Information management method, device and editable blockchain management system

Abstract

The present disclosure provides an information management method, relating to the field of blockchain technology. The information management method is applied to a privileged node of an editable blockchain management system, the editable blockchain management system including an editable first blockchain and a non-editable second blockchain. The information management method comprises: obtaining information to be encrypted in response to an encryption instruction; determining publicly available information and non-publicly available information from the information to be encrypted; jointly encrypting the non-publicly available information with multiple privileged nodes that received the encryption instruction to obtain ciphertext of the non-publicly available information; generating target information based on the publicly available information and the ciphertext; establishing a mapping relationship between the multiple privileged nodes that encrypt the non-publicly available information and the target information; storing the target information in the first blockchain and storing the mapping relationship in the second blockchain. The present disclosure also provides an information management device and an editable blockchain management system.

Description

Technical Field

[0001] The present disclosure relates to the field of blockchain technology, and in particular to an information management method, device, editable blockchain management system, electronic device, storage medium, and program product. Background Art

[0002] As a decentralized, tamper-resistant, and traceable distributed ledger system, blockchain has been applied to all aspects of society. Its core concept is to shift from a centralized accounting system to a distributed ledger that is backed up by everyone, and to enhance the ledger's tamper-resistance and security through public oversight.

[0003] Introducing blockchain technology into information management systems can improve the reliability of information management. However, different institutions have different requirements for information management. For example, some institutions have data with certain special characteristics. For these institutions, the information uploaded to the blockchain needs to be regulated, and some of the information uploaded to the blockchain can be blocked according to actual needs. Traditional blockchain technology cannot meet this requirement. Therefore, how to introduce blockchain technology into the information management systems of these institutions while meeting their special information management needs has become a technical problem that needs to be solved urgently. Summary of the Invention

[0004] In view of the above problems, the present disclosure provides an information management method, device, editable blockchain management system, electronic device, storage medium and program product.

[0005] According to a first aspect of the present disclosure, there is provided an information management method, wherein the information management method is applied to at least one of a plurality of privileged nodes of an editable blockchain management system, the editable blockchain management system including an editable first blockchain and a non-editable second blockchain, the information management method comprising:

[0006] Responding to the encryption instruction, obtaining information to be encrypted;

[0007] Determining publicly available information and non-public available information from the information to be encrypted;

[0008] encrypting the non-public information by combining multiple privileged nodes that have received the encryption instruction to obtain a ciphertext of the non-public information;

[0009] generating target information according to the publicly available information and the ciphertext;

[0010] Establishing a mapping relationship between a plurality of privileged nodes for encrypting the non-public information and the target information;

[0011] The target information is stored in the first blockchain, and the mapping relationship is stored in the second blockchain.

[0012] According to an embodiment of the present disclosure, each of the plurality of privileged nodes has at least one key block, and different privileged nodes have different key blocks; the encryption instruction is sent by at least one management node in the editable blockchain management system to N of the plurality of privileged nodes in a random manner;

[0013] The plurality of privileged nodes jointly receiving the encryption instruction encrypt the non-public information to obtain a ciphertext of the non-public information, including:

[0014] Obtaining the key block of each of the N privileged nodes that received the encryption instruction;

[0015] Combining the obtained key blocks into an encryption key;

[0016] Encrypting the non-public information according to a preset encryption algorithm based on the encryption key;

[0017] Wherein, N is a positive integer, and M>N≥2, and M is the total number of privileged nodes in the editable blockchain management system.

[0018] According to an embodiment of the present disclosure, the encryption key includes an SM4 encryption key, the encryption algorithm includes an SM4 encryption algorithm, and N=4.

[0019] According to an embodiment of the present disclosure, the mapping relationship includes the combination order adopted by the key blocks when composing the encryption key, and the identity information of the privileged node to which each key block belongs.

[0020] A second aspect of the present disclosure provides an information management method, wherein the information management method is applied to at least one management node of an editable blockchain management system, the editable blockchain management system including an editable first blockchain and a non-editable second blockchain, wherein a smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain, the information management method comprising:

[0021] Monitoring the smart contract to determine whether an update operation will be initiated on the first blockchain;

[0022] When the update operation is about to occur on the first blockchain, obtaining update content matching the update operation;

[0023] When non-public information exists in the acquired update content, an encrypted instruction is issued to multiple privileged nodes in the editable blockchain management system.

[0024] According to an embodiment of the present disclosure, when the update operation to be performed on the first blockchain includes an edit operation, the management node also issues an edit instruction to at least one of the privileged nodes when issuing the encryption instruction, and the edit instruction is configured as follows:

[0025] causing the privileged node to use the target information as target content of the editing operation and initiate the editing operation on the block to be edited through a chameleon trapdoor;

[0026] The hash values ​​of the edited content in the block are the same before and after editing.

[0027] According to an embodiment of the present disclosure, at least one of the blocks in the first blockchain is configured with an editing coefficient, and the smart contract is further configured to:

[0028] When initiating the editing operation, configuring the editing coefficient of the block to be edited to a first value, wherein the first value is configured to enable at least one ordinary node of the editable blockchain management system to determine that the content of the block is in an untrusted state based on the first value when reading the content of the block;

[0029] When the editing operation is completed, the editing coefficient of the edited block is configured to a second value, and the second value is configured so that at least one ordinary node of the editable blockchain management system can determine that the content in the block is in a trusted state based on the second value when reading the content in the block.

[0030] A third aspect of the present disclosure provides an information management device, wherein the information management device is applied to at least one of a plurality of privileged nodes of an editable blockchain management system, the editable blockchain management system including an editable first blockchain and a non-editable second blockchain, the information management device comprising:

[0031] A first acquisition module, configured to acquire information to be encrypted in response to an encryption instruction;

[0032] A first processing module, configured to determine publicly available information and non-publicly available information from the information to be encrypted;

[0033] an encryption module, configured to jointly encrypt the non-public information with a plurality of privileged nodes that have received the encryption instruction, so as to obtain a ciphertext of the non-public information;

[0034] An information generation module, configured to generate target information based on the publicly available information and the ciphertext;

[0035] a mapping relationship generating module, configured to establish a mapping relationship between a plurality of privileged nodes for encrypting the non-public information and the target information;

[0036] The second processing module is used to store the target information in the first blockchain and store the mapping relationship in the second blockchain.

[0037] A fourth aspect of the present disclosure provides an information management device, wherein the information management device is applied to at least one management node of an editable blockchain management system, the editable blockchain management system including an editable first blockchain and a non-editable second blockchain, wherein a smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain, the information management device comprising:

[0038] a monitoring module, configured to monitor the smart contract to determine whether an update operation will be initiated on the first blockchain;

[0039] A second acquisition module is configured to, when the update operation is about to occur on the first blockchain, acquire update content that matches the update operation;

[0040] The third processing module is used to issue an encryption instruction to multiple privileged nodes in the editable blockchain management system when non-public information exists in the obtained update content.

