An electronic evidence archiving method and system, an electronic device and a storage medium

Abstract

The application provides an electronic evidence storage method and system, an electronic device and a storage medium, wherein the method comprises: acquiring public information, a registration table and a credit list library, the registration table is used for storing real and pseudonymous identities of electronic evidence, and the credit list library is used for storing credit identifiers of users; calculating blind aggregate signatures of a plurality of electronic evidences of any user according to the public information, the registration table and the credit list library; verifying the blind aggregate signatures; and uploading the verified blind aggregate signatures to a new block of a first block chain. Through the application, the problem of low storage efficiency of electronic evidence on a block chain in the related art is solved.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchain, and particularly relates to an electronic evidence storage method and system, an electronic device and a storage medium. BACKGROUND

[0002] Since the blockchain can record and verify data in chronological order and is not easy to be tampered with, it is very suitable for storing electronic evidence in the judicial field. Compared with the commonly used computer storage method, using the blockchain to store electronic evidence can not only ensure the safe storage of the evidence, but also effectively improve the efficiency of electronic evidence authentication.

[0003] The existing method of storing electronic evidence on the blockchain has the problems of high storage cost, large calculation amount and long verification time due to repeated signature in the multi-link circulation process. In addition, when the access user verifies the authenticity and validity of the electronic evidence, data leakage is likely to occur, and the storage efficiency and data verification security still need to be further optimized. Therefore, the existing technology has the problem of low storage efficiency of electronic evidence on the blockchain. SUMMARY

[0004] The present application provides an electronic evidence storage method, system, electronic device and storage medium to at least solve the problem of low storage efficiency of electronic evidence on the blockchain in the related art.

[0005] According to a first aspect of an embodiment of the present application, an electronic evidence storage method is provided, which comprises: obtaining public information, a registration table and a credit list library, the registration table being used to store the real identity and pseudonym identity of electronic evidence, and the credit list library being used to store the credit identifier of a user; calculating the blind aggregate signature of a plurality of electronic evidences of any user according to the public information, the registration table and the credit list library; verifying the blind aggregate signature; and uploading the verified blind aggregate signature to a new block of a first blockchain.

[0006] Optionally, before the public information, the registration table and the credit list library are obtained, the method further comprises: determining a master key and a master public key according to a q-order cyclic group; storing the preset security parameter, the order of the q-order cyclic group, the q-order cyclic group, the generator on the q-order cyclic group, the master key, the master public key and a plurality of preset security hash functions as the public information; calculating the pseudonym identity of the electronic evidence according to the public information, the real identity of the electronic evidence, a secret value and a user registration public key; generating the registration table according to the real identity and the pseudonym identity of the electronic evidence; and generating the credit list library according to the credit of the user.

[0007] Optionally, the step of calculating the blind aggregated signature of multiple electronic evidences of any user based on the public information, the registry, and the credit list database includes: obtaining the bit string of the message to be signed and blinding aggregation parameters of any electronic evidence; generating blinding information of the electronic evidence based on the bit string of the message to be signed, a user random number, the blinding aggregation parameters, and public information; calculating the blind signature corresponding to the blinding information of the electronic evidence based on the blinding information of the electronic evidence, public information, and the user's encryption private key; calculating the signature of the electronic evidence based on the blinding aggregation parameters, public information, the credit list database, and a secret value; updating the signature of the electronic evidence using the blind signature corresponding to the blinding information of the electronic evidence to obtain the signature of the blinded electronic evidence; and aggregating the signatures of multiple blinded electronic evidences of any user and the corresponding bit strings of the message to be signed to obtain the blind aggregated signature of multiple electronic evidences of any user.

[0008] Optionally, verifying the blind aggregate signature includes: verifying the validity of the signature of the blinded electronic evidence based on public information, blinding aggregation parameters, and the user's encryption public key; and verifying the validity of the blind aggregate signature of multiple electronic evidences based on the bit strings of messages to be signed corresponding to multiple electronic evidences, public information, and the blinding aggregation parameters.

[0009] Optionally, the method further includes: deblinding the blinded signature corresponding to the blinding information of the electronic evidence to obtain a deblinded signature; and using the deblinded signature to prove the authenticity of the electronic evidence.

[0010] Optionally, the method further includes: obtaining the hash value of the block header and the difficulty target in a new block of a first blockchain containing the blind aggregated signature; finding a Nonce value that makes the hash value of the block header less than the difficulty target; when a Nonce value that makes the hash value of the block header less than the difficulty target is found, uploading the blind aggregated signature and the user credit identifier in the new block of the first blockchain to a new block of the second blockchain; and querying the electronic evidence uploaded by any user by accessing the second blockchain.

[0011] According to a second aspect of the present invention, an electronic evidence storage system is also provided. The system includes: a power grid regional operator, multiple users, and a first blockchain. The power grid regional operator obtains public information, a registry, and a credit list database, and calculates a blind aggregate signature of multiple electronic evidences of any user based on the public information, the registry, and the credit list database. The registry is used to store the real identity and pseudonym identity of the electronic evidence, and the credit list database is used to store the user's credit identifier. The power grid regional operator verifies the blind aggregate signature and uploads the verified blind aggregate signature to a new block of the first blockchain.

[0012] Optionally, the system further comprises a power grid central operator, a judicial authority and a second blockchain; the user obtains a hash value of a block header in a new block of the first blockchain containing a blind aggregate signature and a difficulty target, finds a Nonce value that makes the hash value of the block header less than the difficulty target, and when the Nonce value that makes the hash value of the block header less than the difficulty target is found, the power grid central operator uploads the blind aggregate signature in the new block of the first blockchain and the user credit identifier to a new block of the second blockchain, and the judicial authority queries any electronic evidence uploaded by the user by accessing the second blockchain.

