Blockchain data management method and device, computer device, and storage medium

Abstract

This application relates to a method, apparatus, computer device, and storage medium for managing blockchain data, and pertains to the field of blockchain technology. The method includes: acquiring target data from a blockchain node to be sent to a client; if the target data is verified to be decrypted, resending the stored data contained within the target data to the blockchain node; and re-encrypting the stored data in the blockchain node. Through this method, thieves are required to repeatedly crack the data in the blockchain node, increasing the difficulty of decrypting stored data in the blockchain system, reducing the risk of theft, and improving the security of data transmission in the blockchain system.

Description

Technical Field

[0001] This application relates to the field of blockchain technology, and in particular to a method, apparatus, computer equipment, and storage medium for managing blockchain data. Background Technology

[0002] A blockchain is a chain of blocks, each containing specific information. These blocks are linked together in chronological order of their creation. The information in this chain is stored on all the servers, which are called nodes in the blockchain system. They provide storage space and computing power for the entire blockchain system. To modify information in the blockchain, the consent of more than half of the nodes must be obtained, and the information in all nodes must be modified. Since these nodes are usually controlled by different entities, tampering with information in the blockchain is extremely difficult.

[0003] In practical applications of blockchain, a master blockchain node is selected as the user terminal and the dispatching station for processing business. When the security verification identifier of the master blockchain node is updated, multiple subordinate blockchain nodes connected to it also need to be updated synchronously. As the size of the network cluster increases, there may be delays in the updates of various subordinate blockchain nodes. Therefore, unauthorized individuals can take advantage of this delay to illegally enter the blockchain system and steal data. Furthermore, blockchain technology uses distributed information protection, lacking independent protection for the data on each node. Therefore, once unauthorized individuals intervene in the blockchain system, they can easily decipher the data, posing a significant challenge to the data security of the blockchain system. Summary of the Invention

[0004] This application provides a method, apparatus, computer device, and storage medium for managing blockchain data. These methods increase the difficulty of deciphering stored data in a blockchain system, reduce the risk of data theft, and improve the security of data transmission within the blockchain system. The technical solution is as follows:

[0005] On the one hand, a method for managing blockchain data is provided, the method comprising:

[0006] Obtain the target data that the blockchain node is about to send to the client;

[0007] If the target data is verified to have been deciphered, the stored data contained in the target data will be resent to the blockchain node;

[0008] The stored data is re-encrypted in the blockchain node.

[0009] On the other hand, a blockchain data management device is provided, the device comprising:

[0010] The data acquisition module is used to acquire the target data that the blockchain node is about to send to the client;

[0011] The sending module is used to resend the stored data contained in the target data to the blockchain node if it is verified that the target data has been deciphered;

[0012] The first encryption module is used to re-encrypt the stored data in the blockchain node.

[0013] In one possible implementation, the target data is in a target format, and the apparatus further includes:

[0014] The first determining module is used to determine that the target data has been decrypted when it is verified that the target data does not contain level 1 encryption code and there is a decryption record.

[0015] The decryption record is a record automatically saved when the target format data is decrypted, the first-level encryption code is the code used to encrypt the target data in the blockchain node, and the first-level encryption code is automatically deleted when the target format data is decrypted.

[0016] In one possible implementation, the device further includes:

[0017] The second encryption module is used to encrypt the target data a second time using a secondary encryption code if the target data has been verified to be undeciphered, thereby obtaining secondary encrypted data.

[0018] The transmission module is used to transmit the stored data based on the secondary encrypted data.

[0019] In one possible implementation, the device further includes:

[0020] The first detection module is used to detect the integrity of the stored data contained in the secondary encrypted data and obtain a first verification result;

[0021] The transmission module is used to send the stored data to the client when the first verification result indicates that the stored data is complete.

[0022] In one possible implementation, the device further includes:

[0023] The second detection module is used to detect the integrity of the stored data contained in the target data when the number of verifications to verify that the target data has been deciphered reaches a threshold, and to obtain a second verification result.

[0024] The data processing module is used to process the stored data based on the second verification result.

[0025] In one possible implementation, the data processing module is used for

[0026] If the second verification result indicates that the stored data is complete, then the stored data is copied, and the location information in the stored data is modified to generate new stored data;

[0027] If the second verification result indicates that the stored data is incomplete, then a data copy corresponding to the stored data is obtained, and the location information in the data copy is modified to generate new stored data; the data copy is backup data synchronized to other blockchain nodes in the blockchain system when the stored data is stored in the blockchain node.

[0028] The new storage data is sent to the blockchain node for encrypted storage.

[0029] In one possible implementation, the device further includes:

[0030] The code update module is used to update the first-level encryption code if the number of times the stored data is extracted through the same IP address exceeds a threshold within a target time period.

[0031] The third encryption module is used in the blockchain node to re-encrypt the stored data using the updated first-level encryption code.