[0041] A fifth aspect of the present disclosure provides an editable blockchain management system, wherein the editable blockchain management system includes a first blockchain, a second blockchain, at least one management node, and multiple privileged nodes, wherein a smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain; the at least one privileged node includes a first information management device, and the at least one management node includes a second information management device; the first information management device includes: a first acquisition module, a first processing module, an encryption module, an information generation module, a mapping relationship generation module, and a second processing module; the second information management device includes: a monitoring module, a second acquisition module, and a third processing module;

[0042] The monitoring module is used to monitor the smart contract to determine whether an update operation will be initiated on the first blockchain;

[0043] The second acquisition module is configured to acquire update content matching the update operation when the update operation is about to occur on the first blockchain;

[0044] The third processing module is configured to issue an encryption instruction to a plurality of privileged nodes in the editable blockchain management system when non-public information is present in the acquired update content;

[0045] The first acquisition module is used to obtain the information to be encrypted in response to the encryption instruction;

[0046] The first processing module is used to determine publicly available information and non-publicly available information from the information to be encrypted;

[0047] The encryption module is used to jointly encrypt the non-public information with multiple privileged nodes that have received the encryption instruction to obtain a ciphertext of the non-public information;

[0048] The information generation module is used to generate target information based on the publicly available information and the ciphertext;

[0049] The mapping relationship generating module is used to establish a mapping relationship between the N privileged nodes that encrypt the non-public information and the target information;

[0050] The second processing module is used to store the target information in the first blockchain and store the mapping relationship in the second blockchain.

[0051] The sixth aspect of the present disclosure provides an electronic device, comprising: one or more processors; a memory for storing one or more programs, wherein when the one or more programs are executed by the one or more processors, the one or more processors execute the above-mentioned information management method.

[0052] The seventh aspect of the present disclosure further provides a computer-readable storage medium having executable instructions stored thereon, which, when executed by a processor, causes the processor to execute the above-mentioned information management method.

[0053] The eighth aspect of the present disclosure further provides a computer program product, including a computer program, which implements the above-mentioned information management method when executed by a processor.

[0054] One or more of the above embodiments have the following advantages or beneficial effects:

[0055] Public information is stored in an open and transparent manner on the first blockchain for query and use by other nodes; non-public information is stored in the form of ciphertext on the first blockchain, and the encrypted information is stored in the form of a mapping relationship (for example, including privileged nodes used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of on-chain information can be achieved, while the confidentiality of non-public information can be guaranteed to prevent information leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0056] The above contents and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0057] Figure 1 Schematic diagram illustrating application scenarios of the information management method, apparatus, editable blockchain management system, electronic device, storage medium, and program product in some embodiments of the present disclosure;

[0058] Figure 2 Schematically illustrates a flow chart of an information management method in some embodiments of the present disclosure;

[0059] Figure 3 A flowchart schematically illustrates the interaction between a management node and a privileged node in some embodiments of the present disclosure;

[0060] Figure 4 Schematically illustrates a flow chart for encrypting non-public information in some embodiments of the present disclosure;

[0061] Figure 5 Schematically illustrates a flow chart for configuring editing coefficients in some embodiments of the present disclosure;

[0062] Figure 6 Schematically shows a flow chart of an information management method in some other embodiments of the present disclosure;

[0063] Figure 7 Schematic diagram showing the structure of the information management device in some embodiments of the present disclosure

[0064] Figure 8 Schematically shows a structural block diagram of an information management device in some other embodiments of the present disclosure;

[0065] Figure 9 The following schematically shows a block diagram of an electronic device suitable for implementing the information management method in some embodiments of the present disclosure. DETAILED DESCRIPTION

[0066] To facilitate understanding of the solutions of the embodiments of the present application, a brief introduction to the relevant concepts is first given as follows:

[0067] First, blockchain technology.

[0068] Blockchain technology, also known as distributed ledger technology, is an emerging technology that uses multiple computing devices to jointly maintain a complete distributed database by "keeping records" (i.e., recording transaction data). Due to its decentralized nature (i.e., lack of a central node), openness and transparency, the ability of every computing device to participate in database recording, and the rapid synchronization of data between computing devices, blockchain technology has been widely applied in numerous fields.

[0069] Currently, blockchains can be categorized by deployment method as public and consortium chains. Public chains are blockchains that can be accessed by any device worldwide, or where any device can participate in the consensus verification process for transactions. Consortium chains, also known as consortium blockchains, are alliances formed by participating members of a specific blockchain. Business transactions between members are recorded in the blockchain, with limited access and permissions. In the embodiments of this disclosure, unless otherwise specified, blockchain generally refers to a consortium chain.

[0070] Second, blockchain nodes.

[0071] The blockchain in the disclosed embodiments is participated by multiple blockchain nodes (hereinafter referred to as nodes). A node is a device with communication and storage functions, such as a device that stores blockchain data. Each node can both receive and generate information. Different nodes maintain communication and data synchronization by maintaining a common blockchain. Specifically, in a blockchain system, any node can generate new blockchain data based on transaction-related data sent by a client and broadcast it to other nodes, which can then verify the blockchain data. When all nodes in the blockchain system reach a consensus, the new blockchain data can be added to the blockchain.

[0072] Optionally, the node in the embodiment of the present disclosure can be understood as a processing unit. In one implementation, the node can be a physical device, such as a server or a computer. In another implementation, the node can be a virtual computer; a virtual computer is a general term for the operating environment virtualized by software in all types of virtualized devices, and this concept includes virtual machines and containers. In other implementations, the node in the embodiment of the present disclosure can be a process (process) or a thread (thread); a thread is the smallest unit that the operating system can perform calculation scheduling. A thread is contained in a process and is the actual operating unit in the process; a process is an operation activity of a program in a computer on a certain data set, and is the basic unit for resource allocation and scheduling of the system.

[0073] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are merely exemplary and are not intended to limit the scope of the present disclosure. In the detailed description below, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of well-known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0074] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise," "include," etc. used herein indicate the presence of the features, steps, operations, and / or components, but do not exclude the presence or addition of one or more other features, steps, operations, or components.

[0075] All terms used herein (including technical and scientific terms) have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0076] When expressions such as "at least one of A, B and C, etc." are used, they should generally be interpreted in accordance with the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0077] It should be noted that the information management method, device, editable blockchain management system, electronic device, storage medium, and program product provided by the embodiments of the present disclosure relate to the field of blockchain technology. The information management method, device, editable blockchain management system, electronic device, storage medium, and program product provided by the embodiments of the present disclosure can be applied to the financial field or any field other than the financial field. For example, the information management method, device, editable blockchain management system, electronic device, storage medium, and program product provided by the embodiments of the present disclosure can be applied to the docking business with welfare centers in the financial field. The embodiments of the present disclosure do not limit the application fields of the information management method, device, editable blockchain management system, electronic device, storage medium, and program product.

[0078] In the technical solution disclosed herein, the collection, storage, use, processing, transmission, provision, disclosure and application of user personal information involved comply with the provisions of relevant laws and regulations, take necessary confidentiality measures, and do not violate public order and good morals.

[0079] Currently, some institutions' information management systems require that on-chain information be supervised and promptly corrected. However, traditional blockchain technology, due to its tamper-resistant nature, struggles to meet these requirements. For example, if there is an erroneous transfer due to human error, or if there is maliciously disseminated illegal information, the tamper-resistant nature of the blockchain makes it difficult to modify this information, which can result in significant losses.

[0080] To address these issues, an example proposed an editable blockchain management system. In this system, two blockchains coexist: one is called the editable blockchain, and the other is called the standard blockchain. The editable blockchain stores and manages information that needs to be uploaded, while allowing privileged nodes to modify the information on the chain. The standard blockchain verifies and records all operations performed on the editable blockchain, ensuring the legitimacy and traceability of all operations on the editable blockchain.