[0013] According to a third aspect of the embodiments of the present application, an electronic device is further provided, comprising a processor, a communication interface, a memory and a communication bus, wherein the processor, the communication interface and the memory complete communication with each other through the communication bus; wherein the memory is configured to store a computer program; and the processor is configured to execute the method steps in any of the above embodiments by running the computer program stored in the memory.

[0014] According to a fourth aspect of the embodiments of the present application, a computer readable storage medium is further provided, and the storage medium stores a computer program, wherein the computer program is configured to execute the method steps in any of the above embodiments when running.

[0015] In the embodiments of the present application, the public information, the registration table and the credit list library are obtained, the registration table is used to store the real identity and the pseudonym identity of the electronic evidence, and the credit list library is used to store the credit identifier of the user; the blind aggregate signature of a plurality of electronic evidences of any user is calculated according to the public information, the registration table and the credit list library; the blind aggregate signature is verified; and the verified blind aggregate signature is uploaded into a new block of the first blockchain. When the blind aggregate signature of the electronic evidence is calculated, the signature and a large amount of signature verification work are placed off-chain by aggregating and compressing the signature and blindizing, so that the data storage and transmission efficiency and the calculation efficiency are improved; the length of the aggregate signature obtained by calculation is irrelevant to the number of signers, so that the number of transactions stored in each block of the blockchain is effectively increased, and the effect of reducing the storage burden of the block is achieved; the blind processing realizes the purpose of guaranteeing data privacy in the third-party verification of authenticity. The problem of low storage efficiency of electronic evidence on the blockchain in the related art is solved.

[0016] In the embodiments of the present application, the hybrid blockchain architecture, i.e., the combination of the first blockchain and the second blockchain, is adopted to store the electronic evidence, so as to guarantee the public accountability and the non-repudiation of the electronic evidence, and thus the purpose of guaranteeing the legal source of the electronic evidence is achieved. BRIEF DESCRIPTION OF DRAWINGS

[0017] The accompanying drawings, which are incorporated herein and constitute part of the specification, illustrate embodiments consistent with the present application and, together with the description, further serve to explain the principles of the application.

[0018] In order to make the technical solution of the embodiments of the present application or the prior art clearer, the drawings needed in the embodiments or prior art description will be briefly introduced below. Obviously, for those skilled in the art, other drawings can also be obtained without creative labor on the basis of these drawings.

[0019] Figure 1 is a schematic diagram of a hardware environment of an optional electronic evidence archiving method according to an embodiment of the present application;

[0020] Figure 2 is a flowchart of an optional electronic evidence archiving method according to an embodiment of the present application;

[0021] Figure 3 is a structural schematic diagram of an optional block chain according to an embodiment of the present application;

[0022] Figure 4 is a schematic diagram of an optional electronic evidence archiving system according to an embodiment of the present application;

[0023] Figure 5 is a schematic diagram of another optional electronic evidence archiving system according to an embodiment of the present application;

[0024] Figure 6 is a whole schematic diagram of an optional electronic evidence archiving system according to an embodiment of the present application;

[0025] Figure 7 is a structural block diagram of an optional electronic device according to an embodiment of the present application. DETAILED DESCRIPTION

[0026] In order to make those skilled in the art better understand the present application, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, but not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative labor should belong to the protection scope of the present application.

[0027] It should be noted that, in the description of the present application, the terms "first", "second" and the like are used to distinguish similar objects, and are not necessarily used to describe a particular order or sequence. It should be understood that the data thus used can be interchanged under appropriate circumstances, so that the embodiments of the application described herein can be implemented in an order other than that illustrated or described herein. In addition, the terms "include" and "have" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device that includes a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but can include other steps or units not clearly listed or inherent to these processes, methods, products or devices. The terms "mount", "connect", "connect" should be understood broadly, for example, it can be a fixed connection, or a detachable connection, or an integral connection; it can be a mechanical connection, or an electrical connection; it can be a direct connection, or an indirect connection through an intermediate medium, or a communication between two elements, which can be a wireless connection or a wired connection. For those skilled in the art, the specific meaning of the above terms in the present application can be understood according to the specific circumstances.

[0028] According to an aspect of an embodiment of the present application, an electronic evidence archiving method is provided. Optionally, in the present embodiment, the electronic evidence archiving method can be applied to the hardware environment as shown in Figure 1 As shown in Figure 1 The terminal 102 can include a memory 104, a processor 106 and a display 108 (optional component). The terminal 102 can be connected to the server 112 through the network 110, which can be used to provide services (such as application services) for the terminal or the client installed on the terminal, and the database 114 can be set on the server 112 or independently of the server 112, which can be used to provide data storage services for the server 112. In addition, the server 112 can run a processing engine 116, which can be used to execute the steps performed by the server 112.

[0029] Optionally, the terminal 102 can be, but is not limited to, a terminal that can calculate data, such as a mobile terminal (e.g. a mobile phone, a tablet computer), a notebook computer, a PC (Personal Computer, personal computer) and the like. The network can include, but is not limited to, a wireless network or a wired network. The wireless network includes Bluetooth, WIFI (Wireless Fidelity, Wireless Fidelity) and other wireless communication networks. The wired network can include, but is not limited to, a wide area network, a metropolitan area network and a local area network. The server 112 can include, but is not limited to, any hardware device that can perform calculations.

