acquire original data sent by a data generation terminal, where the original data is determined by the user's personal information and the first digital signature of the data generation terminal.
[0221] A generating module 702 is configured to generate a user certificate based on the attribute characteristics of the original data and the second data signature of the user terminal;
[0222] The sending module 703 is used to send the user certificate to the blockchain platform. The user certificate is a certificate that represents the authenticity of the original data;
[0223] A receiving module 704 is configured to receive a verification instruction sent by the blockchain platform, the verification instruction including a first smart contract, the first smart contract being determined by a query task and a task query condition of the query task in a data query request provided by the data user;
[0224] The marking module 705 is used to mark the task query condition according to the query task in the first smart contract through the authorization identifier to obtain the second smart contract;
[0225] The sending module 703 is further used to send the second smart contract to the blockchain platform.
[0226] The data processing device 70 in the embodiment of the present application is described in detail below.
[0227] In one or more optional embodiments, the sending module 703 in the embodiment of the present application may also be used to send a data acquisition request to the data generation end, where the data acquisition request is used to request the data generation end to send original data corresponding to the user end;
[0228] The receiving module 704 may also be configured to receive original data sent by the data generating end.
[0229] In another or more optional embodiments, the data processing device 70 in the embodiment of the present application may further include an encryption module and a processing module; wherein,
[0230] An encryption module, configured to encrypt the attribute characteristics of the original data using a first preset encryption algorithm to obtain a first encryption result;
[0231] The processing module is used to mark the first encryption result through the second data signature to obtain user evidence.
[0232] In one or more optional embodiments, the acquisition module 701 can also be used to, when the first smart contract also includes the identity of the data user, perform N times of blind transmission with the data user based on the identity of the data user to obtain the authorization identifier corresponding to the query task.
[0233] In one or more optional embodiments, the receiving module 704 is further configured to receive a first input from a user;
[0234] The sending module 703 is further configured to, in response to the first input, send a tracking request to the blockchain platform, the tracking request including the identity of the user terminal, the tracking request being used to request the blockchain platform to send access data corresponding to a target non-fungible token, where the target non-fungible token corresponds to the user terminal;
[0235] The receiving module 704 is also used to receive access data sent by the blockchain platform, and the access data includes at least one of the following: the identity of the data user who accesses the target non-fungible token, the transaction record between the target non-fungible token and the data user, the first flow record of the target non-fungible token on the blockchain platform, and the second flow record of the target non-fungible token between the data user and the blockchain platform.
[0236] Therefore, for the user side, it can support users to independently download the original data of user personal information, expand the user's right to choose the storage method of personal data, that is, users can independently choose the data storage method, such as storing it on a third-party blockchain platform, and when the data user wants to query the corresponding data, it can also make a request to the user side through the blockchain platform, so that the user side can participate in the decision-making of user personal information in the storage, management and use links, so that the responsibility of protecting user rights is clear.
[0237] Based on the same inventive concept, the present application provides a data processing device. Figure 8 Provide detailed explanation.
[0238] Figure 8 It is a structural diagram of a data processing device based on a data generation end provided by an embodiment of the present application.
[0239] In some embodiments of the present application, Figure 8 The data processing device 80 shown can be arranged in Figure 1 In the data generation end shown.
[0240] like Figure 8 As shown, the data processing device 80 may specifically include:
[0241] Acquisition module 801, used to obtain user personal information of the user terminal;
[0242] The encryption module 802 is configured to encrypt the user's personal information using a second preset encryption algorithm to obtain a second encryption result;
[0243] A generating module 803 is configured to generate original data of the user's personal information based on the second encryption result and the first digital signature of the data generating terminal;
[0244] The sending module 804 is configured to send the original data to the user terminal upon receiving a data acquisition request sent by the user terminal.
[0245] Therefore, the data generation end can generate original data based on the user personal information of the user end, which can support the user to independently download the user's personal information, and expand the user's right to choose the storage method of personal data, that is, the user can independently choose the data storage method such as storing it on a third-party blockchain platform.
[0246] Based on the same inventive concept, the present application provides a data processing device. Figure 9 Provide detailed explanation.
[0247] Figure 9 It is a structural diagram of a data processing device based on a data usage end provided by an embodiment of the present application.
[0248] In some embodiments of the present application, Figure 9 The data processing device 90 shown can be arranged in Figure 1 The data usage shown is in the terminal.
