An information processing method and apparatus

Abstract

The application discloses an information processing method and device, and relates to the technical field of blockchains, and aims to improve the credibility of information data. The method comprises the following steps: after determining that the identity information of a data collection device is verified, a management device can send an encryption public key for encrypting plaintext information to the data collection device. After receiving the encryption public key, the data collection device can encrypt the plaintext information stored by the data collection device according to the encryption public key to obtain first ciphertext, and send the first ciphertext to a storage device. The management device can send a decryption private key for decryption to the storage device, so that, after receiving the first ciphertext, the storage device can decrypt the first ciphertext according to the decryption private key to obtain plaintext information. In addition, after determining that the storage device successfully obtains the plaintext information, the management device updates the first key pair.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of blockchain, and in particular to an information processing method and device. BACKGROUND

[0002] In order to ensure the quality of products, product manufacturers usually monitor important links of product production to prevent quality problems of products. However, the existing technical solutions usually internally store product monitoring information, and consumers cannot conveniently obtain product production information. Or, the product monitoring information is publicly stored, but this way is easy to be tampered with, resulting in low credibility of the monitoring information.

[0003] In the existing technical solutions, although important links of products are monitored, the storage manner of the monitoring information cannot make the products gain the trust of consumers. Therefore, how to process the monitoring information and improve the credibility of the monitoring information has become a key point in the technical field. SUMMARY

[0004] Embodiments of the present application provide an information processing method and device to improve the credibility of information data.

[0005] In a first aspect, an information processing method is provided, comprising: a management device receiving a first indication from a verification device. The first indication is used to indicate that the identity information of a data collection device is successfully verified. The management device sends an encryption public key to the data collection device, and the encryption public key is used to encrypt plaintext information to obtain first ciphertext. The management device sends a decryption private key to a storage device, and the decryption private key is used to decrypt the first ciphertext to obtain the plaintext information. The encryption public key and the decryption private key form a first key pair. The management device receives a second indication from the storage device, and the second indication is used to indicate that the storage device successfully obtains the plaintext information. The management device updates the first key pair.

[0006] By using the method, the identity information of the data collection device is verified, which can improve the security in the process of collecting the plaintext information. The keys for encrypting and decrypting the plaintext information are distributed by the management device, which can improve the security of the plaintext information in the transmission process. The management device updates the first key pair to ensure that different plaintext information corresponds to different key pairs, thereby improving the security in the process of encrypting and decrypting the plaintext information.

[0007] In a possible design, the management device sends an identity authentication public key to the data collection device, the identity authentication public key is used to encrypt the first ciphertext to obtain second ciphertext, and the second ciphertext is used to indicate that the device sending the first ciphertext is a device whose identity information is successfully verified. The management device sends an identity authentication private key to the storage device, the identity authentication private key is used to decrypt the second ciphertext to obtain the first ciphertext, and the identity authentication public key and the identity authentication private key form a second key pair.

[0008] With the design, the second ciphertext is obtained by processing the first ciphertext according to the identity authentication public key, and therefore, the device corresponding to the first ciphertext can be determined as a trusted device according to the second ciphertext, so as to ensure the accuracy of the first ciphertext and improve the trustworthiness of the information data.

[0009] In a possible design, the management device updates the second key pair.

[0010] With the design, different ciphertexts can correspond to different identity authentication public keys / private keys (i.e., the second key pair), so as to avoid the influence of leakage of the second key pair on the identity authentication of other ciphertexts, and further improve the security of the data.

[0011] In a possible design, the management device sends an integrity verification public key to the data collection device, the integrity verification public key being used to encrypt the second ciphertext to obtain a third ciphertext. The management device sends an integrity verification private key to the storage device, the integrity verification private key being used to decrypt the third ciphertext to obtain the second ciphertext, and the integrity verification public key and the integrity verification private key form a third key pair.

[0012] With the design, the integrity of the data is verified, so as to avoid data loss or tampering, and thus the integrity of the data is ensured.