[0032] On the other hand, a computer device is provided, the computer device including a processor and a memory, the memory storing at least one computer program, the at least one computer program being loaded and executed by the processor to implement the above-described method for managing blockchain data.

[0033] On the other hand, a computer-readable storage medium is provided, wherein at least one computer program is stored in the computer-readable storage medium, the computer program being loaded and executed by a processor to implement the above-described method for managing blockchain data.

[0034] On the other hand, a computer program product is provided, the computer program product comprising at least one computer program, the computer program being loaded and executed by a processor to implement the blockchain data management method provided in the various optional implementations described above.

[0035] The technical solution provided in this application may include the following beneficial effects:

[0036] The blockchain data management method provided in this application verifies the decryption status of the target data to be sent to the client during data transmission in the blockchain system. If the verification confirms that the target data has been decrypted, it indicates that the client may be an unauthorized client. To ensure the security of the data stored in the blockchain, the stored data contained in the target data is returned to the blockchain node, and the stored data is re-encrypted in the blockchain node. Through the above method, the difficulty of decrypting the stored data in the blockchain system is increased, the risk of the stored data being stolen is reduced, and the security of data transmission in the blockchain system is improved.

[0037] It should be understood that the above general description and the following detailed description are exemplary and explanatory only, and do not limit this application. Attached Figure Description

[0038] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0039] Figure 1 This illustration shows a schematic diagram of a blockchain data transmission system corresponding to a blockchain data management method provided in an exemplary embodiment of this application.

[0040] Figure 2 A flowchart illustrating a blockchain data management method according to an exemplary embodiment of this application is shown;

[0041] Figure 3 A flowchart illustrating a blockchain data management method provided in an exemplary embodiment of this application is shown;

[0042] Figure 4 This application illustrates a schematic diagram of a blockchain protection system corresponding to an exemplary embodiment of the blockchain data management method.

[0043] Figure 5 This illustration shows a schematic diagram of the interaction between the encryption component and the smart monitoring component in a blockchain protection system according to an exemplary embodiment of this application;

[0044] Figure 6 A schematic diagram of a blockchain data management device illustrated in an exemplary embodiment of this application is shown;

[0045] Figure 7 This is a structural block diagram of a computer device according to an exemplary embodiment. Detailed Implementation

[0046] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0047] Blockchain systems possess two core characteristics compared to traditional networks: data is tamper-proof and decentralized. These characteristics make the information recorded in blockchain systems more reliable and legitimate, reducing the likelihood of leakage and effectively protecting stored information. However, while blockchain nodes primarily use a distributed approach to protect stored data, the lack of independent protection for data within each node makes it easy for unauthorized individuals to decipher and steal data once they access the blockchain system. To avoid this, this application provides a blockchain data management method that uses encryption and intelligent detection components to verify and process stored data extracted from blockchain nodes, thereby achieving independent protection for the stored data within the blockchain nodes.

[0048] Figure 1 This illustration shows a schematic diagram of a blockchain data transmission system corresponding to a blockchain data management method provided in an exemplary embodiment of this application, such as... Figure 1 As shown, the blockchain transmission system includes a client 110, a transmission terminal 120, a cloud server 130, and a blockchain system 140.

[0049] The client can be an application on a user terminal, or an IoT device, etc. The client can send data files generated during use to the cloud server 130 via the transmission terminal 120. The transmission terminal 120 can use 5G network transmission, 4G network transmission, fiber optic network transmission, etc., for data file transmission. During the data file transmission process, the transmission terminal 120 has independent information security protection measures to ensure the security of the data file transmission process and prevent the theft of secrets during data file transmission.

[0050] After receiving the data file transmitted by the transmission terminal 120, the cloud server 130 distributes and stores the data file in the blockchain system 140. During data distribution, the cloud server 130 automatically categorizes each piece of data according to the file type. For example, the cloud terminal server 130 can categorize data based on the file format of the received data file, which can include formats such as .rar, .jpg, and .txt. The cloud terminal server can automatically categorize and define the content of the data file according to different data formats. Then, the data content in each category is divided into multiple different data groups and sent to various blockchain nodes in the blockchain system. Each data group has a unique MD5 value for identification and verification to prevent data errors and to identify the order of data within each group in the data file, so that the data file can be reconstructed after retrieving the data groups from each blockchain node.

[0051] The blockchain system 140 may contain several blockchain nodes. After receiving the stored data in the data packet, each blockchain node stores the stored data in the blockchain node and encrypts the stored data in the blockchain node using a first-level encryption component. The encrypted stored data is then synchronized to other blockchain nodes in the blockchain system. Optionally, the blockchain node may also generate index information for the stored data and its backup data in other blockchain nodes, and send and store the index information in the intelligent monitoring component. This index information is used to indicate the storage location of the stored data / backup data, making it easy for the intelligent monitoring component to query the stored data / backup data.