[0249] like Figure 9 As shown, the data processing device 90 may specifically include:
[0250] A sending module 901 is used to send a data query request to the blockchain platform. The data query request includes a query task and a task query condition of the query task. The data query request is used to request the blockchain platform to send the query result of the query task;
[0251] Receiving module 902 is used to receive the non-fungible token sent by the blockchain. The non-fungible token includes the query result of the query task and the user evidence. The query result is the result of whether the task query condition is met. The user evidence is provided by the user end. The user evidence carries the first data signature of the data generation end and the second data signature of the user end. The data generation end is the platform that generates the original data of the user's personal information on the user end. The user evidence is a certificate that represents the authenticity of the original data.
[0252] The data processing device 90 in the embodiment of the present application is described in detail below.
[0253] In one or more optional embodiments, the task query condition includes at least one of the following: purpose information of data use by the data user, and time information of data use.
[0254] In another or more optional embodiments, the data processing device 90 in the embodiment of the present application may further include a conversion module; wherein,
[0255] The receiving module 904 is further configured to receive a second input from the user;
[0256] The acquisition module 901 is further configured to, in response to the second data, acquire a query task and a task query condition of the query task corresponding to the second input;
[0257] a conversion module, configured to convert a first demand function corresponding to the query task and a second demand function corresponding to the task query condition using a preset conversion algorithm to obtain a confusion circuit;
[0258] The sending module 903 is further used to send a deployment request to the blockchain platform. The deployment request includes the obfuscation circuit. The deployment request is used to request the blockchain to write the obfuscation circuit into the initial smart contract corresponding to the data user.
[0259] Therefore, for the data user, through the query results of the query task and the first data signature of the data generation end carried in the user evidence, the second data signature of the user end and other multiple data signatures, even if the data user fails to obtain the original data of the user's personal information, the authenticity of the original data can be verified through the data signatures of multiple parties.
[0260] Based on the same inventive concept, the present application also provides a computer device. Figure 10 Provide detailed explanation.
[0261] Figure 10 It is a structural diagram of a computer device provided in one embodiment of the present application.
[0262] like Figure 10 As shown, the computer device may include at least one of the following involved in the embodiments of the present application: a blockchain platform device, a user terminal device, a data generation terminal device, and a data usage terminal device. The computer device may include a processor 1001 and a memory 1002 storing computer program instructions.
[0263] Specifically, the processor 1001 may include a central processing unit (CPU), or an application-specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.
[0264] The memory 1002 may include a large-capacity memory for data or instructions. By way of example and not limitation, the memory 1002 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive, or a combination of two or more of these. Where appropriate, the memory 1002 may include a removable or non-removable (or fixed) medium. Where appropriate, the memory 1002 may be inside or outside the integrated gateway disaster recovery device. In a specific embodiment, the memory 1002 is a non-volatile solid-state memory. In a specific embodiment, the memory 1002 includes a solid-state memory (ROM). Where appropriate, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM), or a flash memory, or a combination of two or more of these.
[0265] The processor 1001 implements any one of the data processing methods in the above embodiments by reading and executing computer program instructions stored in the memory 1002 .
[0266] In one example, the computer device may further include a communication interface 1003 and a bus 1010. Figure 10 As shown, the processor 1001, the memory 1002, and the communication interface 1003 are connected via a bus 1010 and communicate with each other.
[0267] The communication interface 1003 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.
[0268] Bus 1010 comprises hardware, software or both, and the parts of flow control device are coupled to each other.For example, and not limitation, bus can comprise accelerated graphics port (AGP) or other graphics buses, enhanced industrial standard architecture (EISA) bus, front side bus (FSB), hypertransport (HT) interconnection, industrial standard architecture (ISA) bus, infinite bandwidth interconnection, low pin count (LPC) bus, memory bus, micro channel architecture (MCA) bus, peripheral component interconnection (PCI) bus, PCI-Express (PCI-X) bus, serial advanced technology attachment (SATA) bus, video electronics standard association local (VLB) bus or other suitable bus or two or more of these combinations.In suitable cases, bus 1010 can comprise one or more buses.Although the present application embodiment describes and shows specific bus, the application considers any suitable bus or interconnection.
[0269] The data processing device can execute the data processing method in the embodiment of the present application, thereby realizing the combination Figures 1 to 9 Described data processing method and device.