[0013] In a second aspect, an information processing apparatus is further provided in the embodiments of the present application, and the apparatus includes a communication module and a processing module.

[0014] The communication module is configured to receive a first indication from a verification device, the first indication being used to indicate that the identity information of the data collection device is successfully verified.

[0015] The communication module is further configured to send an encryption public key to the data collection device, the encryption public key being used to encrypt plaintext information to obtain a first ciphertext. And,

[0016] The communication module is further configured to send a decryption private key to the storage device, the decryption private key being used to decrypt the first ciphertext to obtain the plaintext information, and the encryption public key and the decryption private key form a first key pair.

[0017] The communication module is further configured to receive a second indication from the storage device, the second indication being used to indicate that the storage device successfully obtains the plaintext information.

[0018] The processing module is configured to update the first key pair.

[0019] In a possible design, the communication module is further configured to send an identity authentication public key to the data collection device, the identity authentication public key being used to encrypt the first ciphertext to obtain a second ciphertext, and the second ciphertext is used to indicate that the device sending the first ciphertext is a device whose identity information is successfully verified.

[0020] The communication module is further configured to send the identity authentication private key to the storage device, the identity authentication private key being used to decrypt the second ciphertext to obtain the first ciphertext, and the identity authentication public key and the identity authentication private key forming a second key pair.

[0021] In a possible design, the processing module is further configured to update the second key pair.

[0022] In a possible design, the communication module is further configured to send the integrity verification public key to the data collection device, the integrity verification public key being used to encrypt the second ciphertext to obtain a third ciphertext.

[0023] The communication module is further configured to send the integrity verification private key to the storage device, the integrity verification private key being used to decrypt the third ciphertext to obtain the second ciphertext, and the integrity verification public key and the integrity verification private key forming a third key pair.

[0024] In a third aspect, an embodiment of the present application further provides an electronic device, which comprises a processor configured to implement the method in the first aspect and any design of the first aspect.

[0025] In a fourth aspect, an embodiment of the present application further provides a computer readable storage medium, which stores a computer program, and the computer program is configured to implement the method in the first aspect and any design of the first aspect when executed by a processor.

[0026] The technical effects brought by the second aspect to the fourth aspect and any design thereof can refer to the technical effects brought by the corresponding design in the first aspect, which will not be described here again. BRIEF DESCRIPTION OF DRAWINGS

[0027] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings needed in the embodiment description will be briefly introduced. Obviously, the drawings in the following description are only some embodiments of the present application, and other drawings can be obtained by those skilled in the art without creative labor.

[0028] Figure 1 A structural schematic diagram of a data processing apparatus provided by an embodiment of the present application;

[0029] Figure 2 A flowchart of a data processing method provided by an embodiment of the present application;

[0030] Figure 3 A structural schematic diagram of another data processing apparatus provided by an embodiment of the present application;

[0031] Figure 4 A structural schematic diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0032] In order to make the purposes, technical solutions and advantages of the present application clearer, the technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative work fall within the protection scope of the present application. The embodiments in the present application and the features in the embodiments can be combined with each other arbitrarily without conflict. Moreover, although a logical sequence is shown in the flowchart, in some cases, the steps shown or described can be performed in an order different from the one shown here.

[0033] The terms "first" and "second" in the specification and claims of the present application and the above drawings are used to distinguish different objects, rather than to describe a specific sequence. In addition, the term "comprising" and any variations thereof are intended to cover non-exclusive protection. For example, a process, method, system, product or device including a series of steps or units is not limited to the listed steps or units, but can optionally include steps or units not listed, or can optionally include other steps or units inherent to the process, method, product or device. "Multiple" in the present application can mean at least two, for example, can be two, three or more, and the embodiments of the present application are not limited.

[0034] In the technical solutions of the present application, the collection, transmission and use of data comply with the requirements of relevant national laws and regulations.

[0035] Before introducing the information processing method provided by the embodiments of the present application, in order to facilitate understanding, first, the technical background of the embodiments of the present application is introduced in detail below.