[0030] In addition, in the embodiment, the electronic evidence storage method can be applied in a separate processing device with strong processing capability without data interaction. For example, the processing device can be a terminal device with strong processing capability, that is, each operation in the electronic evidence storage method can be integrated in a separate processing device. The above is only an example, and the embodiment does not make any limitation thereto.

[0031] Optionally, in the embodiment, the electronic evidence storage method can be executed by the server 112, or by the terminal 102, or by the server 112 and the terminal 102 together. The terminal 102 executing the electronic evidence storage method of the embodiment can also be executed by a client installed thereon.

[0032] For example, the electronic evidence storage method is applied to the server, Figure 2 is a flowchart of an optional electronic evidence storage method according to the embodiment of the application, as Figure 2 shown, the flow of the method can include the following steps:

[0033] In step S201, public information, a registration table and a credit list library are obtained. The registration table is used to store real and pseudonymous identities of electronic evidence, and the credit list library is used to store credit identifiers of users. Optionally, the public information is a public parameter available to all users, including: a preset security parameter, an order of a q-order cyclic group, the q-order cyclic group, a generator on the q-order cyclic group, a master key, a master public key and a plurality of preset secure hash functions. The registration table and the credit list library are generated when a user registers an identity. A user can have multiple electronic evidence, and the electronic evidence can be text, image, video and audio data. The registration table is used to store the identity of the electronic evidence, including the real and pseudonymous identities of the electronic evidence. The credit list library is used to store the credit identifier of the user. The credit identifier l i includes: + and - , the values of which correspond to 1 and 0 respectively. If the credit identifier of the user is l + , that is, the value is "1", it indicates that the user is in the credit white list, otherwise, the credit identifier of the user is l - , that is, the value is "0", it indicates that the user is in the credit black list.

[0034] Step S202, blind aggregate signature of the plurality of electronic evidences of any user is calculated according to the public information, the registration table and the credit list. Alternatively, the plurality of electronic evidences of any user is respectively blind signed and signed according to the information contained in the public information, the registration table and the credit list in step S201, the blind signature is used to replace part of the signature, and then the plurality of replaced signatures are aggregated, so as to obtain the blind aggregate signature of the plurality of electronic evidences of any user.

[0035] Step S203, the blind aggregate signature is verified. Alternatively, after the blind aggregate signature of the plurality of electronic evidences of any user is generated in step S202, the validity of the blind aggregate signature needs to be verified, and only the verified real and valid blind aggregate signature can be uploaded to the first block chain. Specifically, the validity of the signature of each electronic evidence before aggregation, that is, the signature obtained after the blind signature is replaced, is verified first, if all the replaced signatures of the electronic evidences are valid, then the aggregate signature is verified.

[0036] Step S204, the verified blind aggregate signature is uploaded to a new block of the first block chain. Alternatively, if the validity of the aggregate signature in step S203 is verified, the verified blind aggregate signature is uploaded to a new block of the first block chain.

[0037] In the embodiment of the present application, by obtaining the public information, the registration table and the credit list, the registration table is used to store the real identity and the pseudonym identity of the electronic evidence, and the credit list is used to store the credit identifier of the user; the blind aggregate signature of the plurality of electronic evidences of any user is calculated according to the public information, the registration table and the credit list; the blind aggregate signature is verified; and the verified blind aggregate signature is uploaded to a new block of the first block chain. When the blind aggregate signature of the electronic evidence is calculated, the signature and a large amount of signature verification work are placed off-chain by aggregation compression and blinding of the signature, so as to improve the data storage and transmission efficiency and the calculation efficiency; the length of the aggregate signature obtained by calculation is irrelevant to the number of signers, so as to effectively increase the number of transactions stored in each block of the block chain, so as to reduce the burden of block storage; and the blinding process realizes the purpose of guaranteeing data privacy by third-party verification of authenticity. The problem of low storage efficiency of electronic evidence on the block chain in the related art is solved.

[0038] As an optional embodiment, before obtaining the public information, the registration list and the credit list, the method further comprises: determining a master key and a master public key according to a cyclic group of order q; storing preset security parameters, an order of the cyclic group of order q, the cyclic group of order q, a generator on the cyclic group of order q, the master key, the master public key and a plurality of preset security hash functions as the public information; calculating a pseudonym identity of the electronic evidence according to the public information, a real identity of the electronic evidence, a secret value and a public key for user registration; generating the registration list according to the real identity and the pseudonym identity of the electronic evidence; and generating the credit list according to user credit.

[0039] Optionally, the preset security parameter is a security parameter input in an initial stage, denoted as k; the cyclic group of order q G is an elliptic curve group with order q, and a generator P of the cyclic group of order q G is a large prime number; the master key s ∈ Z q * , and the master public key P pub = s*P, Z q * represents a set of positive integers, and the master public key is a product of the master key s and the generator P of the cyclic group of order q G; the plurality of preset security hash functions are H, H1, H2, H3 and H4, respectively corresponding to the following formulas:

[0040]

[0041] The preset security parameters k, the order q of the cyclic group of order q, the cyclic group of order q G, the generator P on the cyclic group of order q G, the master key s, the master public key P pub and the plurality of preset security hash functions H, H1, H2, H3 and H4 are stored as the public information params, and the public information params = {k, q, G, P, s, P pub , H, H1, H2, H3, H4}, which are public parameters available for all users.