[0270] In addition, in conjunction with the data processing methods in the above embodiments, embodiments of the present application may provide a computer-readable storage medium for implementation. The computer-readable storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the data processing methods in the above embodiments is implemented.
[0271] It should be understood that the present application is not limited to the specific configurations and processes described above and illustrated in the figures. For the sake of brevity, a detailed description of known methods is omitted here. In the above embodiments, several specific steps are described and illustrated as examples. However, the method process of the present application is not limited to the specific steps described and illustrated. Those skilled in the art can make various changes, modifications, and additions, or change the order of the steps after understanding the spirit of the present application.
[0272] The functional blocks shown in the above block diagram can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application specific integrated circuits (ASICs), appropriate firmware, plug-ins, function cards, etc. When implemented in software, the elements of the present application are programs or code segments that are used to perform the required tasks. Programs or code segments can be stored in machine-readable media, or transmitted on a transmission medium or a communication link by a data signal carried in a carrier wave. "Machine-readable media" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROMs, flash memories, erasable ROMs (EROMs), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, etc. The code segments can be downloaded via computer networks such as the Internet, intranets, etc.
[0273] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps. In other words, the steps can be performed in the order mentioned in the embodiments, or in a different order, or several steps can be performed simultaneously.
[0274] The above is only a specific implementation method of the present application. Those skilled in the art can clearly understand that for the convenience and brevity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the scope of protection of the present application is not limited to this. Any technician familiar with this technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the scope of protection of this application.
Claims
1. A data processing method, applied to a blockchain platform, comprising: Receive a data query request sent by a data user, wherein the data query request includes a query task and a task query condition of the query task; Sending a verification instruction to a user terminal related to the query task according to the data query request, wherein the verification instruction includes a first smart contract, the first smart contract being determined by the query task and the task query condition, and the verification instruction is used to instruct the user terminal to provide an authorization identifier corresponding to the task query condition based on the first smart contract; Upon obtaining the second smart contract feedback from the user, sending a non-fungible token to the data user according to the authorization identifier in the second smart contract; Among them, the non-fungible token includes the query result of the query task and the user evidence. The query result is the result of whether the task query condition is met. The user evidence is provided by the user terminal. The user evidence carries the first data signature of the data generation end and the second data signature of the user terminal. The data generation end is a platform that generates the original data of the user's personal information of the user terminal. The user evidence is a certificate that represents the authenticity of the original data.
2. The method according to claim 1, characterized in that Before sending a verification instruction to a user terminal related to the query task according to the data query request, the method further includes: Obtaining an obfuscation circuit and an initial smart contract constructed by the data user, wherein the obfuscation circuit is obtained by converting a first requirement function corresponding to the query task and a second requirement function corresponding to the task query condition, and the initial smart contract corresponds to the obfuscation circuit; The query task and the task query condition are written into the initial smart contract through the obfuscation circuit to obtain the first smart contract.
3. The method according to claim 2, characterized in that The obtaining of the obfuscated circuit and the initial smart contract constructed by the data user includes: receiving a deployment request sent by the data user, wherein the deployment request includes an obfuscation circuit constructed by the data user; Constructing an initial smart contract corresponding to the data user according to the deployment request; The obfuscation circuit of the data user end and the initial smart contract are stored in association.
4. The method according to claim 3, characterized in that The sending of the non-fungible token to the data user according to the authorization identifier in the second smart contract includes: Inputting the authorization identifier in the second smart contract into the obfuscation circuit of the data user end to obtain a target obfuscation circuit; Verifying the task query condition in the second smart contract and the authorization identifier corresponding to the task query condition through the target obfuscation circuit to obtain a query result of the query task; Generate a non-fungible token based on the user's stored evidence and the query results of the query task; Sending the non-fungible token to the data user.
5. The method according to claim 1, wherein The user evidence corresponds to summary data, and the summary data is used to represent the data type of the original data; Before sending a verification instruction to a user terminal related to the query task according to the data query request, the method further includes: According to the query task, target summary data related to the query task is screened from a plurality of pre-stored summary data, wherein the target summary data corresponds to the target original data; A target user terminal corresponding to the target original data is determined as the user terminal related to the query task.
6. The method according to claim 1, characterized in that The first smart contract also includes the identity of the data user end, and the authorization identifier is obtained by the user end through N times of random transmission between the user end and the data user end based on the identity of the data user end, where N is a positive integer greater than 1.