[0036] In order to improve the trust of consumers to the product, the manufacturer of the product usually discloses the monitoring information of important links in the production process of the product to the consumers. At present, the way of the manufacturer to disclose the monitoring information to the consumers is usually to directly disclose the monitoring information of the product, however, the monitoring information is easy to be tampered by other illegal personnel, thereby leading to low credibility of the monitoring information.

[0037] Therefore, how to improve the credibility of the monitoring information becomes the key point of the development of the field.

[0038] In order to solve the above defects, the present application provides an information processing method and device to improve the credibility of information data.

[0039] In the present application, the method comprises: the management device receives a first indication from the verification device, the first indication being used to indicate that the identity information of the data collection device is successfully verified. The management device sends an encryption public key to the data collection device, the encryption public key being used to encrypt plaintext information to obtain first ciphertext, and the encryption public key corresponding to the plaintext information. The management device sends a decryption private key to the storage device, the decryption private key being used to decrypt the first ciphertext to obtain the plaintext information, and the encryption public key and the decryption private key forming a first key pair. The management device receives a second indication from the storage device, the second indication being used to indicate that the storage device successfully obtains the plaintext information. The management device updates the first key pair.

[0040] It can be understood that, after determining that the identity information of the data collection device is verified, the management device in the present application can send an encryption public key used to encrypt plaintext information to the data collection device. After receiving the encryption public key, the data collection device can encrypt the plaintext information stored by itself according to the encryption public key to obtain first ciphertext, and send the first ciphertext to the storage device. The management device can send a decryption private key used for decryption to the storage device, so that after receiving the first ciphertext, the storage device can decrypt the first ciphertext according to the decryption private key to obtain the plaintext information. In addition, after determining that the storage device successfully obtains the plaintext information, the management device updates the first key pair.

[0041] Therefore, in the present method, the identity information of the data collection device is verified, which can improve the security in the process of collecting plaintext information. The encryption and decryption keys of the plaintext information are distributed by the management device, which can improve the security of the plaintext information in the transmission process. The management device updates the first key pair to ensure that different plaintext information corresponds to different key pairs, thereby improving the security in the process of encrypting and decrypting the plaintext information.

[0042] In addition, the management device, the data collection device, the verification device or the storage device can be included in a computer system for executing the method shown in the present application, or can be a processing device, such as a processor or a processing module, etc., in the computer system for executing the method shown in the present application. The management device, the data collection device, the verification device or the storage device can be a fixed device or a portable device, which is not specifically limited in the present application.

[0043] Blockchain is a block chain storage, tamper-proof, secure and trusted decentralized distributed ledger, which combines distributed storage, peer-to-peer transmission, consensus mechanism, cryptography and other technologies, and records transactions and information through a growing data block chain to ensure data security and transparency. In order to ensure the security and traceability of the data in the present application, the data in the present application can be stored on the blockchain. The management device, the data collection device, the verification device or the storage device can be a device on the blockchain.

[0044] The data collection device can be used to obtain the plaintext information of the product production, transportation, and sales on the blockchain. For example, as shown in Figure 1 The inspection terminal 101 can be a data collection device, and the detection terminal 101 can be connected with at least one sensor (such as the sensor 105 in Figure 1 The storage device can be a device or terminal for storing plaintext information. For example, as shown in Figure 1 The receiving terminal 103 can be a storage device, and the verification terminal 102 can be a verification device. The storage device can communicate with the data collection device and the verification device through a wired network and / or a wireless network. The storage device can also be a server or a computing terminal accessible by consumers. For example, the consumer can hold a mobile terminal (such as the mobile terminal 104 in Figure 1 The consumer can communicate with the storage device through a wireless network and / or a wired network to query the plaintext information.

[0045] Figure 2 The flowchart of the information processing method provided by the embodiment of the present application is shown. Taking the management device, the data collection device, the verification device, and the storage device as the execution subject, the flowchart can include the following steps:

[0046] S101, the data collection device sends identity information to the verification device. Correspondingly, the verification device receives the identity information from the data collection device.