[0042] Any user can have a plurality of electronic evidences, and each electronic evidence has a real identity RID i for representing its own identity information, and the real identity RID i can obtain a pseudonym identity PID i through registration. The specific generation method of the pseudonym identity PID i is as follows:

[0043] A positive integer is selected as a secret value x i , i.e. x i ∈ Z q * , h = H(x i *P pub ) is calculated, and the pseudonym identity PID In the formula, s and P pubThe main key and the main public key in the public information params, PK c The public key for user registration. Since the pseudonym identity of the electronic evidence is mainly used in subsequent calculations, it is denoted as ID i That is, ID i = PID i Also represents the pseudonym of the electronic evidence. The real identity RID i and the pseudonym identity ID i of all electronic evidences are stored, a registration list is generated, and a credit list containing a blacklist and a whitelist is generated according to user credit. In the embodiment of the present application, the pseudonym identity of the electronic evidence is generated, the encryption of the real identity of the electronic evidence is realized, the privacy of the real identity of the electronic evidence is improved, the credit list containing the blacklist and the whitelist is generated according to the user credit, and the basis for querying and managing the user credit is provided.

[0044] As an optional embodiment, the blind aggregate signature of a plurality of electronic evidences of any user is calculated according to the public information, the registration list, and the credit list, including: obtaining a to-be-signed message bit string of any electronic evidence and a blind aggregate parameter; generating blind information of the electronic evidence according to the to-be-signed message bit string, a user random number, the blind aggregate parameter, and the public information; calculating a blind signature corresponding to the blind information of the electronic evidence according to the blind information of the electronic evidence, the public information, and a user encryption private key; calculating a signature of the electronic evidence according to the blind aggregate parameter, the public information, the credit list, and a secret value; updating the signature of the electronic evidence using the blind signature corresponding to the blind information of the electronic evidence to obtain a blind signature of the electronic evidence after blind; and aggregating the blind signatures of a plurality of electronic evidences of any user and the corresponding to-be-signed message bit strings to obtain the blind aggregate signature of the plurality of electronic evidences of any user.

[0045] Optionally, each electronic evidence has a corresponding to-be-signed message bit string m i ∈{0,1} * , that is, the information to be signed by the electronic evidence. The blind aggregate parameter is a parameter used for blind and aggregation of the electronic evidence, and specifically includes: Z i , h1, D i , A i , h2, h3, and X i , and the corresponding calculation formulas of the parameters are as follows:

[0046] Z i = z i *P

[0047] h1=H1(ID i ,Z i ,P pub ,t i )

[0048] D i = z i + s * h1

[0049] A i = a i * P

[0050] h2 = H2(ID i , m i , PK i , A i , t i )

[0051] h3 = H3(ID i , m i , PK i , h2, l i )

[0052] X i = x i * P

[0053] wherein z i , a i and b i are randomly selected positive integers, i.e. z i , a i , b i ∈ Z q * , t i is a time stamp, P, H1, H2, H3, P pub , s are respectively a generator P on a cyclic group of order q in the public information params, a preset secure hash function H1, H2, H3, a master public key P pub and a master secret key s, ID i is a pseudonym of the electronic evidence, m i is a message bit string to be signed of the electronic evidence, PK i is a public key for user encryption, and l i is a credit identifier.

[0054] The blind information of the electronic evidence is calculated by the above blind aggregation parameters, specifically, the blind information h" = α -1 (h' - β + t i ) mod N, wherein α, β ∈ [1, N - 1], N is a large positive integer, t i is a time stamp, h' = H2(m i || w2, N), m i is a message bit string to be signed of the electronic evidence, H2 is a preset secure hash function in the public information params, and w2 = w α g β , w = gr wherein, r ∈ [1, N-1], w and w2 are user random numbers, which are determined by random numbers and parameters in public information, the blind information h" is information obtained after blind processing of the electronic evidence, and the blind signature S i is obtained by signing the information. The specific calculation method of S i = [r-h"] P*SK i , wherein, h" is blind information, r ∈ [1, N-1], P is a generator in a cyclic group of order q in the public information, and SK i is a user encryption private key. In addition to generating a blind signature using blind information of the electronic evidence, the blind signature S i0 of the electronic evidence is calculated using blind aggregation parameters, public information, a credit list library, and a secret value. i = <A i0 , S i , Y i >, wherein, A i0 is one of the blind aggregation parameters, S i = H4(b i , l i , t i ), Y i = a i +h2D i +h3x i0 S i , a i , b q ∈ Z * , l i is a credit identifier in the credit list library, H4 is a preset secure hash function in the public information params, h2, D i , and h3 are blind aggregation parameters, and x i is a secret value.

[0055] The blind signature S i is used to replace S i0 in the signature σ i = <A i0 , S i , Y i0 > of the electronic evidence, to obtain the signature σ i = <A i , S i , Y i > of the blind electronic evidence. The above steps are run on n electronic evidences of any user, to obtain the signature of the blind electronic evidence corresponding to the n electronic evidences, and the n blind electronic evidence signatures σ i and the corresponding message bit string m i to be signed are aggregated, that is, obtain a blind aggregate signature <σ, m> of a plurality of electronic evidences of any user. By means of the present embodiment, the electronic evidences are compressed and blinded by using the certificateless blind aggregate signature and encryption technology, the computing efficiency of the plurality of signatures is improved, the authenticity of the verification by the trusted third party is ensured, the signature and a large amount of signature verification work are placed off-chain, the data storage and transmission efficiency and the computing efficiency are improved, the electronic evidences are blinded by using the blind signature algorithm, the data privacy of the user during verification is protected, and the problem of data privacy leakage is solved.

[0056] As an optional embodiment, verifying the blind aggregate signature includes verifying the validity of the signature of the blinded electronic evidence according to the public information, the blinded aggregate parameter and the public key for encryption of the user, and verifying the validity of the blind aggregate signature of the plurality of electronic evidences according to the to-be-signed message bit string corresponding to the plurality of electronic evidences, the public information and the blinded aggregate parameter.