[0052] based on Figure 1 After the blockchain transmission system shown completes the storage of the data file, each blockchain node contains the corresponding stored data encrypted with first-level encryption code. Based on this, Figure 2 A flowchart illustrating an exemplary embodiment of this application is shown. This blockchain data management method can be executed by a computer device, which can be implemented as a server in a blockchain system. Figure 2 As shown, the method for managing this blockchain data may include the following steps:

[0053] Step 210: Obtain the target data that the blockchain node is to send to the client.

[0054] The target data is data extracted from blockchain nodes and sent to the client.

[0055] In this embodiment, when storing data in a blockchain node, the blockchain system encrypts the stored data once, that is, it encrypts the stored data using a first-level encryption code to ensure the security of the stored data; if the client is a legitimate client, the target data is the data obtained after encrypting the stored data using the first-level encryption code.

[0056] However, in scenarios where data is stored through a blockchain system, there may be instances where thieves use special methods to obtain authorization from more than half of the blockchain nodes and decipher the first-level encryption code to access the stored data. In such cases, the client is an illegitimate client, and the target data is already deciphered.

[0057] Step 220: If the target data is verified to have been deciphered, the stored data contained in the target data is resent to the blockchain node.

[0058] During the transmission of target data, computer devices can verify whether the target data has been decrypted. If it is determined that the target data has been decrypted, the transmission of the target data is blocked, and the stored data contained in the target data is resent to the corresponding blockchain node to prevent the stored data from being stolen.

[0059] Step 230: Re-encrypt the stored data in the blockchain node.

[0060] Optionally, the stored data can be re-encrypted using new Level 1 encryption code within the blockchain node to ensure the security of the stored data.

[0061] In summary, the blockchain data management method provided in this application verifies the decryption status of the target data to be sent to the client during data transmission in the blockchain system. If the verification confirms that the target data has been decrypted, it indicates that the client may be an unauthorized client. To ensure the security of the data stored in the blockchain, the stored data contained in the target data is returned to the blockchain node, and the stored data is re-encrypted in the blockchain node. Through the above method, thieves are required to repeatedly crack the data in the blockchain node, which increases the difficulty of decrypting the stored data in the blockchain system, reduces the risk of theft of stored data, and improves the security of data transmission in the blockchain system.

[0062] In this embodiment of the application, after the stored data is distributed to different blockchain nodes, the blockchain system will automatically encrypt the stored data in each blockchain node independently.

[0063] Optionally, the blockchain system may include a first-level encryption component, which is used to encrypt the stored data using first-level encryption code to obtain the first-level encrypted data stored in the blockchain node.

[0064] Optionally, when encrypting stored data in blockchain nodes, the primary encryption component can sort the blockchain nodes according to the priority of the stored data allocated to each node, and encrypt the stored data in each blockchain node sequentially according to the sorting result; the primary encryption codes corresponding to different blockchain nodes can be different. The priority of the stored data can be determined based on the priority of the data category corresponding to the stored data. Illustratively, storing data in various blockchain nodes includes:

[0065] Get the data file;

[0066] The data content of the data file is classified and defined to obtain the data content corresponding to at least two data categories;

[0067] The data content of each data category is grouped separately to obtain one or more data groups corresponding to each data category. Each data group contains stored data.

[0068] The stored data in each data group is stored in each blockchain node.

[0069] Optionally, when classifying and defining the data content of a data file, the data content can be classified and defined based on its data format.

[0070] Optionally, when encrypting stored data, a first-level encryption code can be added to the beginning and end of the stored data. This first-level encryption code can be a code of several digits that is a mixture of numbers and letters, such as a 6-digit code.

[0071] The first-level encryption code can be randomly generated, for example, it can be randomly generated based on a hash algorithm; the hash algorithm can convert any content into an unordered string to achieve the encryption function.

[0072] In this application embodiment, there are two scenarios: legitimate clients accessing stored data normally and illegitimate clients stealing stored data. Legitimate clients can be those that access the blockchain system by retrieving passwords (e.g., logging into the blockchain system using an account and password), while illegitimate clients can be those that access the blockchain system through special methods. Based on this, Figure 3The flowchart illustrates a blockchain data management method provided in an exemplary embodiment of this application. This blockchain data management method can be executed by a computer device, which can be implemented as a server in a blockchain system. Figure 3 As shown, the method for managing this blockchain data may include the following steps:

[0073] Step 310: Obtain the target data that the blockchain node is to send to the client.

[0074] In this embodiment, after encrypting the stored data using the first-level encryption code to obtain the first-level encrypted data, the file format is modified, that is, the file format of the first-level encrypted data is changed to the target format. For example, the original file format of the stored data is .rar, .jpg, or .txt, while the file format of the first-level encrypted data can be .jmk, .jms, etc.; the target format is a format that can only be recognized by the blockchain system. Therefore, if an unauthorized client steals data, the unauthorized client needs to first decipher the target format of the first-level encrypted data, and then decipher the first-level encryption code within the first-level encrypted data. However, in this embodiment, if the target format is deciphered, a deciphering record is automatically stored in the stored data, and the first-level encryption code is automatically deleted. Therefore, the computer device can determine whether the target data has been deciphered based on whether the target data contains the first-level encryption code and whether a deciphering record exists.