[0047] In the present application, the data collection device can include multiple different devices. For example, the data collection device can be a device for collecting data of different links. Alternatively, the data collection device can be a device including multiple different users / roles. For example, one data collection device can be a device for collecting data of multiple links, wherein different links correspond to different user / role information.

[0048] For example, taking a chemical fertilizer product as an example, the chemical fertilizer product can be produced by a chemical fertilizer manufacturer and sold to a product distributor, and the product distributor can sell the chemical fertilizer to a chemical fertilizer farmer. In the production process of the chemical fertilizer, the device corresponding to the chemical fertilizer manufacturer can be the data collection device. In the sales process of the chemical fertilizer, the device corresponding to the product distributor can be the data collection device. That is, the devices corresponding to the chemical fertilizer manufacturer and the product distributor can be two different data collection devices. In addition, the production link of the chemical fertilizer can include multiple production, quality inspection, and other production links, and different production links can correspond to different users in the same data collection device.

[0049] In one or more embodiments, the verification device is a trusted device for verifying the identity information of other devices. For example, the verification device can be a device with product authority certification.

[0050] In one or more embodiments, the identity information can be information indicating the identity of the data collection device. For example, the identity information can be a unique identification code of the device. The identity information can also be user information of an operator of the device. Alternatively, the identity information can be a unique identification code of the device and user information of the operator. In addition, in order to improve the accuracy of identity verification, the identity information is not limited to information such as a username and password, which is relatively easy to tamper with or steal.

[0051] Optionally, the data collection device can be connected to the verification device through a wired interface and / or a wireless interface, and send the identity information of the device to the verification device. Correspondingly, the verification device can receive the identity information of the data collection device through the wired interface and / or the wireless interface.

[0052] S102, the verification device verifies the identity of the data collection device according to the identity information.

[0053] As an example, after receiving the identity information of the data collection device, the verification device can compare the identity information with the information stored by itself, and determine whether the device is a normal device.

[0054] Illustratively, the verification device can verify the identity of the data collection device by table lookup. For example, as shown in FIG. 1, the verification terminal 102 can verify the identity of the detection terminal 101 by comparing the identity information with the data in the rule database 106. In addition, the verification device can also verify the identity of the data collection device by other ways, which are not limited in the present application. Figure 1

[0055] In one or more embodiments, when the verification device determines that the data collection device is an abnormal device, the verification device can store the unique identification information such as the device identification or network interface of the data collection device, and limit the verification times of the data collection device, so as to avoid the abnormal device from performing malicious verification for multiple times.

[0056] In one or more embodiments, when the verification device determines that the data collection device is a normal device, the verification device can send a message to the management device that the data collection device is a normal device. The verification device can also send a message to the data collection device that the verification is passed. Optionally, the verification device can send a message to the data collection device through the wired interface and / or the wireless interface that the identity verification is successful.

[0057] ​Optionally, the verification terminal can send the data of the data collection device to the monitor in the form of ciphertext, and the monitor can monitor and verify the data. For example, the verification terminal can send the identity information of the distributor to the monitor, and the monitor can verify whether the identity of the distributor is normal according to the identity information of the distributor, and issue a sales channeling warning prompt if the identity is not normal.

[0058] Alternatively, the verification terminal can send all the data of the data collection device to the monitor, and the monitor can perform secondary verification or spot check on the data.

[0059] Based on step S102, the verification device verifies whether the data collection device is a normal device, which can ensure the security of the collected plaintext information and improve the credibility of the information.

[0060] S103, the verification device sends a first indication to the management device. Correspondingly, the management device receives the first indication from the verification device. The first indication is used to indicate that the identity information of the data collection device is successfully verified. The management device is a trusted device, or the management device is a device that has passed the identity verification in advance.

[0061] In one or more embodiments, the verification device can be connected to the management device through a wired interface and / or a wireless interface, and correspondingly, the verification device can send the first indication to the management device through the wired interface and / or the wireless interface.