[0057] Optionally, Algorithm 1 and Algorithm 2 respectively show the verification of the validity of the signature σ i and the blind aggregate signature <σ, m> of the blinded electronic evidence, Algorithm 1 and Algorithm 2 receive input parameters, and the verification result can be output by statistical calculation. When Success is output, it indicates that the verification is successful, and when Failure is output, it indicates that the verification fails. It should be noted that the validity of the blind aggregate signature is verified only when the signatures of the n electronic evidences are all valid, that is, the verification is successful.

[0058] The specific process of Algorithm 1 and Algorithm 2 is as follows:

[0059]

[0060]

[0061] As an optional embodiment, the method further includes unblinding the blind signature corresponding to the blinded information of the electronic evidence to obtain an unblinded signature, and using the unblinded signature to prove the authenticity of the electronic evidence. Optionally, the blind signature S i = [r - h"] P * SK i The unblinded information S' can be obtained by unblinding, and S' and the blinded information h' and the timestamp t i together constitute the unblinded signature (h', S', t i ). The unblinded signature can be used to prove the authenticity of the electronic evidence in the future when the user and the signing party have a dispute.

[0062] As an optional embodiment, the method further includes: obtaining the hash value of the block header and the difficulty target in a new block of a first blockchain containing the blind aggregated signature; finding a Nonce value that makes the hash value of the block header less than the difficulty target; when a Nonce value that makes the hash value of the block header less than the difficulty target is found, uploading the blind aggregated signature and the user credit identifier in the new block of the first blockchain to a new block of the second blockchain; and querying the electronic evidence uploaded by any user by accessing the second blockchain. Optionally, Figure 3 This is a schematic diagram of an optional blockchain structure, such as... Figure 3 As shown, a blockchain is a chain composed of multiple blocks. Each block consists of a block header and a block body, which is a collection of transactions. Every 10 minutes, the multiple transactions we generate are aggregated into a block and then uploaded to the chain as a unit. In this embodiment, the collection of transactions is a series of calculations performed on electronic evidence. The block header stores the block's header information, including the hash value of the previous block. For example, the block header of block B1 contains the hash of block B0. Similarly, the block header also has its own hash value. The nonce value is a random number that needs to be searched. Computing power can be used to search for a completely random value. Only when the nonce value is calculated can the current block be considered successfully calculated. The Merkle root is a summary of all transactions in the block. The timestamp is generated after a new block is produced and is used to indicate the time when the block was created. In addition, the block header generally includes the difficulty target, version number, etc. When block computation is successful, i.e., when a Nonce value is found that makes the hash value of the block header less than the difficulty target, the blind aggregate signature <σ,m> and the user credit identifier l will be stored in the new block of the first blockchain. i The uploaded data is placed in a new block on the second blockchain. Subsequent access to the second blockchain allows for querying and tracing of any user's uploaded electronic evidence. In this embodiment, the second blockchain, acting as a public trusted party, fulfills its supervisory and security role while ensuring the complete immutability and integrity of the data recorded on the first blockchain. Recording credit identifiers on the second blockchain, due to its immutability, makes user credit management more comprehensive and reliable.

[0063] According to another aspect of the present invention, an electronic evidence storage system is also provided. The system includes: a power grid regional operator, multiple users, and a first blockchain. The power grid regional operator obtains public information, a registry, and a credit list database, and calculates a blind aggregated signature of multiple electronic evidences from any user based on the public information, registry, and credit list database. The registry is used to store the real and pseudonymous identities of the electronic evidences, and the credit list database is used to store the user's credit identifier. The power grid regional operator verifies the blind aggregated signature and uploads the verified blind aggregated signature to a new block of the first blockchain. Optionally, as... Figure 4As shown, the grid area operator is a supplier of grid sub-area network services, each grid sub-area has its own grid area operator, and each grid area operator manages n users in the sub-area. The grid area operator obtains public information, a registration table, and a credit list library. The public information is a public parameter that can be used by all users. The registration table and the credit list library are generated when the user registers. The registration table contains user electronic evidence identity information, and the credit list library contains user credit identifiers. The grid area operator calculates the blind aggregate signature of multiple electronic evidence of any user according to the public information, the registration table, and the credit list library. Then, the blind aggregate signature is verified, and the verified blind aggregate signature is uploaded to a new block of the first blockchain.

[0064] Through the above system, when calculating the blind aggregate signature of the electronic evidence, the signature is compressed and blinded by aggregation, and the signature and a large amount of signature verification work are placed off-chain, thereby improving the data storage and transmission efficiency and the calculation efficiency. The length of the aggregate signature obtained by calculation is independent of the number of signers, which effectively increases the number of transactions stored in each block of the blockchain, thereby reducing the burden of block storage. The blinding process realizes the purpose of guaranteeing data privacy by third-party verification of authenticity. The problem of low storage efficiency of electronic evidence on the blockchain in the related art is solved.

[0065] As an optional embodiment, the system further includes a grid center operator, a judicial authority, and a second blockchain. The user obtains a hash value of a block header in a new block of the first blockchain and a difficulty target, finds a Nonce value that makes the hash value of the block header less than the difficulty target, and when the Nonce value that makes the hash value of the block header less than the difficulty target is found, the grid center operator uploads the blind aggregate signature in the new block of the first blockchain and the user credit identifier to a new block of the second blockchain, and the judicial authority queries the electronic evidence uploaded by any user by accessing the second blockchain. Optionally, as shown, Figure 5 As shown, the user obtains a hash value of a block header in a newly generated block of the first blockchain and a difficulty target, and finds a Nonce value that makes the hash value of the block header less than the difficulty target by continuously calculating. At this time, the grid center operator uploads the blind aggregate signature in the new block of the first blockchain and the user credit identifier to a new block of the second blockchain, and the relevant judicial authority can query and trace the electronic evidence uploaded by any user after obtaining access permission of the second blockchain.