[0081] However, for some institutions with sensitive data, such as welfare centers, the aforementioned editable blockchain management system still struggles to meet practical needs. For example, after receiving donations from the public, a welfare center needs to upload important donation-related information (such as donation location, donation time, donation content, and service evaluation) to the blockchain, thereby making the welfare center's operational information transparent in an open and traceable manner. However, certain sensitive data, such as that containing the donor's identity, cannot be directly disclosed on the blockchain and must be shielded to protect privacy.

[0082] In view of this, an embodiment of the present disclosure provides an information management method, which can shield part of the information on the chain according to actual needs, thereby protecting the data from being leaked.

[0083] Specifically, the information management method is applied to at least one of multiple privileged nodes of an editable blockchain management system, the editable blockchain management system includes an editable first blockchain and a non-editable second blockchain, and the information management method includes: obtaining information to be encrypted in response to an encryption instruction; determining public information and non-public information from the information to be encrypted; jointly encrypting the non-public information with multiple privileged nodes that have received the encryption instruction to obtain a ciphertext of the non-public information; generating target information based on the public information and the ciphertext; establishing a mapping relationship between N privileged nodes that encrypt the non-public information and the target information; storing the target information in the first blockchain, and storing the mapping relationship in the second blockchain.

[0084] In the disclosed embodiment, publicly available information is stored in an open and transparent manner on the first blockchain for query and use by other nodes; non-public information is stored in the form of ciphertext on the first blockchain, and the encrypted information is stored in the form of a mapping relationship (for example, including privileged nodes used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of on-chain information can be achieved, and at the same time, the confidentiality of non-public information can be guaranteed to prevent information leakage.

[0085] Figure 1 The application scenario diagram of the information management method, device, editable blockchain management system, electronic device, storage medium and program product in some embodiments of the present disclosure is schematically shown.

[0086] like Figure 1 As shown, the application scenario 100 according to this embodiment may include an editable blockchain management system 100, which includes a first blockchain 110, a second blockchain 120, at least one management node 130, multiple privileged nodes 140, and multiple ordinary nodes 150. For example, the first blockchain 110 may include the above-mentioned editable blockchain, and the second blockchain may include the above-mentioned ordinary blockchain.

[0087] At least one management node 130, multiple privileged nodes 140, and multiple ordinary nodes 150 can simultaneously serve as participants in the first blockchain 110 and the second blockchain 120. The content of a block on the first blockchain 110 can be edited by the privileged node 140 through a consensus algorithm.

[0088] Exemplarily, the editable blockchain management system of the disclosed embodiment can be applied to the docking business between financial institutions and welfare centers.

[0089] Optionally, privileged nodes 140 can be selected from ordinary nodes 150 through a voting mechanism. Privileged nodes 140 have the authority to supervise, inspect, and moderately modify the content on the first blockchain 110. Ordinary nodes 150 can be transaction nodes that perform ordinary transaction operations. Ordinary nodes 150 only perform ordinary transaction information operations on the chain, such as uploading transfer information to the chain. Ordinary nodes 150 do not participate in editing the first blockchain 110.

[0090] Smart contracts can be deployed on the second blockchain 120. When privileged nodes 140 initiate edits to the first blockchain 110, they can authenticate themselves through the smart contract. This authentication method can include a Chameleon Trapdoor algorithm and a Proof of Activity (PoA) consensus mechanism, allowing privileged nodes 140 to decide on edit content through voting. The specific editing process is described in detail below and is not detailed here. In general, privileged nodes 140 authenticate themselves through the second blockchain 120 and edit information on the first blockchain 110.

[0091] The network 160 is used to provide a medium for communication links between the at least one management node 130, the plurality of privileged nodes 140, and the plurality of ordinary nodes 150. The network 160 may include various connection types, such as wired or wireless communication links or fiber optic cables.

[0092] It should be noted that the information management methods provided in some embodiments of the present disclosure may generally be executed by the privileged node 140. Accordingly, the information management apparatuses corresponding to these embodiments may generally be provided in the privileged node 140. The privileged node 140 may include a server or a server cluster.

[0093] The information management methods provided in other embodiments of the present disclosure may generally be executed by the management node 130. Accordingly, the information management devices corresponding to these embodiments may generally be provided in the management node 130. The management node 130 may include a server or a server cluster.

[0094] It should be understood that Figure 1 The number of management nodes 130, privileged nodes 140, and common nodes 150 in FIG. 1 is merely illustrative. Any number of management nodes 130, privileged nodes 140, and common nodes 150 may be provided based on implementation requirements.

[0095] The following will be based on Figure 1 The scene described by Figures 2 to 5 First, the information management method applied in the privileged node in the disclosed embodiment is described in detail.

[0096] Figure 2 The flowchart of the information management method in some embodiments of the present disclosure is schematically shown. Figure 3 The flowchart schematically illustrates the interaction between the management node and the privileged node in some embodiments of the present disclosure.

[0097] Combine Figure 2 and Figure 3 As shown, the information management method of this embodiment includes steps S210 to S260.

[0098] It should be noted that although the steps in the drawings of the present disclosure are shown in sequence as indicated by the arrows, these steps are not necessarily performed in the order indicated by the arrows. Unless otherwise specified herein, there is no strict order restriction on the execution of these steps, and they can be performed in other orders. Moreover, at least some of the steps in the figure may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily performed at the same time, but can be performed at different times, and their execution order is not necessarily sequential, but can be performed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0099] In step S210, in response to the encryption instruction, information to be encrypted is obtained.

[0100] Encryption instructions can be issued by the management node through monitoring a smart contract deployed on the second blockchain. The smart contract can record update operations occurring on the first blockchain, such as edit operations and the upload of new information. When these update operations, such as edit operations, occur, the management node can first determine whether the edited content contains non-public information. If non-public information is present, the management node can first issue encryption instructions to multiple privileged nodes, causing them to encrypt the edited content. Afterwards, the management node can issue edit instructions, allowing the privileged nodes to initiate the edit operation, thereby preventing the leakage of non-public information.

[0101] In step S220, publicly available information and non-publicly available information are determined from the information to be encrypted.

[0102] Non-public information may include sensitive information. For example, for a welfare center, non-public information may include the identity of the donor. Public information may refer to other information other than non-public information, such as the donation location. In the embodiments of the present disclosure, public information and non-public information can be distinguished from the information to be encrypted based on the fields of the information to be encrypted.

[0103] In step S230 , the plurality of privileged nodes that have received the encryption instruction are united to encrypt the non-public information to obtain a ciphertext of the non-public information.

[0104] In the disclosed embodiments, for each privileged node, the privileged node can collaborate with multiple privileged nodes, including the privileged node, to encrypt non-public information. For example, multiple key blocks can be deployed in a dispersed manner across multiple privileged nodes, with different key blocks deployed on different privileged nodes. When at least one privileged node receives an encryption instruction, the privileged node can broadcast it to other privileged nodes, thereby obtaining key blocks stored on privileged nodes that have also received the encryption instruction. The privileged node can then combine the obtained key blocks into a key and use the key to encrypt non-public information.

[0105] Optionally, in the disclosed embodiment, after a privileged node completes encryption, multiple privileged nodes can verify the encryption result through a consensus mechanism. For example, these multiple privileged nodes can simultaneously synthesize a key through the above steps and use this key to encrypt. When the encryption results of more than 50% of the privileged nodes are consistent, the consensus can be confirmed to have been passed, and the encryption can be determined to be valid.

[0106] In step S240, target information is generated based on the publicly available information and the ciphertext.