[0062] Optionally, the first indication can also carry the device identifier, address identifier, etc. of the data collection device. For example, the header of the first indication is used to indicate the identity identifier of the successfully verified identity device.

[0063] The management device can determine that the data collection device is a normal device according to the first indication. The management device can store the device identifier of the data collection device, so that the management device can determine that the device is a normal device according to the information stored by itself in the future. Alternatively, the management device can not store the device identifier of the data collection device, and determine that the data collection device is a normal device according to the first indication each time.

[0064] S104, the management device sends an encryption public key to the data collection device. Correspondingly, the data collection device receives the encryption public key from the management device. The encryption public key is used to encrypt the plaintext information.

[0065] In one or more embodiments, the management device can send the encryption public key to the data collection device after receiving the first indication. Correspondingly, the data collection device receives the encryption public key from the management device.

[0066] For example, when the data collection device needs to encrypt the plaintext information, the data collection device can first verify the identity information sent by the device to verify the identity of the device. After the verification device determines that the data collection device is a normal device, the verification device sends an indication of successful verification of the data collection device to the management device, and the management device sends the encryption public key to the data collection device.

[0067] In one or more embodiments, the data collection device can send a first request for requesting the encryption public key to the management device, and the management device can send the encryption public key to the data collection device according to the first request after receiving the first indication.

[0068] For example, after the data collection device receives the successful verification message of the verification device, the data collection device can send a first request for requesting the encryption public key to the management device. The management device can send the encryption public key to the data collection device according to the first request and the first indication.

[0069] Optionally, the management device can be connected with the data collection device through a wired interface and / or a wireless interface. Correspondingly, the management device can send the encryption public key to the data collection device through the wired interface and / or the wireless interface. The data collection device receives the encryption public key from the management device through the wired interface and / or the wireless interface.

[0070] S105, the management device sends the decryption private key to the storage device. Correspondingly, the storage device receives the decryption private key from the management device. Wherein, the decryption private key and the encryption public key form a first key pair. That is, the ciphertext obtained by the encryption public key can be decrypted by the decryption private key.

[0071] In one or more embodiments, after the management device sends the encryption public key, the management device can send the corresponding decryption private key to the storage device. Alternatively, the management device can send the corresponding decryption private key to the storage device when sending the encryption public key. Alternatively, the management device can send the corresponding decryption private key to the storage device before sending the encryption public key.

[0072] For example, when the management device sends the encryption public key according to the first indication, the management device can send the decryption private key to the storage device according to the first indication. Alternatively, when the management device sends the encryption public key according to the first request, the management device can send the decryption private key to the storage device according to the first request. Correspondingly, the storage device receives the decryption private key from the management device.

[0073] Optionally, the management device can be connected with the storage device through a wired interface and / or a wireless interface. Correspondingly, the management device can send the decryption private key to the storage device through the wired interface and / or the wireless interface. The storage device receives the decryption private key from the management device through the wired interface and / or the wireless interface.

[0074] It can be understood that the application does not limit the execution order of steps S104 and S105. The application can execute step S104 first and then execute step S105, or execute step S105 first and then execute step S104.

[0075] In one or more embodiments, the management device can send the identity authentication public key to the data collection device. Correspondingly, the data collection device receives the identity authentication public key from the management device.

[0076] As an example, after receiving the first indication, the management device can send the encryption public key and the identity authentication public key to the data management device at the same time, or send the encryption public key and the identity authentication public key to the data management device separately.

[0077] As another example, the first request sent by the data collection device can also be used to request the identity authentication public key. After receiving the first indication, the management device can send the identity authentication public key to the data collection device according to the first request. Alternatively, the data collection device sends a second request to the management device for separately requesting the identity authentication public key, and the management device sends the identity authentication public key to the data collection device according to the second request.

[0078] In one or more embodiments, the management device can send the identity authentication private key to the storage device. Correspondingly, the storage device can receive the identity authentication private key from the management device. The identity authentication public key and the identity authentication private key form a second key pair.