[0066] As an optional embodiment, Figure 6 is a schematic diagram of an optional electronic evidence storage system according to an embodiment of the application, as shown in Figure 6As shown, the system adopts a double-layer hybrid block chain architecture, which is a consortium chain-transaction storage chain (corresponding to the first block chain) and a public chain-evidence notarization chain (corresponding to the second block chain). Among them, the consortium chain-transaction storage chain is deployed in the power consortium chain between the power regional chain and the smart grid regional operator in each user, i.e., the production unit sub-area. The power regional chain is a trusted distributed ledger of data owner authentication records within the power grid sub-area. The transaction storage chain stores the information of each power regional chain, which can help the cross-domain authentication of data owners. The transaction storage chain involves all power grid regional operators and central operators. The power grid regional operator acts as a miner node to build the transaction storage chain, and the power grid regional operator includes: a key generation center and a registration center. In the production unit registration stage, the key generation center generates a pseudonym identity for various forms of electronic evidence of the production unit and retains a registration table, and then sends the registration table to the registration center for storage. In addition, after the production unit completes the registration, the registration center will establish a credit list library for each production unit in the region, storing the credit identifier of each registered production unit in the region. The power grid regional operator calculates the blind aggregate signature of the production unit electronic evidence according to the registration information and public information of the production unit, uploads the blind aggregate signature to the transaction storage chain, and when multiple user blind aggregate signatures are uploaded together, the multiple user blind aggregate signatures can be stored in a chain structure to generate a blind aggregate signature chain uploaded to the transaction storage chain. The central operator acts as a node of the transaction storage chain and the evidence notarization chain to participate in the hybrid block chain architecture, mainly responsible for writing the blind aggregate signature (or blind aggregate signature chain) on the transaction storage chain into the evidence notarization chain. Supervisors and power market regulatory agencies and other judicial agencies can realize the traceability of electronic evidence by accessing the transaction storage chain or the evidence notarization chain.

[0067] The generation steps of the consortium chain-transaction storage chain are as follows: (1) The regional operator blind-aggregates signs the verified electronic evidence of the production unit. (2) The consortium chain-transaction storage chain establishes a new block, packs all the blind aggregate signatures of the electronic evidence confirmed within the interval time ΔT1 into the new block, and uploads them to the new block. (3) The regional operator broadcasts to all nodes of the transaction storage chain, i.e., the power grid regional operators of other power grid sub-areas, and after the new block is identified as a valid block through the consensus mechanism, it is added to the transaction storage chain.

[0068] The public chain-evidence notarization chain plays a role of an open trusted party, realizes supervision of internal security of the power grid regional operator, and guarantees the integrity and unchangeability of the data recorded on the transaction storage chain. The generation steps of the public chain-evidence notarization chain are as follows: (1) After the alliance chain-transaction storage chain experiences a certain interval time ΔT2, the power grid regional operator obtains a blind aggregate signature of a plurality of electronic evidence recorded in a block in a certain number of newly generated blocks, and the power grid regional operator calculates the hash value of the current newly constructed block based on the proof of work consensus mechanism to find the Nonce value based on the difficulty target. (2) After finding the correct Nonce value, the central operator will become a recording node, and the hash digest value of the electronic evidence data (power grid production process images, videos, audios, etc.), the blind aggregate signature of the electronic evidence, the timestamp, and the credit identifier are recorded on the evidence notarization chain.

[0069] The timestamp t generated on the block chain i The timeliness of the block is ensured, and the newly generated block will be broadcast on the chain. The nodes receiving the information verify according to the consensus algorithm, and if the verification is passed, the information is transmitted to other nodes. After verification by a majority of nodes, the new block is added to the block chain, realizing the functions of permanent storage and sharing of electronic evidence in the power grid production process. The power grid enterprise is granted access rights through the access control protocol, and when the access rights of the electronic evidence of the production unit are obtained, the index of the electronic evidence in the power grid regional operator can be found and obtained on the block chain, so as to access the original complete electronic evidence and realize the traceability of the electronic evidence. In the embodiment of the present application, the double-layer block chain electronic evidence encryption storage method based on the certificateless blind aggregate signature builds a double-layer block chain system architecture of the alliance chain-transaction storage chain and the public chain-evidence notarization chain. The regional operator encrypts the electronic evidence, and the signature is blind and aggregated by using the certificateless blind aggregate signature algorithm. The blind aggregate signature verified is uploaded to the transaction storage chain, and the central operator of the power grid uploads the aggregated data of each power sub-region, that is, the aggregated data in the transaction storage chain, to the evidence notarization chain as evidence storage, for the evidence traceability by the judicial organs and the like. The purposes of guaranteeing the integrity, traceability and security of the electronic evidence are achieved.

[0070] According to another aspect of the embodiment of the present application, an electronic device for implementing the above-mentioned electronic evidence storage method is also provided, which can be a server, a terminal, or a combination thereof.