[0107] In the disclosed embodiment, non-public information is processed into ciphertext through the above-mentioned encryption operation, while public information retains its original data. After recombining the ciphertext and public information, the data after partially encrypting the information to be encrypted is obtained, which is also the target information.

[0108] In step S250 , a mapping relationship is established between the plurality of privileged nodes for encrypting non-public information and the target information.

[0109] In the disclosed embodiment, the identities of the privileged nodes that encrypt non-public information can be recorded. At the same time, the manner in which multiple key blocks obtained from these multiple privileged nodes are combined into keys can also be recorded, thereby generating a mapping relationship between this information and non-public information, and the mapping relationship can be stored in a smart contract on the second blockchain.

[0110] In step S260, the target information is stored in the first blockchain, and the mapping relationship is stored in the second blockchain.

[0111] In the disclosed embodiment, publicly available information is stored in an open and transparent manner on the first blockchain for query and use by other nodes; non-public information is stored in the form of ciphertext on the first blockchain, and the encrypted information is stored in the form of a mapping relationship (for example, including privileged nodes used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of on-chain information can be achieved, and at the same time, the confidentiality of non-public information can be guaranteed to prevent information leakage.

[0112] The following combination Figures 2 to 5 The information management method of the embodiment of the present disclosure is further described.

[0113] Figure 4 The flowchart of encrypting non-public information in some embodiments of the present disclosure is schematically shown.

[0114] In some embodiments, each of the plurality of privileged nodes has at least one key block, and different privileged nodes have different key blocks. The encryption instruction is sent by at least one management node in the editable blockchain management system to N of the plurality of privileged nodes in a random manner. Where N is a positive integer, M>N≥2, and M is the total number of privileged nodes in the editable blockchain management system.

[0115] like Figure 4 As shown, step S230 includes steps S231 to S233.

[0116] In step S231 , a key block of each of the N privileged nodes that received the encryption instruction is obtained.

[0117] In the embodiment of the present disclosure, when at least one privileged node receives an encryption instruction, it can broadcast it to other privileged nodes to obtain the key blocks stored on the privileged nodes that also receive the encryption instruction.

[0118] In step S232, the obtained key blocks are combined into an encryption key.

[0119] In step S233, the non-public information is encrypted according to a preset encryption algorithm based on the encryption key.

[0120] In the embodiment of the present disclosure, the key blocks held by each privileged node can be independent of each other. That is, for any one of the multiple privileged nodes, the key block held by the privileged node can be combined with the key blocks of any multiple privileged nodes, rather than only being combined with the key blocks held by a specific privileged node, so that the keys of multiple privileged nodes can be freely combined.

[0121] In an embodiment of the present disclosure, the management node may send encryption instructions to a specific number of random privileged nodes based on the encryption algorithm used. In some specific embodiments, the encryption key includes an SM4 encryption key, the encryption algorithm includes an SM4 encryption algorithm, and N=4. That is, during each encryption, the management node may send encryption instructions to four random privileged nodes. Accordingly, each privileged node may store a 32-bit key block, thereby forming a 128-bit SM4 encryption key.

[0122] It should be noted that during each encryption process, the key blocks obtained and used by the multiple privileged nodes performing encryption must be consistent, so that these multiple privileged nodes use the same key for encryption. For example, among multiple privileged nodes, privileged nodes P1-P4 receive an encryption instruction, and the key blocks held by privileged nodes P1-P4 are M1-M4 respectively. Then, for each privileged node P1-P4, it uses the key composed of key blocks M1-M4 for encryption.

[0123] During each encryption, since the management node sends encryption instructions to a random privileged node, there is a high probability that the key blocks used for encryption are different for the two encryption processes. Therefore, the keys used for encryption are also different for the two encryption processes, which helps to increase the difficulty of cracking and improve the security of information.

[0124] For example, when encrypting non-public information A1, among multiple privileged nodes, privileged nodes P1-P4 receive an encryption instruction. The key blocks held by privileged nodes P1-P4 are M1-M4, respectively. Therefore, for any of privileged nodes P1-P4, the encryption key is composed of key blocks M1-M4. When encrypting non-public information A2, among multiple privileged nodes, privileged nodes P2-P5 receive an encryption instruction. The key blocks held by privileged nodes P2-P5 are M2-M5, respectively. Therefore, for any of privileged nodes P2-P5, the encryption key is composed of key blocks M2-M5.

[0125] Optionally, in addition to key blocks, the system parameters FK and fixed parameters CK required in the SM4 encryption algorithm can also be deployed in a dispersed manner in multiple privileged nodes, and these system parameters, fixed parameters and key blocks are independent of each other, so they can be freely combined and used during encryption.

[0126] In some specific embodiments, the mapping relationship includes the combination order used by the key blocks when composing the encryption key, and the identity information of the privileged node to which each key block belongs.

[0127] For example, when privileged node P1 jointly with privileged nodes P2 to P4 encrypts non-public information, a mapping relationship can be generated. The mapping relationship may include the identity information of each of the privileged nodes P1 to P4, and may also include the specific order of M1-M2-M3-M4 in which the key blocks are combined into the encryption key.

[0128] In some specific embodiments, when the update operation to be performed on the first blockchain includes an edit operation, the management node also issues an edit instruction to the at least one privileged node when issuing the encrypted instruction.

[0129] In some specific embodiments, the information management method further includes step S310.

[0130] In step S310, in response to the edit instruction, an edit operation is initiated on the block to be edited through the Chameleon trapdoor using the target information as the target content of the edit operation, wherein the hash values ​​of the edited content in the block before and after the edit are the same.

[0131] In some specific embodiments, the Chameleon trapdoor generation method is as follows: first, the base g of the Chameleon hash function and two large prime numbers p and q satisfying p=kq+1 are made public on the entire network, where k is an arbitrary integer. Each privileged node P i Generate random numbers x privately in sequence i As the shard of the trapdoor, the public key h is calculated according to the following formula:

[0132]

[0133] Where n is the number of trapdoor shards. In order to ensure that the trapdoor shard x i The specific generation process of the public key h is as follows: the first privileged node P1 publishes the first public key shard h1 on the smart contract. The public key shard h1 can be calculated by the following formula:

[0134]

[0135] The second privileged node P2 calculates the second public key shard h2 based on the latest public key shard h1 on the smart contract. The second public key shard h2 can be calculated using the following formula:

[0136]

[0137] By analogy, the i-th node is based on h i-1 To calculate the latest public key fragment h i , until the synthesis operation of public key h and trapdoor x is completed. Among them, public key h is calculated by the following formula:

[0138]

[0139] The trapdoor x is calculated by the following formula:

[0140] x=x1·x2…x n (5)

[0141] Due to the difficulty of solving the discrete logarithm problem, ordinary nodes cannot calculate the trapdoor shard x by obtaining the public key h and cardinality g (or p / q) on the public network. i and trapdoor x, so the confidentiality of the trapdoor can be guaranteed.

[0142] When the content m of a block on the blockchain needs to be edited to m′, each privileged node P i First, the trapdoor shard x needs to be broadcasted offline i , after receiving the trapdoor fragment x to be verified sent by other privileged nodes i ', the trapdoor x' to be verified is synthesized offline according to formula (5). The trapdoor x' to be verified can be calculated by the following formula:

[0143]

[0144] At the same time, the correctness of the trapdoor x′ to be verified is verified on the smart contract. Optionally, the correctness of the trapdoor x′ to be verified can be verified using a homomorphic-chameleon hash function.