[0079] As an example, after sending the identity authentication public key, the management device can send the corresponding identity authentication private key to the storage device. Alternatively, the management device can send the corresponding identity authentication private key to the storage device when sending the identity authentication public key. Alternatively, the management device can send the corresponding identity authentication private key to the storage device before sending the identity authentication public key.

[0080] As an example, when the management device sends the identity authentication public key according to the first indication, the management device can send the identity authentication private key to the storage device according to the first indication. Alternatively, when the management device sends the identity authentication public key according to the first request, the management device can send the identity authentication private key to the storage device according to the first request. Alternatively, when the management device sends the identity authentication public key according to the second request, the management device can send the identity authentication private key to the storage device according to the second request. Correspondingly, the storage device receives the identity authentication private key from the management device.

[0081] In one or more embodiments, the management device can send the integrity verification public key to the data collection device. Correspondingly, the data collection device receives the integrity verification public key from the management device.

[0082] As an example, the management device can send the encryption public key and the integrity verification public key to the data management device simultaneously after receiving the first indication, or send the encryption public key and the integrity verification public key to the data management device separately.

[0083] As another example, the first request sent by the data collection device can also be used to request the integrity verification public key, and the management device can send the integrity verification public key to the data collection device according to the first request after receiving the first indication. Alternatively, the data collection device sends a third request to the management device for separately requesting the integrity verification public key, and the management device sends the integrity verification public key to the data collection device according to the third request.

[0084] In one or more embodiments, the management device can send the integrity verification private key to the storage device. Correspondingly, the storage device can receive the integrity verification private key from the management device. The integrity verification public key and the integrity verification private key form a third key pair.

[0085] As an example, the management device can send the corresponding integrity verification private key to the storage device after sending the integrity verification public key. Alternatively, the management device can send the corresponding integrity verification private key to the storage device when sending the integrity verification public key. Alternatively, the management device can send the corresponding integrity verification private key to the storage device before sending the integrity verification public key.

[0086] As an example, when the management device sends the integrity verification public key according to the first indication, the management device can send the integrity verification private key to the storage device according to the first indication. Alternatively, when the management device sends the integrity verification public key according to the first request, the management device can send the integrity verification private key to the storage device according to the first request. Alternatively, when the management device sends the integrity verification public key according to the third request, the management device can send the integrity verification private key to the storage device according to the third request. Correspondingly, the storage device receives the integrity verification private key from the management device.

[0087] It can be understood that the first key pair, the second key pair and the third key pair can be generated by the management device according to business needs, or generated by other devices (such as a key generation device) and sent to the management device, which is not limited in the present application.

[0088] Based on steps S104 and S105, the management device sends the key for encryption and decryption to other devices, which can ensure the security of the key for encryption and decryption, improve the credibility of encrypting / decrypting the plaintext information, and thus improve the credibility of the plaintext information.

[0089] S106, the data collection device encrypts the plaintext information according to the encryption public key to obtain a first ciphertext.

[0090] For example, still taking the above example, the plaintext information of the data collection device can include the identity information of the user, a timestamp, product information of the chemical fertilizer (such as production place, storage position, production date, etc.), transportation information (such as driver information, transportation route, time, etc.).

[0091] After receiving the encryption public key, the data collection device can encrypt the plaintext information according to the encryption public key to obtain the first ciphertext. Different plaintext information can correspond to different encryption public keys. Alternatively, different data collection devices correspond to different encryption public keys.

[0092] Optionally, the management device can send the encrypted indication information to the data collection device. The data collection device can determine the plaintext information to be encrypted according to the encrypted indication information, and encrypt the specified plaintext information according to the encryption public key. For example, the encryption public key carries type information of the plaintext information corresponding to the encryption public key, and the data collection device can encrypt the plaintext information of the corresponding type according to the encryption public key to obtain the ciphertext. Alternatively, the data collection device can encrypt multiple plaintext information of itself according to the encryption public key to obtain the ciphertext.