[0071] Figure 7 is a structural block diagram of an optional electronic device according to the embodiment of the present application, as Figure 7As shown, the electronic device includes a processor 701, a communication interface 702, a memory 703 and a communication bus 704, wherein the processor 701, the communication interface 702 and the memory 703 complete mutual communication through the communication bus 704, wherein the memory 703 is configured to store a computer program; and the processor 701 is configured to execute the computer program stored in the memory 703 to implement the following steps:

[0072] Obtaining public information, a registration table and a credit list library, the registration table is used to store real identities and pseudonym identities of electronic evidences, and the credit list library is used to store credit identifiers of users; calculating blind aggregate signatures of a plurality of electronic evidences of any user according to the public information, the registration table and the credit list library; verifying the blind aggregate signatures; and uploading the verified blind aggregate signatures to a new block of a first block chain.

[0073] Optionally, in the embodiment, the communication bus can be a PCI (Peripheral Component Interconnect) bus, an EISA (Extended Industry Standard Architecture) bus or the like. The communication bus can be divided into an address bus, a data bus and a control bus. For the convenience of representation, Figure 7 In the figure, only one thick line is used to represent the bus, but it does not mean that there is only one bus or only one type of bus.

[0074] The communication interface is used for communication between the electronic device and other devices.

[0075] The memory can include a RAM and can also include a non-volatile memory, for example, at least one disk memory. Optionally, the memory can also be at least one storage device located away from the aforementioned processor.

[0076] The processor can be a general-purpose processor, which can include but is not limited to a CPU (Central Processing Unit), an NP (Network Processor) and the like; and can also be a DSP (Digital Signal Processing), an ASIC (Application Specific Integrated Circuit), an FPGA (Field-Programmable Gate Array) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0077] In addition, the electronic device further includes a display configured to display the electronic evidence storage result.

[0078] Optionally, specific examples in the embodiment can refer to the examples described in the above embodiments, and the embodiment will not be described here.

[0079] Those skilled in the art can understand that, Figure 7 The structure shown is only schematic, and the device for implementing the above electronic evidence storage method can be a terminal device, which can be a smart phone (such as an Android phone, an iOS phone, etc.), a tablet computer, a palm computer, a mobile Internet device (MID), a PAD, etc. Figure 7 The structure of the electronic device is not limited. For example, the terminal device can further include more or less components (such as a network interface, a display device, etc.) than those shown in the above embodiment, or have a different configuration from that shown in the above embodiment. Figure 7 Figure 7

[0080] Those skilled in the art can understand that all or part of the steps in the above embodiments can be completed by programs instructing the related hardware of the terminal device, and the programs can be stored in a computer readable storage medium, which can include a flash disk, a ROM, a RAM, a magnetic disk or an optical disk, etc.

[0081] According to another aspect of the embodiment of the present application, a storage medium is further provided. Optionally, in the embodiment, the storage medium can be used to store program codes for implementing the electronic evidence storage method.

[0082] Optionally, in the embodiment, the storage medium can be located on at least one of the network devices in the network shown in the above embodiment.

[0083] Optionally, in the embodiment, the storage medium is configured to store program codes for implementing the following steps:

[0084] Obtaining public information, a registration table and a credit list library, the registration table is used to store the real identity and the pseudonym identity of the electronic evidence, and the credit list library is used to store the credit identifier of the user; calculating the blind aggregate signature of a plurality of electronic evidences of any user according to the public information, the registration table and the credit list library; verifying the blind aggregate signature; uploading the verified blind aggregate signature to a new block of the first block chain.

[0085] Optionally, specific examples in the embodiment can refer to the examples described in the above embodiments, and the embodiment will not be described here.

[0086] ​​Optionally, in the embodiment, the storage medium can include, but is not limited to, a U disk, a ROM, a RAM, a mobile hard disk, a magnetic disk or an optical disk, and various storage program code storage media.

[0087] The serial numbers of the embodiments of the application are only for description, and do not represent the advantages and disadvantages of the embodiments.

[0088] The integrated units in the above embodiments, if realized in the form of software function units and sold or used as independent products, can be stored in the above computer-readable storage medium. Based on such understanding, the technical solutions of the application or the whole or part of the technical solutions that make contributions to the prior art can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing one or more computer devices (which can be personal computers, servers or network devices, etc.) to execute all or part of the steps of the electronic evidence archiving method of each embodiment of the application.

[0089] In the above embodiments of the application, the description of each embodiment has its own focus, and the parts not described in detail in a certain embodiment can be referred to the related description of other embodiments.

[0090] In the several embodiments provided by the application, it should be understood that the disclosed client can be implemented in other ways. Of course, the unit embodiment described above is only schematic, and for example, the division of the units is only a logical function division, and there can be another division manner in actual implementation, for example, a plurality of units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interface, and can be electrical or other forms.

[0091] The units described as separate components can or can not be physically separate, and the components shown as units can or can not be physical units, that is, they can be located in one place, or distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the scheme provided in the embodiment.

[0092] In addition, each functional unit in each embodiment of the application can be integrated in one processing unit, or each unit can exist physically independently, or two or more units can be integrated in one unit. The integrated unit can be realized in the form of hardware or in the form of a software function unit.

[0093] The above merely describes the preferred embodiments of the present application, and it should be pointed out that, for those skilled in the art, several improvements and refinements can be made without departing from the principles of the present application, and these improvements and refinements should also be considered as falling within the protection scope of the present application.