[0145] For example, all privileged nodes first vote to publish the homomorphic value of the trapdoor x′ to be verified on the smart contract. The homomorphic value of the trapdoor x′ to be verified can be calculated by the following formula:

[0146]

[0147] If the following formula is satisfied, the correctness of the trapdoor x′ is to be verified.

[0148]

[0149] f(x)=g x mod q (8)

[0150] Subsequently, the privileged node calculates a new hash collision r' using the correct trapdoor x (i.e., the verified trapdoor x'), the content m of the block to be edited before editing, the current hash collision r, and the target content m' after editing. The basic principle is as follows:

[0151] H=g m ·h r =g m′ ·h r′ mod p (9)

[0152] r′=F′(m,m′,r)=(mm′+xr)x -1 mod q (10)

[0153] According to the new hash collision r′, the content of the block to be edited can be edited from m to m′ without changing the hash value H. At this point, the entire editing process is completed.

[0154] After the editing operation is completed, the Chameleon Trapdoor needs to be regenerated and the latest public key is published on the normal chain. The specific generation process is the same as the above embodiment, and then a new round of block editing operations can be carried out.

[0155] In some specific embodiments, for a block being edited, an editing coefficient can be configured for the block so that when the block is in the editing process, the information therein will not be adopted by other nodes (such as ordinary nodes), thereby ensuring the accuracy and validity of the data.

[0156] Specifically, at least one block in the first blockchain is configured with an editing coefficient, Figure 5 The flowchart of configuring editing coefficients in some embodiments of the present disclosure is schematically shown. Figure 5 As shown, the smart contract is further configured to execute steps S320 and S330.

[0157] In step S320, when an editing operation is initiated, the editing coefficient of the block to be edited is configured to a first value, and the first value is configured so that at least one ordinary node of the editable blockchain management system can determine that the content in the block is in an untrusted state based on the first value when reading the content in the block.

[0158] In step S330, when the editing operation is completed, the editing coefficient of the edited block is configured to a second value, and the second value is configured to enable at least one ordinary node of the editable blockchain management system to determine that the content in the block is in a trusted state based on the second value when reading the content in the block.

[0159] In the embodiment of the present disclosure, the editing coefficient s is configured for the block in the smart contract, so the above hash value calculation formula is H=g m *h r Change to H=(g m *h r ) s , where the editing coefficient s can be determined by the privileged node in the smart contract SC x Publicly released on.

[0160] Before the editing operation is initiated, the default value of the editing coefficient s can be set to 1, that is, the second value mentioned above is 1. Since the hash value calculation formula of the block is H=(g m *h r ) s ,Therefore, the block hash value remains unchanged, and ordinary nodes determine that the content in the block is in a trusted state, and ordinary nodes can read from it normally.

[0161] When a privileged node initiates an edit operation, the smart contract automatically sets the edit coefficient of the corresponding block to 0, which is the first value mentioned above. m *h r ) s Therefore, the hash value of the block is 1. At this time, the hash value of the block cannot be verified. Ordinary nodes determine that the content in the block is in an untrusted state and will not adopt the information in the block.

[0162] In summary, the disclosed embodiments provide a method for managing funds in welfare centers. This method, while enabling information disclosure, oversight, and traceability, overcomes the existing blockchain transaction system's inability to modify block content. More importantly, it enables oversight and partial shielding of information on the blockchain (or about to be on the blockchain), preventing sensitive information from being leaked and ensuring data security.

[0163] Other embodiments of the present disclosure further provide an information management method, which is applied to at least one management node of an editable blockchain management system. The editable blockchain management system includes an editable first blockchain and a non-editable second blockchain. A smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain. The update operations may include, for example, the above-mentioned editing operations and operations of uploading new information to the chain.

[0164] Figure 6 The flowchart of the information management method in other embodiments of the present disclosure is schematically shown.

[0165] Combine Figure 3 and Figure 6 As shown, the information management method in these embodiments includes steps S410 to S430.

[0166] In step S410, the smart contract is monitored to determine whether an update operation will be initiated on the first blockchain.

[0167] In step S420, when an update operation is about to occur on the first blockchain, update content matching the update operation is obtained. Otherwise, this determination is terminated.

[0168] In step S430, if the acquired update content contains non-public information, an encryption instruction is issued to multiple privileged nodes in the editable blockchain management system. Otherwise, no encryption instruction is issued, i.e., the encryption step is skipped.

[0169] In the disclosed embodiment, update operations on the first blockchain may include editing the content of existing blocks on the first blockchain, as well as adding new block data to the first blockchain (i.e., uploading new information to the blockchain). The smart contract can record the entire process of the above operations occurring on the first blockchain. Therefore, by monitoring the smart contract, it is possible to monitor the initiation of the above operations and then issue encryption instructions through steps S310 to S330 to encrypt the non-public information before the above operations.

[0170] In the embodiment of the present disclosure, for an editing operation, the updated content may be the target content after editing. For an operation of adding new block data to the first blockchain, the updated content may refer to the content in the new block.

[0171] Optionally, when non-public information is present in the updated content, the management node may send encryption instructions to a specific number of random privileged nodes based on a preset encryption algorithm. For example, the encryption algorithm may include the SM4 encryption algorithm. In this case, the management node may send encryption instructions to four random privileged nodes, causing these four privileged nodes to encrypt the non-public information according to the encryption method of the aforementioned embodiment. That is, each of the privileged nodes that receives the encryption instruction may execute steps S210 to S260 of the aforementioned embodiment. The specific execution process can be found in the aforementioned embodiment and will not be repeated here.

[0172] In the disclosed embodiment, by monitoring the smart contract deployed on the second blockchain, it is possible to promptly discover the update operation to be initiated on the first blockchain. Furthermore, when it is found that the updated content contains non-public information, an encryption instruction can be sent to enable the privileged node to store the public information in an open and transparent manner on the first blockchain for other nodes to query and use; the non-public information is stored in the form of ciphertext on the first blockchain, and the encryption method is stored in the form of a mapping relationship (for example, including the privileged node used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of the information on the chain can be achieved, and at the same time, the confidentiality of the non-public information can be guaranteed to prevent information leakage.

[0173] In some specific embodiments, when the update operation to be performed on the first blockchain includes an edit operation, the management node, when issuing the encrypted instruction, also issues an edit instruction to at least one privileged node. The edit instruction is configured to cause the privileged node to initiate an edit operation on the block to be edited, using the target information as the target content of the edit operation through a chameleon trapdoor. The hash value of the edited content in the block before and after the edit is the same. In other words, the privileged node is caused to execute step S310 in the above-described embodiment. The details can be found in the above-described embodiment and are not further described here.

[0174] In some specific embodiments, at least one block in the first blockchain is configured with an edit coefficient, and the smart contract is further configured to:

[0175] When initiating an editing operation, the editing coefficient of the block to be edited is configured to a first value, and the first value is configured so that at least one ordinary node of the editable blockchain management system can determine that the content in the block is in an untrusted state based on the first value when reading the content in the block.

[0176] When the editing operation is completed, the editing coefficient of the edited block is configured to a second value, and the second value is configured so that at least one ordinary node of the editable blockchain management system can determine that the content in the block is in a trusted state based on the second value when reading the content in the block.