[0075] Step 320: If the target data is verified to have been deciphered, the stored data contained in the target data is resent to the blockchain node.

[0076] Optionally, if the target data does not contain level 1 encryption code and there is a decryption record, the target data is determined to have been decrypted;

[0077] Among them, the decryption record is a record automatically saved when the target format data is decrypted, and the first-level encryption code is the code used to encrypt the stored data in the blockchain node. The first-level encryption code is automatically deleted when the target format data is decrypted.

[0078] Optionally, to detect whether the target data has been decrypted, a secondary encryption component is included in the blockchain system; this secondary encryption component can identify the target format data to confirm whether the target data contains primary encryption code and whether there is a decryption record.

[0079] If the target data is decrypted, the target data may have the target format but contain level 1 encryption code; if the target data is verified to be decrypted, the client can be determined to be an illegitimate client.

[0080] Step 330: Re-encrypt the stored data in the blockchain node.

[0081] Optionally, if the target data is deciphered by the secondary encryption component, the stored data contained in the target data is resent to the primary encryption component, so that the primary encryption component can re-encrypt the stored data using the updated primary encryption code and store it in the blockchain node.

[0082] By re-sending the stored data to the primary encryption component for re-encryption through the secondary encryption component, the stored data cannot be leaked out of the blockchain system, reducing the possibility of thieves stealing the stored data.

[0083] Step 340: If the target data has not been deciphered, the target data is encrypted a second time using a secondary encryption code to obtain secondary encrypted data.

[0084] Specifically, if the target data contains Level 1 encryption code and there is no record of decryption, the target data is determined to be undecrypted. In this case, the client can be identified as a legitimate client.

[0085] Optionally, the process can be implemented as follows: the secondary encryption component identifies the target data in the target format; if it determines that the target data contains primary encryption code and there is no decryption record, it determines that the target data has not been decrypted; and then it performs secondary encryption on the target data using the secondary encryption code to obtain secondary encrypted data.

[0086] The secondary encryption of target data using a secondary encryption code can be achieved by the secondary encryption component decrypting the target data to obtain primary decrypted data, and then introducing a new code, the secondary encryption code, into the primary decrypted data to complete the secondary encryption. For illustration, this secondary encryption code can be randomly composed of four different digits. For illustration, the secondary encryption component can add the secondary encryption code before or after the primary encryption code.

[0087] Optionally, while introducing secondary encryption code into the target data, the primary encryption code may also be modified; the modification of the primary encryption code may include at least one of the following: change of order and change of character type.

[0088] In this embodiment, after encrypting the stored data, the primary encryption component generates a primary decryption key for the encrypted data and sends this key to the smart monitoring component in the blockchain system for storage. Correspondingly, when decrypting the target data, the secondary encryption component retrieves the corresponding primary decryption key from the smart monitoring component and decrypts the target data based on the correspondence between the primary decryption key and the primary encryption code.

[0089] After encrypting the data decrypted at level one, the secondary encryption component generates a secondary decryption key for the secondary encrypted data and sends this secondary decryption key to the intelligent monitoring component for storage.

[0090] Step 350: Transmit the stored data based on the secondary encrypted data.

[0091] By applying secondary encryption to the target data, thieves would need to crack the secondary encryption code before they could decipher it, either at the secondary encryption component or during data transmission based on the secondary encryption. This significantly increases the difficulty for thieves to steal the data.

[0092] Because some thieves maliciously damage the stored data, these thieves do not intend to obtain the stored data, but rather to destroy it, causing the content of the stored data to be missing, thus preventing the client from obtaining the complete stored data; in this embodiment of the application, in order to ensure the integrity of the stored data sent to the client, during the process of transmitting the stored data to the client based on secondary encrypted data, the computer device can also detect the integrity of the stored data contained in the secondary encrypted data and obtain a first verification result;

[0093] The stored data is sent to the client when the first verification result indicates that the stored data is complete.

[0094] Optionally, after verifying that the target data has not been decrypted and completing the secondary encryption, the secondary encryption component can send the secondary encrypted target data to the intelligent monitoring component for integrity testing. When the intelligent monitoring component receives the data sent by the secondary encryption component, it identifies the received data. If it determines that the received data contains secondary encryption code, it decrypts the received data using the secondary decryption key to obtain the stored data contained therein and verifies the integrity of the stored data.

[0095] If the intelligent monitoring component determines that the stored data is complete, it will send the stored data to the client.

[0096] If the intelligent monitoring component determines that stored data is missing, it activates a data copy to replace the corrupted stored data and sends it to the corresponding blockchain node for encrypted storage, thereby ensuring the integrity and security of the stored data. At the same time, the data copy is sent to the client to ensure that the client obtains the correct stored data.