Claims

1. An electronic evidence archiving method, characterized by, The method comprises: obtaining public information, a register table and a credit list, the register table being used to store real and pseudonym identities of electronic evidence, and the credit list being used to store credit identifiers of users; calculating blind aggregate signatures of multiple electronic evidences of any user according to the public information, the register table and the credit list; verifying the blind aggregate signatures; uploading the verified blind aggregate signatures to a new block of a first blockchain; Before the obtaining of the public information, the register table and the credit list, the method further comprises: According to q The order cyclic group determines the master key and the master public key; storing the preset security parameters, q an order of the cyclic group, q the cyclic group, q a generator on the cyclic group, a master key, a master public key, and a plurality of preset security hash functions as public information. calculating a pseudonym identity of electronic evidence according to the public information, a real identity of the electronic evidence, a secret value and a public key for user registration; generating the register table according to the real and pseudonym identities of the electronic evidence; generating the credit list according to user credit; The calculating of the blind aggregate signatures of the multiple electronic evidences of any user according to the public information, the register table and the credit list comprises: obtaining a to-be-signed message bit string of any electronic evidence and a blind aggregate parameter; generating blind information of the electronic evidence according to the to-be-signed message bit string, a user random number, the blind aggregate parameter and the public information; calculating a blind signature corresponding to the blind information of the electronic evidence according to the blind information of the electronic evidence, the public information and a private key for user encryption; calculating a signature of the electronic evidence according to the blind aggregate parameter, the public information, the credit list and the secret value; updating the signature of the electronic evidence using the blind signature corresponding to the blind information of the electronic evidence to obtain a signature of the electronic evidence after blinding; aggregating the multiple signatures of the electronic evidence after blinding and corresponding to-be-signed message bit strings of any user to obtain the blind aggregate signatures of the multiple electronic evidences of any user.

2. The electronic evidence preservation method of claim 1, wherein, The verifying of the blind aggregate signatures comprises: verifying validity of the signature of the electronic evidence after blinding according to the public information, the blind aggregate parameter and a public key for user encryption; verifying validity of the blind aggregate signatures of the multiple electronic evidences according to corresponding to-be-signed message bit strings of the multiple electronic evidences, the public information and the blind aggregate parameter.

3. The electronic evidence preservation method of claim 1, wherein, The method further comprises: de-blinding the blind signature corresponding to the blind information of the electronic evidence to obtain a de-blinded signature; proving authenticity of the electronic evidence using the de-blinded signature.

4. The electronic evidence preservation method of claim 1, wherein, The method further comprises: obtaining a hash value of a block header in a new block of a first blockchain containing blind aggregate signatures and a difficulty target; finding a Nonce value making the hash value of the block header less than the difficulty target; when the Nonce value making the hash value of the block header less than the difficulty target is found, uploading the blind aggregate signatures in the new block of the first blockchain and a user credit identifier to a new block of a second blockchain; querying electronic evidence uploaded by any user by accessing the second blockchain.

5. An electronic evidence preservation system, characterized by, The system comprises: a power grid regional operator, multiple users and a first blockchain; The power grid area operator obtains public information, a registration table, and a credit list, calculates a blind aggregate signature of a plurality of electronic evidences of any user according to the public information, the registration table, and the credit list, wherein the registration table is used to store real identities and pseudonym identities of the electronic evidences, and the credit list is used to store credit identifiers of the users, the power grid area operator verifies the blind aggregate signature, and uploads the blind aggregate signature that passes the verification to a new block of the first blockchain; Before the public information, the registration table, and the credit list are obtained, the power grid area operator is further configured to: According to q The order cyclic group determines the master key and the master public key; storing the preset security parameters, q an order of the cyclic group, q the cyclic group, q a generator on the cyclic group, a master key, a master public key, and a plurality of preset security hash functions as public information. calculate a pseudonym identity of an electronic evidence according to the public information, a real identity of the electronic evidence, a secret value, and a public key for user registration; generate the registration table according to the real identity and the pseudonym identity of the electronic evidence; generate the credit list according to user credit; The blind aggregate signature of the plurality of electronic evidences of any user according to the public information, the registration table, and the credit list includes: obtain a to-be-signed message bit string of any electronic evidence and a blind aggregate parameter; generate blind information of the electronic evidence according to the to-be-signed message bit string, a user random number, the blind aggregate parameter, and the public information; calculate a blind signature corresponding to the blind information of the electronic evidence according to the blind information of the electronic evidence, the public information, and a private key for user encryption; calculate a signature of the electronic evidence according to the blind aggregate parameter, the public information, the credit list, and the secret value; update the signature of the electronic evidence by using the blind signature corresponding to the blind information of the electronic evidence to obtain a signature of the electronic evidence after blind; aggregate the plurality of signatures of the electronic evidence after blind and corresponding to-be-signed message bit strings of any user to obtain the blind aggregate signature of the plurality of electronic evidences of any user.

6. The electronic evidence preservation system of claim 5, wherein, The system further includes a power grid center operator, a judicial authority, and a second blockchain; The user obtains a hash value of a block header in a new block of the first blockchain containing the blind aggregate signature and a difficulty target, finds a Nonce value that makes the hash value of the block header less than the difficulty target, and when the Nonce value that makes the hash value of the block header less than the difficulty target is found, the power grid center operator uploads the blind aggregate signature and a user credit identifier in the new block of the first blockchain to a new block of the second blockchain, and the judicial authority queries any user uploaded electronic evidence by accessing the second blockchain.

7. An electronic device comprising a processor, a communication interface, a memory and a communication bus, wherein, The processor, the communication interface, and the memory complete communication with each other through the communication bus, and the system is characterized in that: The memory is configured to store a computer program; The processor is configured to execute the method steps of any one of claims 1 to 4 by running the computer program stored on the memory.

8. A computer readable storage medium, characterized in that, The storage medium stores a computer program, and the computer program is executed by the processor to implement the method steps in any one of claims 1 to 4. The storage medium stores a computer program, and the computer program is executed by the processor to implement the method steps in any one of claims 1 to 4.

Images