[0093] In one or more embodiments, the data collection device can encrypt the first ciphertext according to the identity authentication public key to obtain the second ciphertext. The second ciphertext is used to indicate that the device sending the ciphertext is a device whose identity information is successfully verified, that is, the second ciphertext can be used to indicate that the data collection device is a trusted device whose identity information is successfully verified.

[0094] In one or more embodiments, the data collection device can encrypt the second ciphertext according to the integrity verification public key to obtain the third ciphertext. The third ciphertext can be used to verify the integrity of the plaintext information.

[0095] In one or more embodiments, the data collection device can encrypt the first ciphertext according to the identity authentication public key to obtain the second ciphertext. The second ciphertext is used to indicate that the device sending the ciphertext is a device whose identity information is successfully verified, that is, the second ciphertext can be used to indicate that the data collection device is a trusted device whose identity information is successfully verified.

[0096] Optionally, the data collection device can be connected to the storage device through a wired interface and / or a wireless interface. Correspondingly, the data collection device can send the first ciphertext to the storage device through the wired interface and / or the wireless interface. The storage device can receive the first ciphertext through the wired interface and / or the wireless interface.

[0097] In one or more embodiments, when the ciphertext obtained by the data collection device processing the plaintext information is the second ciphertext, the data collection device sends the second ciphertext to the storage device. When the ciphertext obtained by the data collection device processing the plaintext information is the third ciphertext, the data collection device sends the third ciphertext to the storage device. It can be understood that the specific manner in which the data collection device sends the second / third ciphertext to the storage device can refer to the specific manner in which the data collection device sends the first ciphertext to the storage device, and the present application will not be described again.

[0098] In S108, the storage device decrypts the first ciphertext according to the decryption private key to obtain the plaintext information.

[0099] After receiving the decryption private key, the storage device can decrypt the first ciphertext according to the decryption private key to obtain the plaintext information.

[0100] Optionally, the management device can send decryption instruction information to the storage device. The storage device can determine the first ciphertext to be decrypted according to the decryption instruction information, and decrypt the first ciphertext according to the decryption private key to obtain the corresponding plaintext information. For example, the decryption private key carries type information of the first ciphertext corresponding to the decryption private key, and the storage device can decrypt the first ciphertext of the corresponding type according to the decryption private key to obtain the plaintext information.

[0101] In one or more embodiments, when the ciphertext sent by the data collection device to the storage device is the second ciphertext, the storage device can decrypt the second ciphertext according to the identity authentication private key to obtain the first ciphertext, and decrypt the first ciphertext according to the decryption private key to obtain the plaintext information. Wherein, the storage device can decrypt the second ciphertext according to the identity authentication private key to obtain the first ciphertext, and determine that the device corresponding to the first ciphertext is a device whose identity is successfully verified, that is, the device is a trusted device.

[0102] In one or more embodiments, when the ciphertext sent by the data collection device to the storage device is the third ciphertext, the storage device can decrypt the third ciphertext according to the integrity verification private key to obtain the second ciphertext. Wherein, the storage device can decrypt the third ciphertext according to the integrity verification private key to obtain the second ciphertext, and determine that the second ciphertext has integrity. That is, the plaintext information corresponding to the ciphertext has integrity.

[0103] It can be understood that the specific manner of encrypting / decrypting data in the present application is prior art (such as hash algorithm), and the present application will not be described again.

[0104] In addition, after successfully obtaining the plaintext information, the storage device can publicly display the plaintext information. For example, the plaintext information can be publicly displayed to consumers in the form of a web link, and the consumers can obtain the plaintext information through the web link.

[0105] For example, a consumer can determine whether the production date on the product package is accurate and judge the quality problem of the product by the production date in the public information. For another example, a distributor can determine whether the product appears to be diverted by the transportation route in the public information.

[0106] S109, the storage device sends a second indication to the management device. Correspondingly, the management device receives the second indication from the storage device. The second indication is used to indicate that the storage device successfully obtains the plaintext information.

[0107] In one or more embodiments, after obtaining the plaintext information, the storage device can send a second indication to the management device to indicate that the plaintext information is successfully obtained. Correspondingly, the management device receives the second indication from the storage device.