[0097] Optionally, the intelligent monitoring component can verify the integrity of the stored data by storing data copies of the stored data in each blockchain node of the blockchain system; illustratively, if more than half of the data copies are consistent with the stored data, it indicates that the stored data is complete; if less than half of the data copies are consistent with the stored data, it indicates that the stored data is missing.

[0098] In one possible implementation, when the number of verifications to confirm that the target data has been deciphered reaches a threshold, the integrity of the stored data contained in the target data is checked to obtain a second verification result.

[0099] The stored data is processed based on the second verification result.

[0100] In other words, when a thief repeatedly deciphers the first-level encrypted data, and the verification result of the target data indicates that the number of verifications has reached the threshold, in order to prevent the stored data from being corrupted, the target data can be sent directly to the intelligent monitoring component without being encrypted with the second-level encryption code. When the intelligent monitoring component determines that the received target data is missing the second-level encryption code, it determines that the transmission is abnormal, verifies the integrity of the stored data in the data, obtains the second verification result, and performs different processing based on the second verification result.

[0101] The second verification result can indicate that the stored data is complete or incomplete. Different processing methods are used to process the stored data according to different indications.

[0102] As an illustration, if the second verification result indicates that the stored data is complete, the stored data is copied, the location information in the stored data is modified, and new stored data is generated; the new stored data is then sent to the blockchain node for encrypted storage.

[0103] If the second verification result indicates that the stored data is incomplete, a data copy corresponding to the stored data is obtained, and the location information in the data copy is modified to generate new stored data; the new stored data is sent to the blockchain node for encrypted storage; wherein, the data copy is backup data synchronized to other blockchain nodes in the blockchain system when the stored data is stored in the blockchain node.

[0104] The location information in the stored data can include file name, bID (Block ID), timestamp, and other information that can locate the stored data. The newly generated stored data is then sent to the corresponding blockchain node for encrypted storage. At the same time, the intelligent monitoring component records the relationship between the original stored data (the copied stored data) and the new stored data, so that when a normal retrieval request is received from a user, the corresponding original stored data can be found, thus preventing the loss of stored data.

[0105] If the second verification result indicates that the stored data is incomplete, a data copy corresponding to the stored data is obtained, and the location information in the data copy is modified to generate new stored data. The data copy is backup information synchronized to other blockchain nodes in the blockchain system when the stored data is stored in the blockchain node. The new stored data is sent to the blockchain node for encrypted storage.

[0106] If the intelligent monitoring component determines that there is missing data in the stored data, it means that the stored data has been corrupted. At this time, the intelligent monitoring component can obtain a copy of the stored data from other blockchain nodes in the blockchain system, modify the location information in the data copy, and store the modified data copy as a new stored data in the corresponding blockchain node, thereby ensuring the integrity of the stored data and preventing normal users from retrieving incorrect stored data.

[0107] Optionally, when the intelligent monitoring component determines that the stored data has been corrupted or stolen, it will also report the relevant information to the blockchain management terminal to remind relevant personnel to perform relevant maintenance on the blockchain system, thereby improving the security of data storage in the blockchain system.

[0108] In one possible implementation, if the number of times stored data is extracted from the same IP address exceeds a threshold within the target time period, the first-level encryption code is updated.

[0109] Within the blockchain node, the stored data is re-encrypted using updated primary encryption code.

[0110] In this embodiment of the application, the intelligent monitoring component can count the number of times the client extracts stored data and the IP address corresponding to the client; when the intelligent monitoring component detects that the number of times the extraction request is sent through the same IP address exceeds the threshold within the target time length, it instructs the first-level encryption component to update the first-level encryption code;

[0111] The stored data is re-encrypted using the updated Level 1 encryption code through the Level 1 encryption component.

[0112] The target time length and the number of times threshold can be set by relevant personnel.

[0113] When the intelligent monitoring component receives frequent accesses to the blockchain system from the same IP address to obtain stored data within a short period of time, the intelligent monitoring component will instruct the primary encryption component to automatically update and replace the primary encryption code used to encrypt the stored data. At the same time as replacing the primary encryption code, the primary encryption component will also update the corresponding primary decryption key and send it to the intelligent monitoring component. Then, the intelligent monitoring component will record the primary decryption key corresponding to the updated primary encryption code, so that when the blockchain node is accessed normally, it can decrypt the primary encrypted data with the latest primary decryption key.

[0114] When the same IP address is frequently accessing the blockchain system to obtain stored data within a short period of time, it may be that thieves are trying to decipher the encrypted stored data in the blockchain nodes. Therefore, by instructing the first-level encryption component through the intelligent monitoring component to automatically update the first-level encryption code, thieves will not be able to use a single cracking method to steal data. This increases the cost for thieves to steal stored data in the blockchain nodes, raises the threshold for thieves to steal data, and reduces the possibility of some thieves stealing data.