[0177] In an embodiment of the present disclosure, an edit coefficient s is configured for a block in a smart contract. Before an edit operation is initiated, the default value of the edit coefficient s can be set to 1, which is the second value mentioned above. At this time, the block hash value remains unchanged, and ordinary nodes determine that the content in the block is in a trustworthy state, and ordinary nodes can read from it normally. When a privileged node initiates an edit operation, the smart contract automatically sets the edit coefficient of the corresponding block to 0, which is the first value mentioned above. At this time, the hash value of the block cannot pass verification, and ordinary nodes determine that the content in the block is in an untrustworthy state. Ordinary nodes will not adopt the information in the block.

[0178] It should be noted that for details not yet fully described in the embodiments of the present disclosure, reference can be made to the aforementioned embodiments, and thus they will not be repeated here.

[0179] Based on the above information management method, some embodiments of the present disclosure further provide an information management device, which is applied to at least one of multiple privileged nodes of an editable blockchain management system, wherein the editable blockchain management system includes an editable first blockchain and a non-editable second blockchain. Figure 8 The device is described in detail.

[0180] Figure 7 The structural block diagram of the information management device in some embodiments of the present disclosure is schematically shown.

[0181] like Figure 7 As shown, the information management device 700 of this embodiment includes a first acquisition module 710 , a first processing module 720 , an encryption module 730 , an information generation module 740 , a mapping relationship generation module 750 and a second processing module 760 .

[0182] The first acquisition module 710 is used to obtain the information to be encrypted in response to the encryption instruction. In one embodiment, the first acquisition module 710 can be used to execute the step S210 described above, which will not be repeated here.

[0183] The first processing module 720 is used to determine publicly available information and non-publicly available information from the information to be encrypted. In one embodiment, the first processing module 720 can be used to execute step S220 described above, which will not be repeated here.

[0184] The encryption module 730 is used to encrypt the non-public information in conjunction with multiple privileged nodes that receive the encryption instruction to obtain the ciphertext of the non-public information. In one embodiment, the encryption module 730 can be used to perform step S230 described above, which will not be repeated here.

[0185] The information generation module 740 is used to generate target information based on the publicly available information and the ciphertext. In one embodiment, the information generation module 740 can be used to execute step S240 described above, which will not be described in detail here.

[0186] The mapping relationship generating module 750 is used to establish a mapping relationship between the N privileged nodes that encrypt the non-public information and the target information. In one embodiment, the mapping relationship generating module 750 can be used to execute the step S250 described above, which will not be repeated here.

[0187] The second processing module 760 is used to store the target information in the first blockchain and store the mapping relationship in the second blockchain. In one embodiment, the second processing module 760 can be used to perform step S260 described above, which will not be repeated here.

[0188] According to an embodiment of the present disclosure, any multiple modules among the first acquisition module 710, the first processing module 720, the encryption module 730, the information generation module 740, the mapping relationship generation module 750, and the second processing module 760 can be combined into one module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in one module. According to an embodiment of the present disclosure, at least one of the first acquisition module 710, the first processing module 720, the encryption module 730, the information generation module 740, the mapping relationship generation module 750, and the second processing module 760 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application specific integrated circuit (ASIC), or can be implemented by hardware or firmware such as any other reasonable way of integrating or packaging the circuit, or implemented in any one of the three implementation modes of software, hardware, and firmware, or in an appropriate combination of any of them. Alternatively, at least one of the first acquisition module 710, the first processing module 720, the encryption module 730, the information generation module 740, the mapping relationship generation module 750 and the second processing module 760 can be at least partially implemented as a computer program module, and when the computer program module is run, the corresponding function can be executed.

[0189] In the disclosed embodiment, publicly available information is stored in an open and transparent manner on the first blockchain for query and use by other nodes; non-public information is stored in the form of ciphertext on the first blockchain, and the encrypted information is stored in the form of a mapping relationship (for example, including privileged nodes used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of on-chain information can be achieved, and at the same time, the confidentiality of non-public information can be guaranteed to prevent information leakage.

[0190] In some specific embodiments, each of the plurality of privileged nodes has at least one key block, and different privileged nodes have different key blocks. The encryption instruction is sent by at least one management node in the editable blockchain management system to N of the plurality of privileged nodes in a random manner.

[0191] The encryption module 730 is specifically configured to perform the following steps:

[0192] Obtain a key block for each of the N privileged nodes that received the encryption instruction.

[0193] The encryption key is composed of the obtained key blocks.

[0194] Based on the encryption key, non-public information is encrypted according to the preset encryption algorithm.

[0195] Wherein, N is a positive integer, and M>N≥2, and M is the total number of privileged nodes in the editable blockchain management system.

[0196] In some specific embodiments, the encryption key includes an SM4 encryption key, the encryption algorithm includes an SM4 encryption algorithm, and N=4.

[0197] In some specific embodiments, the mapping relationship includes the combination order used by the key blocks when composing the encryption key, and the identity information of the privileged node to which each key block belongs.

[0198] Based on the above information management method, some embodiments of the present disclosure further provide an information management device, which is applied to at least one management node of an editable blockchain management system. The editable blockchain management system includes an editable first blockchain and a non-editable second blockchain. The second blockchain is configured with a smart contract, which is configured to record update operations occurring on the first blockchain. Figure 8 The device is described in detail.

[0199] Figure 8 The structural block diagram of the information management device in some other embodiments of the present disclosure is schematically shown.

[0200] like Figure 8 As shown, the information management device 800 of this embodiment includes: a monitoring module 810 , a second acquisition module 820 and a third processing module 830 .

[0201] The monitoring module 810 is used to monitor the smart contract to determine whether an update operation will be initiated on the first blockchain. In one embodiment, the monitoring module 810 can be used to perform step S410 described above, which will not be repeated here.

[0202] The second acquisition module 820 is used to obtain update content that matches the update operation when an update operation is about to occur on the first blockchain. In one embodiment, the second acquisition module 820 can be used to perform step S420 described above, which will not be repeated here.

[0203] The third processing module 830 is configured to issue encrypted instructions to multiple privileged nodes in the editable blockchain management system when the acquired update content contains non-public information. In one embodiment, the third processing module 830 can be configured to execute step S430 described above, which will not be further described here.

[0204] According to an embodiment of the present disclosure, any multiple modules among the monitoring module 810, the second acquisition module 820, and the third processing module 830 can be combined into a single module for implementation, or any one of the modules can be split into multiple modules. Alternatively, at least part of the functions of one or more of these modules can be combined with at least part of the functions of other modules and implemented in a single module. According to an embodiment of the present disclosure, at least one of the monitoring module 810, the second acquisition module 820, and the third processing module 830 can be at least partially implemented as a hardware circuit, such as a field programmable gate array (FPGA), a programmable logic array (PLA), a system on a chip, a system on a substrate, a system on a package, an application-specific integrated circuit (ASIC), or can be implemented by hardware or firmware in any other reasonable manner of integrating or packaging the circuit, or implemented in any one of the three implementation methods of software, hardware, and firmware, or in an appropriate combination of any of them. Alternatively, at least one of the monitoring module 810, the second acquisition module 820, and the third processing module 830 can be at least partially implemented as a computer program module, which can perform the corresponding function when the computer program module is executed.

[0205] In the disclosed embodiment, by monitoring the smart contract deployed on the second blockchain, it is possible to promptly discover the update operation to be initiated on the first blockchain. Furthermore, when it is found that the updated content contains non-public information, an encryption instruction can be sent to enable the privileged node to store the public information in an open and transparent manner on the first blockchain for other nodes to query and use; the non-public information is stored in the form of ciphertext on the first blockchain, and the encryption method is stored in the form of a mapping relationship (for example, including the privileged node used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of the information on the chain can be achieved, and at the same time, the confidentiality of the non-public information can be guaranteed to prevent information leakage.