7. The method according to claim 1, characterized in that The method further comprises: receiving a tracking request sent by the user terminal, wherein the tracking request includes an identity identifier of the user terminal; Obtaining a target non-fungible token corresponding to the user terminal according to the identity identifier of the user terminal; Sending access data corresponding to the target non-fungible token to the user terminal; wherein, The access data includes at least one of the following: an identity identifier of a data user accessing the target non-fungible token, a transaction record between the target non-fungible token and the data user, a first flow record of the target non-fungible token on the blockchain platform, and a second flow record of the target non-fungible token between the data user and the blockchain platform.
8. The method according to any one of claims 1 to 7, characterized in that The user evidence is determined by the attribute characteristics of the original data, and the attribute characteristics include at least one of the following: the identity of the user terminal, the hash sequence of the original data, and the timestamp of uploading the original data; The task query condition includes at least one of the following: purpose information of the data user using the data and time information of the data using.
9. A data processing method, applied to a user terminal corresponding to the blockchain platform according to any one of claims 1 to 8, comprising: Acquire original data sent by a data generation end, where the original data is determined by user personal information of the user end and a first digital signature of the data generation end; Generate user evidence based on the attribute characteristics of the original data and the second data signature of the user terminal; Sending the user certificate to the blockchain platform, where the user certificate is a certificate that represents the authenticity of the original data; receiving a verification instruction sent by the blockchain platform, the verification instruction including the first smart contract, the first smart contract being determined by a query task in a data query request provided by a data user and a task query condition of the query task; According to the query task in the first smart contract, the task query condition is marked by the authorization identifier to obtain a second smart contract; Send the second smart contract to the blockchain platform.
10. The method according to claim 9, characterized in that The obtaining of the original data sent by the data generating end includes: Sending a data acquisition request to the data generation end, wherein the data acquisition request is used to request the data generation end to send original data corresponding to the user end; Receive the original data sent by the data generating end.
11. The method according to claim 9, characterized in that Generating user evidence according to the attribute characteristics of the original data and the second data signature of the user terminal includes: Encrypting the attribute characteristics of the original data using a first preset encryption algorithm to obtain a first encryption result; The first encryption result is marked with the second data signature to obtain user evidence.
12. The method according to claim 9, characterized in that The first smart contract also includes the identity of the data user; Before obtaining the second smart contract, the method further includes: Based on the identity identifier of the data user terminal, N times of blind transmission are performed between the data user terminal to obtain the authorization identifier corresponding to the query task.
13. The method according to claim 9, characterized in that The method further comprises: receiving a first input from a user; In response to the first input, sending a tracking request to the blockchain platform, the tracking request including the identity of the user terminal, the tracking request being used to request the blockchain platform to send access data corresponding to a target non-fungible token, where the target non-fungible token corresponds to the user terminal; Receive access data sent by the blockchain platform, the access data including at least one of the following: an identity identifier of a data user accessing the target non-fungible token, a transaction record between the target non-fungible token and the data user, a first flow record of the target non-fungible token on the blockchain platform, and a second flow record of the target non-fungible token between the data user and the blockchain platform.
14. A data processing method, applied to a data generation terminal corresponding to the blockchain platform according to any one of claims 1 to 8, comprising: Obtain user personal information on the user side; Encrypting the user personal information using a second preset encryption algorithm to obtain a second encryption result; generating original data of the user's personal information based on the second encryption result and the first digital signature of the data generating end; When a data acquisition request sent by the user terminal is received, the original data is sent to the user terminal.
15. A data processing method, applied to a data user terminal corresponding to the blockchain platform according to any one of claims 1 to 8, comprising: Sending a data query request to the blockchain platform, the data query request including a query task and a task query condition of the query task, the data query request being used to request the blockchain platform to send a query result of the query task; Receive a non-fungible token sent by the blockchain, where the non-fungible token includes a query result of the query task and a user certificate, where the query result is whether the task query condition is met, and the user certificate is provided by the user terminal, and the user certificate carries a first data signature of a data generation terminal and a second data signature of the user terminal. The data generation terminal is a platform that generates original data of the user's personal information of the user terminal, and the user certificate is a certificate that represents the authenticity of the original data.