[0115] In this embodiment, the blockchain system may further include a self-learning component. The intelligent detection component can transmit monitored anomaly records to the self-learning component. The self-learning component can automatically match appropriate protection schemes for the received anomaly records, so that they can be used when the same anomaly records reappear. In the self-learning component, relevant personnel can pre-import multiple basic protection schemes. For example, when a thief frequently accesses the blockchain using the same IP address, updating the encryption code can prevent the thief from intervening in the blockchain system. The self-learning component will automatically summarize the scheme, and when the same attack method is encountered again, it will instruct the intelligent detection component to quickly use the updated encryption code to block and protect. By actively optimizing the protection logic of the intelligent detection component, it is not necessary to select multiple schemes for testing and blocking when attacked, so that the intelligent detection component can react faster and faster during use.

[0116] Figure 4 This application illustrates a schematic diagram of a blockchain protection system corresponding to an exemplary embodiment of a blockchain data management method, such as... Figure 4 As shown, the blockchain protection system may include an encryption component 410, an intelligent monitoring component 420, and a self-learning component 430.

[0117] The encryption component 410 includes a primary encryption component and a secondary encryption component. The intelligent monitoring component 420 sends anomalies to the self-learning component 430. The self-learning component 430 automatically simulates and matches the optimal protection scheme corresponding to the anomaly and sends it to the intelligent monitoring component 420. This allows the intelligent monitoring component to block and protect against the same anomaly based on the protection scheme. The anomaly can be detected by the intelligent monitoring component or detected and sent to the intelligent monitoring component by the encryption component 410. For example, the intelligent monitoring component might detect repeated access from the same IP address, or the primary encryption component 410 might detect an illegitimate client initiating the extraction request. Illustratively, when the intelligent monitoring component 420 detects repeated access from an IP address, it continuously instructs the primary encryption component in the encryption component 410 to update the encryption code based on the protection scheme pre-instructed by the self-learning component, thereby increasing the cost for data theft.

[0118] In summary, the blockchain data management method provided in this application verifies the decryption status of the target data to be sent to the client during data transmission in the blockchain system. If the verification confirms that the target data has been decrypted, it indicates that the client may be an unauthorized client. To ensure the security of the data stored in the blockchain, the stored data contained in the target data is returned to the blockchain node, and the stored data is re-encrypted in the blockchain node. Through the above method, thieves are required to repeatedly crack the data in the blockchain node, which increases the difficulty of decrypting the stored data in the blockchain system, reduces the risk of theft of stored data, and improves the security of data transmission in the blockchain system.

[0119] Meanwhile, after confirming that the first-level encrypted data has not been deciphered, the integrity of the stored data is checked to send the complete stored data to the client, avoiding the possibility of missing stored data sent to the client. In addition, in the event that the stored data is corrupted, the corrupted stored data in the blockchain node can be replaced in a timely manner, ensuring the security and accuracy of the stored data in the blockchain node.

[0120] Figure 5 This application illustrates an exemplary embodiment of the interaction between an encryption component and a smart monitoring component in a blockchain protection system, as shown in the diagram. Figure 5As shown, the encryption component includes a primary encryption component 510 and a secondary encryption component 520. In each encryption component, data is encrypted once upon import. When storing the data in a blockchain node, it is encrypted once by the primary encryption component 510, and the file format is changed to a target format, resulting in encrypted data. This target format is a file format that can be recognized by the primary encryption component, secondary encryption component, and smart monitoring component in the blockchain system. During data export, it passes through the secondary encryption component 520. When the secondary encryption component 520 confirms that the received target data has not been cracked (i.e., successful verification), it modifies the primary encryption code used by the primary encryption component to encrypt the stored data and introduces secondary encryption code to avoid the vulnerability of single encryption. The data, after secondary encryption, is imported into the smart monitoring component 530. After the smart monitoring component verifies and decrypts the stored data and verifies its integrity, it imports the stored data into the transmission terminal for further transmission to the client for user viewing.

[0121] However, when the secondary encryption component 520 confirms that the received target data has been cracked (i.e., verification fails), it will return the stored data from the received data to the primary encryption component 510 for re-encryption using updated primary encryption code. This prevents the stored data from leaking out of the blockchain and increases the difficulty of decryption, allowing thieves to repeatedly attempt to decrypt the primary encrypted data. If the secondary encryption component 520 fails verification multiple times, for example... Figure 5 If the secondary verification fails, the data without secondary encryption code will be sent directly to the intelligent monitoring component 530 to verify the integrity of the stored data. After completing the integrity verification of the stored data and generating new stored data, the intelligent monitoring component 530 will return the new stored data and store it in the corresponding blockchain node. The new stored data will be re-encrypted by the primary encryption component 510 to prevent the stored data from being corrupted and to ensure the integrity of the stored data.