[0206] In some specific embodiments, when the update operation to be performed on the first blockchain includes an edit operation, the management node, when issuing the encryption instruction, also issues an edit instruction to at least one of the privileged nodes, wherein the edit instruction is configured as follows:

[0207] causing the privileged node to use the target information as target content of the editing operation and initiate the editing operation on the block to be edited through a chameleon trapdoor;

[0208] The hash values ​​of the edited content in the block are the same before and after editing.

[0209] In some specific embodiments, at least one of the blocks in the first blockchain is configured with an edit coefficient, and the smart contract is further configured to:

[0210] When initiating the editing operation, configuring the editing coefficient of the block to be edited to a first value, wherein the first value is configured to enable at least one ordinary node of the editable blockchain management system to determine that the content of the block is in an untrusted state based on the first value when reading the content of the block;

[0211] When the editing operation is completed, the editing coefficient of the edited block is configured to a second value, and the second value is configured so that at least one ordinary node of the editable blockchain management system can determine that the content in the block is in a trusted state based on the second value when reading the content in the block.

[0212] Some embodiments of the present disclosure also provide an editable blockchain management system, wherein the editable blockchain management system includes a first blockchain, a second blockchain, at least one management node, and multiple privileged nodes. The second blockchain is configured with a smart contract configured to record update operations occurring on the first blockchain. At least one privileged node includes a first information management device, and at least one management node includes a second information management device. The first information management device includes: a first acquisition module, a first processing module, an encryption module, an information generation module, a mapping relationship generation module, and a second processing module. The second information management device includes: a monitoring module, a second acquisition module, and a third processing module.

[0213] The monitoring module is used to monitor the smart contract to determine whether an update operation will be initiated on the first blockchain.

[0214] The second acquisition module is used to obtain update content matching the update operation when an update operation is about to occur on the first blockchain.

[0215] The third processing module is used to issue encryption instructions to multiple privileged nodes in the editable blockchain management system when non-public information exists in the acquired update content.

[0216] The first acquisition module is used to acquire the information to be encrypted in response to the encryption instruction.

[0217] The first processing module is used to determine publicly available information and non-publicly available information from the information to be encrypted.

[0218] The encryption module is used to jointly encrypt the non-public information with multiple privileged nodes that have received the encryption instruction to obtain the ciphertext of the non-public information.

[0219] The information generation module is used to generate target information based on publicly available information and ciphertext.

[0220] The mapping relationship generating module is used to establish a mapping relationship between N privileged nodes for encrypting non-public information and target information.

[0221] The second processing module is used to store the target information in the first blockchain and store the mapping relationship in the second blockchain.

[0222] In the disclosed embodiment, publicly available information is stored in an open and transparent manner on the first blockchain for query and use by other nodes; non-public information is stored in the form of ciphertext on the first blockchain, and the encrypted information is stored in the form of a mapping relationship (for example, including privileged nodes used for encryption) on the second blockchain for decryption of the ciphertext. In this way, the traceability of on-chain information can be achieved, and at the same time, the confidentiality of non-public information can be guaranteed to prevent information leakage.

[0223] Figure 9 The following schematically shows a block diagram of an electronic device suitable for implementing the information management method in some embodiments of the present disclosure.

[0224] like Figure 9 As shown, the electronic device 900 according to an embodiment of the present disclosure includes a processor 901, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 902 or a program loaded from a storage part 908 into a random access memory (RAM) 903. The processor 901 may, for example, include a general-purpose microprocessor (e.g., a CPU), an instruction set processor and / or a related chipset and / or a dedicated microprocessor (e.g., an application-specific integrated circuit (ASIC)), etc. The processor 901 may also include an onboard memory for caching purposes. The processor 901 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0225] Various programs and data required for the operation of the electronic device 900 are stored in the RAM 903. The processor 901, the ROM 902, and the RAM 903 are connected to each other via a bus 904. The processor 901 executes the various operations of the method flow according to the embodiment of the present disclosure by executing the programs in the ROM 902 and / or the RAM 903. It should be noted that the programs may also be stored in one or more memories other than the ROM 902 and the RAM 903. The processor 901 may also execute the various operations of the method flow according to the embodiment of the present disclosure by executing the programs stored in the one or more memories.

[0226] According to an embodiment of the present disclosure, the electronic device 900 may further include an input / output (I / O) interface 905, which is also connected to the bus 904. The electronic device 900 may further include one or more of the following components connected to the I / O interface 905: an input portion 906 including a keyboard, a mouse, etc.; an output portion 907 including a cathode ray tube (CRT), a liquid crystal display (LCD), etc., and a speaker; a storage portion 908 including a hard disk, etc.; and a communication portion 909 including a network interface card such as a LAN card or a modem. The communication portion 909 performs communication processing via a network such as the Internet. A drive 910 is also connected to the I / O interface 905 as needed. A removable medium 911, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed in the drive 910 as needed, so that a computer program read therefrom can be installed into the storage portion 908 as needed.

[0227] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments, or may exist independently and not be incorporated into the device / apparatus / system. The computer-readable storage medium carries one or more programs, which, when executed, implement the information management method according to the embodiments of the present disclosure.

[0228] According to an embodiment of the present disclosure, a computer-readable storage medium may be a non-volatile computer-readable storage medium, for example, it may include but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that can be used by or in combination with an instruction execution system, apparatus, or device. For example, according to an embodiment of the present disclosure, a computer-readable storage medium may include the ROM 902 and / or RAM 903 described above and / or one or more memories other than ROM 902 and RAM 903.

[0229] The embodiments of the present disclosure also include a computer program product, which includes a computer program containing program code for executing the method shown in the flowchart. When the computer program product is run in a computer system, the program code is used to enable the computer system to implement the information management method provided by the embodiments of the present disclosure.

[0230] The computer program executes the above functions defined in the system / device of the embodiment of the present disclosure when the processor 901 executes the computer program. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0231] In one embodiment, the computer program may be stored on a tangible storage medium such as an optical storage device or a magnetic storage device. In another embodiment, the computer program may be transmitted and distributed in the form of a signal on a network medium, downloaded and installed via the communication portion 909, and / or installed from a removable medium 911. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to wireless, wired, or any suitable combination thereof.

[0232] In such an embodiment, the computer program can be downloaded and installed from a network via the communication section 909, and / or installed from a removable medium 911. When the computer program is executed by the processor 901, the above-described functions defined in the system of the embodiment of the present disclosure are performed. According to the embodiment of the present disclosure, the systems, devices, means, modules, units, etc. described above can be implemented by computer program modules.

[0233] According to an embodiment of the present disclosure, the program code for executing the computer program provided by the embodiment of the present disclosure can be written in any combination of one or more programming languages. Specifically, these computer programs can be implemented using high-level procedural and / or object-oriented programming languages, and / or assembly / machine languages. Programming languages ​​include, but are not limited to, languages ​​such as Java, C++, python, "C" or similar programming languages. The program code can be executed entirely on the user computing device, partially on the user device, partially on a remote computing device, or entirely on a remote computing device or server. In cases involving a remote computing device, the remote computing device can be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or can be connected to an external computing device (for example, using an Internet service provider to connect via the Internet).