16. The method according to claim 15, characterized in that The task query condition includes at least one of the following: purpose information of the data user using the data and time information of the data using.
17. The method according to claim 15, characterized in that The method further comprises: receiving a second input from the user; In response to the second data, obtaining a query task corresponding to the second input and a task query condition of the query task; The first demand function corresponding to the query task and the second demand function corresponding to the task query condition are converted by a preset conversion algorithm to obtain a confusion circuit; Sending a deployment request to the blockchain platform, the deployment request including the obfuscation circuit, the deployment request being used to request the blockchain to write the obfuscation circuit into an initial smart contract corresponding to the data user.
18. A data processing device, applied to a blockchain platform, comprising: A receiving module, configured to receive a data query request sent by a data user, wherein the data query request includes a query task and a task query condition of the query task; a sending module, configured to send a verification instruction to a user terminal related to the query task according to the data query request, wherein the verification instruction includes a first smart contract, the first smart contract being determined by the query task and the task query condition, and the verification instruction being configured to instruct the user terminal to provide an authorization identifier corresponding to the task query condition based on the first smart contract; The sending module is further configured to, upon obtaining the second smart contract fed back by the user terminal, send the non-fungible token to the data user terminal according to the authorization identifier in the second smart contract; Among them, the non-fungible token includes the query result of the query task and the user evidence. The query result is the result of whether the task query condition is met. The user evidence is provided by the user terminal. The user evidence carries the first data signature of the data generation end and the second data signature of the user terminal. The data generation end is a platform that generates the original data of the user's personal information of the user terminal. The user evidence is a certificate that represents the authenticity of the original data.
19. A data processing device, applied to a user terminal corresponding to the blockchain platform according to claim 18, the device comprising: an acquisition module, configured to acquire original data sent by a data generation end, wherein the original data is determined by the user personal information of the user end and the first digital signature of the data generation end; A generating module, configured to generate a user certificate based on the attribute characteristics of the original data and the second data signature of the user terminal; A sending module, configured to send the user certificate to the blockchain platform, where the user certificate is a certificate that indicates the authenticity of the original data; a receiving module, configured to receive a verification instruction sent by the blockchain platform, the verification instruction including the first smart contract, the first smart contract being determined by a query task in a data query request provided by a data user and a task query condition of the query task; a marking module, configured to mark the query task in the first smart contract using an authorization identifier to obtain a second smart contract; The sending module is further used to send the second smart contract to the blockchain platform.
20. A data processing device, applied to a data generation terminal corresponding to the blockchain platform according to claim 18, the device comprising: The acquisition module is used to obtain the user's personal information on the user side; an encryption module, configured to encrypt the user personal information using a second preset encryption algorithm to obtain a second encryption result; a generating module, configured to generate original data of the user personal information based on the second encryption result and the first digital signature of the data generating end; The sending module is used to send the original data to the user terminal when receiving the data acquisition request sent by the user terminal.
21. A data processing device, applied to a data user terminal corresponding to the blockchain platform according to claim 18, the device comprising: A sending module is used to send a data query request to the blockchain platform, wherein the data query request includes a query task and a task query condition of the query task, and the data query request is used to request the blockchain platform to send the query result of the query task; A receiving module is used to receive a non-fungible token sent by the blockchain, wherein the non-fungible token includes a query result of the query task and a user certificate, wherein the query result is a result of whether the task query condition is met, and the user certificate is provided by the user terminal, and the user certificate carries a first data signature of a data generation terminal and a second data signature of the user terminal. The data generation terminal is a platform for generating original data of the user's personal information of the user terminal, and the user certificate is a certificate representing the authenticity of the original data.
22. A computer device, comprising: a processor and a memory storing computer program instructions; When the processor executes the computer program instructions, it implements the data processing method according to any one of claims 1 to 8, the data processing method according to any one of claims 9 to 13, the data processing method according to claim 14, or the data processing method according to any one of claims 15 to 17.
23. A storage medium having computer program instructions stored thereon, wherein when the computer program instructions are executed by a processor, the data processing method according to any one of claims 1 to 8, the data processing method according to any one of claims 9 to 13, the data processing method according to claim 14, or the data processing method according to any one of claims 15 to 17 is implemented.
Citation Information
Patent Citations
Method, apparatus and storage medium for processing privacy data based on block chain
CN109214197A
Block chain mining method, device, and node apparatus
US20190312877A1