[0122] The various processes involved in the above process can be referred to Figure 2 or Figure 3 The relevant details of the illustrated embodiments will not be repeated here.

[0123] Figure 6 This application shows a schematic diagram of a blockchain data management device according to an exemplary embodiment, which can be used to implement, for example... Figure 2 , Figure 3 All or part of the steps of any of the illustrated embodiments, such as Figure 6 As shown, the device may include:

[0124] Data acquisition module 610 is used to acquire target data that the blockchain node is to send to the client;

[0125] The sending module 620 is used to resend the stored data contained in the target data to the blockchain node if it is verified that the target data has been deciphered.

[0126] The first encryption module 630 is used to re-encrypt the stored data in the blockchain node.

[0127] In one possible implementation, the target data is in a target format, and the apparatus further includes:

[0128] The first determining module is used to determine that the target data has been decrypted when it is verified that the target data does not contain level 1 encryption code and there is a decryption record.

[0129] The decryption record is a record automatically saved when the target format data is decrypted, the first-level encryption code is the code used to encrypt the target data in the blockchain node, and the first-level encryption code is automatically deleted when the target format data is decrypted.

[0130] In one possible implementation, the device further includes:

[0131] The second encryption module is used to encrypt the target data a second time using a secondary encryption code if the target data has been verified to be undeciphered, thereby obtaining secondary encrypted data.

[0132] The transmission module is used to transmit the stored data based on the secondary encrypted data.

[0133] In one possible implementation, the device further includes:

[0134] The first detection module is used to detect the integrity of the stored data contained in the secondary encrypted data and obtain a first verification result;

[0135] The transmission module is used to send the stored data to the client when the first verification result indicates that the stored data is complete.

[0136] In one possible implementation, the device further includes:

[0137] The second detection module is used to detect the integrity of the stored data contained in the target data when the number of verifications to verify that the target data has been deciphered reaches a threshold, and to obtain a second verification result.

[0138] The data processing module is used to process the stored data based on the second verification result.

[0139] In one possible implementation, the data processing module is used for

[0140] If the second verification result indicates that the stored data is complete, then the stored data is copied, and the location information in the stored data is modified to generate new stored data;

[0141] If the second verification result indicates that the stored data is incomplete, then a data copy corresponding to the stored data is obtained, and the location information in the data copy is modified to generate new stored data; the data copy is backup data synchronized to other blockchain nodes in the blockchain system when the stored data is stored in the blockchain node.

[0142] The new storage data is sent to the blockchain node for encrypted storage.

[0143] In one possible implementation, the device further includes:

[0144] The code update module is used to update the first-level encryption code if the number of times the stored data is extracted through the same IP address exceeds a threshold within a target time period.

[0145] The third encryption module is used in the blockchain node to re-encrypt the stored data using the updated first-level encryption code.

[0146] In summary, the blockchain data management method provided in this application verifies the decryption status of the target data to be sent to the client during data transmission in the blockchain system. If the verification confirms that the target data has been decrypted, it indicates that the client may be an unauthorized client. To ensure the security of the data stored in the blockchain, the stored data contained in the target data is returned to the blockchain node, and the stored data is re-encrypted in the blockchain node. Through the above method, thieves are required to repeatedly crack the data in the blockchain node, which increases the difficulty of decrypting the stored data in the blockchain system, reduces the risk of theft of stored data, and improves the security of data transmission in the blockchain system.

[0147] Meanwhile, after confirming that the first-level encrypted data has not been deciphered, the integrity of the stored data is checked to send the complete stored data to the client, avoiding the possibility of missing stored data sent to the client. In addition, in the event that the stored data is corrupted, the corrupted stored data in the blockchain node can be replaced in a timely manner, ensuring the security and accuracy of the stored data in the blockchain node.

[0148] Figure 7A structural block diagram of a computer device 700 illustrating an exemplary embodiment of this application is shown. This computer device can be implemented as a server in the blockchain system described above. The computer device 700 includes a Central Processing Unit (CPU) 701, a system memory 704 including Random Access Memory (RAM) 702 and Read-Only Memory (ROM) 703, and a system bus 705 connecting the system memory 704 and the CPU 701. The computer device 700 also includes a mass storage device 706 for storing an operating system 709, application programs 710, and other program modules 711.

[0149] Without loss of generality, the computer-readable medium may include computer storage media and communication media. Computer storage media include volatile and non-volatile, removable and non-removable media implemented using any method or technology for storing information such as computer-readable instructions, data structures, program modules, or other data. Computer storage media include RAM, ROM, erasable programmable read-only memory (EPROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other solid-state memory technologies, CD-ROM, digital versatile disc (DVD) or other optical storage, magnetic tape cassettes, magnetic tape, disk storage, or other magnetic storage devices. Of course, those skilled in the art will recognize that the computer storage media are not limited to the above-mentioned types. The system memory 704 and mass storage device 706 described above can be collectively referred to as memory.