[0234] The flowcharts and block diagrams in the accompanying drawings illustrate the possible implementation architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram can represent a module, program segment, or a part of code, and the above-mentioned module, program segment, or a part of code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0235] Those skilled in the art will appreciate that the features described in the various embodiments and / or claims of this disclosure may be combined and / or coupled in various ways, even if such combinations and / or couplings are not explicitly described in this disclosure. In particular, the features described in the various embodiments and / or claims of this disclosure may be combined and / or coupled in various ways without departing from the spirit and teachings of this disclosure. All such combinations and / or couplings are intended to fall within the scope of this disclosure.

[0236] The embodiments of the present disclosure are described above. However, these embodiments are for illustrative purposes only and are not intended to limit the scope of the present disclosure. Although each embodiment has been described separately above, this does not mean that the measures in each embodiment cannot be used in combination to advantage. The scope of the present disclosure is defined by the appended claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make various substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. An information management method, characterized in that: The information management method is applied to at least one of a plurality of privileged nodes of an editable blockchain management system, wherein the editable blockchain management system includes an editable first blockchain and a non-editable second blockchain, and the information management method includes: Responding to the encryption instruction, obtaining information to be encrypted; Determining publicly available information and non-public available information from the information to be encrypted; encrypting the non-public information by combining multiple privileged nodes that have received the encryption instruction to obtain a ciphertext of the non-public information; generating target information according to the publicly available information and the ciphertext; Establishing a mapping relationship between a plurality of privileged nodes for encrypting the non-public information and the target information; The target information is stored in the first blockchain, and the mapping relationship is stored in the second blockchain.

2. The information management method according to claim 1, characterized in that: Each of the plurality of privileged nodes has at least one key block, and different privileged nodes have different key blocks; the encryption instruction is sent by at least one management node in the editable blockchain management system to N of the plurality of privileged nodes in a random manner; The plurality of privileged nodes jointly receiving the encryption instruction encrypt the non-public information to obtain a ciphertext of the non-public information, including: Obtaining the key block of each of the N privileged nodes that received the encryption instruction; Combining the obtained key blocks into an encryption key; Encrypting the non-public information according to a preset encryption algorithm based on the encryption key; Wherein, N is a positive integer, and M>N≥2, and M is the total number of privileged nodes in the editable blockchain management system.

3. The information management method according to claim 2, characterized in that: The encryption key includes an SM4 encryption key, the encryption algorithm includes an SM4 encryption algorithm, and N=4.

4. The information management method according to claim 2, characterized in that: The mapping relationship includes the combination order of the key blocks when forming the encryption key, and the identity information of the privileged node to which each key block belongs.

5. An information management method, characterized in that: The information management method is applied to at least one management node of an editable blockchain management system, wherein the editable blockchain management system includes an editable first blockchain and a non-editable second blockchain, wherein a smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain. The information management method includes: Monitoring the smart contract to determine whether an update operation will be initiated on the first blockchain; When the update operation is about to occur on the first blockchain, obtaining update content matching the update operation; When non-public information exists in the acquired update content, an encrypted instruction is issued to multiple privileged nodes in the editable blockchain management system.

6. The information management method according to claim 5, characterized in that: When the update operation to be performed on the first blockchain includes an edit operation, the management node also issues an edit instruction to at least one of the privileged nodes when issuing the encryption instruction, and the edit instruction is configured as follows: The privileged node uses the target information as the target content of the editing operation and initiates the editing operation on the block to be edited through a chameleon trapdoor; The hash values ​​of the edited content in the block are the same before and after editing.

7. The information management method according to claim 6, characterized in that: At least one of the blocks in the first blockchain is configured with an editing coefficient, and the smart contract is further configured to: When initiating the editing operation, configuring the editing coefficient of the block to be edited to a first value, wherein the first value is configured to enable at least one ordinary node of the editable blockchain management system to determine that the content of the block is in an untrusted state based on the first value when reading the content of the block; When the editing operation is completed, the editing coefficient of the edited block is configured to a second value, and the second value is configured so that at least one ordinary node of the editable blockchain management system can determine that the content in the block is in a trusted state based on the second value when reading the content in the block.

8. An information management device, characterized in that: The information management device is applied to at least one of a plurality of privileged nodes of an editable blockchain management system, wherein the editable blockchain management system includes an editable first blockchain and a non-editable second blockchain, and the information management device includes: A first acquisition module, configured to acquire information to be encrypted in response to an encryption instruction; A first processing module, configured to determine publicly available information and non-publicly available information from the information to be encrypted; an encryption module, configured to jointly encrypt the non-public information with a plurality of privileged nodes that have received the encryption instruction, so as to obtain a ciphertext of the non-public information; An information generation module, configured to generate target information based on the publicly available information and the ciphertext; a mapping relationship generating module, configured to establish a mapping relationship between a plurality of privileged nodes for encrypting the non-public information and the target information; The second processing module is used to store the target information in the first blockchain and store the mapping relationship in the second blockchain.

9. An information management device, characterized in that: The information management device is applied to at least one management node of an editable blockchain management system, wherein the editable blockchain management system includes an editable first blockchain and a non-editable second blockchain, wherein a smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain, and the information management device includes: a monitoring module, configured to monitor the smart contract to determine whether an update operation will be initiated on the first blockchain; A second acquisition module is configured to, when the update operation is about to occur on the first blockchain, acquire update content that matches the update operation; The third processing module is used to issue an encryption instruction to multiple privileged nodes in the editable blockchain management system when non-public information exists in the obtained update content.

10. An editable blockchain management system, characterized in that: The editable blockchain management system includes a first blockchain, a second blockchain, at least one management node, and a plurality of privileged nodes, wherein a smart contract is configured in the second blockchain, and the smart contract is configured to record update operations occurring on the first blockchain; The at least one privileged node includes a first information management device, and the at least one management node includes a second information management device; The first information management device includes: a first acquisition module, a first processing module, an encryption module, an information generation module, a mapping relationship generation module and a second processing module; the second information management device includes: a monitoring module, a second acquisition module and a third processing module; The monitoring module is used to monitor the smart contract to determine whether an update operation will be initiated on the first blockchain; The second acquisition module is configured to acquire update content matching the update operation when the update operation is about to occur on the first blockchain; The third processing module is configured to issue an encryption instruction to a plurality of privileged nodes in the editable blockchain management system when non-public information is present in the acquired update content; The first acquisition module is used to obtain the information to be encrypted in response to the encryption instruction; The first processing module is used to determine publicly available information and non-publicly available information from the information to be encrypted; The encryption module is used to jointly encrypt the non-public information with multiple privileged nodes that have received the encryption instruction to obtain a ciphertext of the non-public information; The information generation module is used to generate target information based on the publicly available information and the ciphertext; The mapping relationship generating module is used to establish a mapping relationship between the N privileged nodes that encrypt the non-public information and the target information; The second processing module is used to store the target information in the first blockchain and store the mapping relationship in the second blockchain.

11. An electronic device, characterized in that: include: one or more processors; a storage device for storing one or more programs, When the one or more programs are executed by the one or more processors, the one or more processors are enabled to execute the information management method according to any one of claims 1 to 7.

12. A computer-readable storage medium, characterized in that Executable instructions are stored thereon, and when the instructions are executed by a processor, the processor executes the information management method according to any one of claims 1 to 7.

13. A computer program product, characterized in that The invention comprises a computer program, which implements the information management method according to any one of claims 1 to 7 when executed by a processor.

Images