[0150] According to various embodiments of this application, the computer device 700 can also be connected to a remote computer on a network, such as the Internet. That is, the computer device 700 can be connected to a network 708 via a network interface unit 707 connected to the system bus 705, or it can use the network interface unit 707 to connect to other types of networks or remote computer systems (not shown).

[0151] The memory also includes at least one instruction, at least one program, code set, or instruction set, which are stored in the memory. The central processing unit 701 executes the at least one instruction, at least one program, code set, or instruction set to implement all or part of the steps in the blockchain data management method shown in the above embodiments.

[0152] In one exemplary embodiment, a computer-readable storage medium is also provided, which stores at least one computer program that is loaded and executed by a processor to implement all or part of the steps in the blockchain data management method described above. For example, the computer-readable storage medium may be a read-only memory (ROM), a random access memory (RAM), a compact disc read-only memory (CD-ROM), magnetic tape, floppy disk, or optical data storage device, etc.

[0153] In one exemplary embodiment, a computer program product is also provided, comprising at least one computer program that is loaded and executed by a processor. Figure 2 or Figure 3 All or part of the steps of the blockchain data management method shown in any embodiment.

[0154] Other embodiments of this application will readily occur to those skilled in the art upon consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any variations, uses, or adaptations of this application that follow the general principles of this application and include common knowledge or customary techniques in the art not disclosed herein. The specification and examples are to be considered exemplary only, and the true scope and spirit of this application are indicated by the claims.

[0155] It should be understood that this application is not limited to the precise structure described above and shown in the accompanying drawings, and various modifications and changes can be made without departing from its scope. The scope of this application is limited only by the appended claims.

Claims

1. A method for managing blockchain data, characterized in that, The method includes: Obtain the target data that the blockchain node is about to send to the client; If the target data is verified to have been deciphered, the stored data contained in the target data will be resent to the blockchain node; The stored data is re-encrypted in the blockchain node; Wherein, the file format of the target data is a target format, which is a format that the blockchain system can recognize; the method further includes: When it is verified that the target data does not contain level 1 encryption code and there is a decryption record, it is determined that the target data has been decrypted; the decryption record is a record automatically retained when the data in the target format is decrypted, the level 1 encryption code is the code used to encrypt the stored data in the blockchain node, and the level 1 encryption code is automatically deleted when the data in the target format is decrypted.

2. The method according to claim 1, characterized in that, The method further includes: If the target data is verified to be undeciphered, it is then encrypted a second time using a secondary encryption code to obtain secondary encrypted data. The stored data is transmitted based on the secondary encrypted data.

3. The method according to claim 2, characterized in that, The method further includes: The integrity of the stored data contained in the secondary encrypted data is detected to obtain a first verification result; When the first verification result indicates that the stored data is complete, the stored data is sent to the client.

4. The method according to claim 1, characterized in that, The method further includes: When the number of verifications to confirm that the target data has been deciphered reaches a threshold, the integrity of the stored data contained in the target data is checked to obtain a second verification result; The stored data is processed based on the second verification result.

5. The method according to claim 4, characterized in that, The processing of the stored data based on the second verification result includes: If the second verification result indicates that the stored data is complete, then the stored data is copied, and the location information in the stored data is modified to generate new stored data; If the second verification result indicates that the stored data is incomplete, then a data copy corresponding to the stored data is obtained, and the location information in the data copy is modified to generate new stored data; the data copy is backup data synchronized to other blockchain nodes in the blockchain system when the stored data is stored in the blockchain node. The new storage data is sent to the blockchain node for encrypted storage.

6. The method according to claim 1, characterized in that, The method further includes: If the number of times the stored data is extracted from the same IP address exceeds the threshold within the target time period, the first-level encryption code will be updated. In the blockchain node, the stored data is re-encrypted using the updated first-level encryption code.

7. A blockchain data management device, characterized in that, The device includes: The data acquisition module is used to acquire the target data that the blockchain node is about to send to the client; The sending module is used to resend the stored data contained in the target data to the blockchain node if it is verified that the target data has been deciphered; The first encryption module is used to re-encrypt the stored data in the blockchain node; Wherein, the target data is in a target format, which is a format that the blockchain system can recognize; the device further includes: The first determining module is used to determine that the target data has been decrypted when it is verified that the target data does not contain level 1 encryption code and there is a decryption record. The decryption record is a record automatically saved when the target format data is decrypted, the first-level encryption code is the code used to encrypt the target data in the blockchain node, and the first-level encryption code is automatically deleted when the target format data is decrypted.

8. A computer device, characterized in that, The computer device includes a processor and a memory, the memory storing at least one computer program, which is loaded and executed by the processor to implement the blockchain data management method as described in any one of claims 1 to 6.

9. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores at least one computer program, which is loaded and executed by a processor to implement the blockchain data management method as described in any one of claims 1 to 6.

Images