[0108] In one or more embodiments, after obtaining the first ciphertext by decrypting the second ciphertext according to the identity authentication private key, the storage device can send a third indication to the management device to indicate that the data collection device is determined to be a trusted device. Correspondingly, the management device receives the third indication from the storage device.

[0109] S110, the management device updates the first key pair.

[0110] In one or more embodiments, after receiving the second indication, the management device can update the first key pair according to the second indication.

[0111] In one or more embodiments, after receiving the third indication, the management device can update the second key pair according to the third indication.

[0112] The data interaction between the management device, the data collection device, the verification device and the storage device in the present application can be stored on the blockchain, so as to realize the traceability and security of the interaction data between the plurality of devices, thereby improving the credibility of the information data.

[0113] Based on the above content and the same concept, the present application provides an information processing apparatus. As shown in the figure, the apparatus includes a communication module 301 and a processing module 302. Figure 3

[0114] The communication module 301 is used to receive a first indication from the verification device. The first indication is used to indicate that the identity information of the data collection device is successfully verified.

[0115] The communication module 301 is also used to send an encryption public key to the data collection device. The encryption public key is used to encrypt the plaintext information to obtain the first ciphertext. And,

[0116] ​The communication module 301 is further configured to send the decryption private key to the storage device, the decryption private key being used to decrypt the first ciphertext to obtain the plaintext information, and the encryption public key and the decryption private key forming a first key pair.

[0117] The communication module 301 is further configured to receive a second indication from the storage device, the second indication being used to indicate that the storage device successfully obtains the plaintext information.

[0118] The processing module 302 is configured to update the first key pair.

[0119] In a possible design, the communication module 301 is further configured to send an identity authentication public key to the data collection device, the identity authentication public key being used to encrypt the first ciphertext to obtain second ciphertext, and the second ciphertext being used to indicate that the device sending the first ciphertext is a device whose identity information is successfully verified.

[0120] The communication module 301 is further configured to send an identity authentication private key to the storage device, the identity authentication private key being used to decrypt the second ciphertext to obtain the first ciphertext, and the identity authentication public key and the identity authentication private key forming a second key pair.

[0121] In a possible design, the processing module 302 is further configured to update the second key pair.

[0122] In a possible design, the communication module 301 is further configured to send an integrity verification public key to the data collection device, the integrity verification public key being used to encrypt the second ciphertext to obtain third ciphertext.

[0123] The communication module 301 is further configured to send an integrity verification private key to the storage device, the integrity verification private key being used to decrypt the third ciphertext to obtain the second ciphertext, and the integrity verification public key and the integrity verification private key forming a third key pair.

[0124] Based on the same inventive concept, the embodiments of the present application provide an electronic device, which can implement the functions of the foregoing apparatus. Figure 4 FIG. 1 shows a structural schematic diagram of an electronic device according to an embodiment of the present application.

[0125] The electronic device in the embodiments of the present application can include a processor 401. The processor 401 is the control center of the device, and can connect various parts of the device through various interfaces and lines, by running or executing instructions stored in the memory 403 and calling data stored in the memory 403. Alternatively, the processor 401 can include one or more processing units, and the processor 401 can integrate an application processor and a modem processor, wherein the application processor mainly processes operating systems and applications, and the modem processor mainly processes wireless communication. It can be understood that the above-mentioned modem processor can also not be integrated into the processor 401. In some embodiments, the processor 401 and the memory 403 can be implemented on the same chip, and in some embodiments, they can also be implemented on separate chips respectively.

[0126] The processor 401 can be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and can implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of the present application. The general-purpose processor can be a microprocessor or any conventional processor. The method steps disclosed in conjunction with the embodiments of the present application can be directly executed by the hardware processor, or executed by a combination of hardware and software modules in the processor.

[0127] In the embodiments of the present application, the memory 403 stores instructions executable by at least one processor 401, and the at least one processor 401 can be used to execute the method steps disclosed in the embodiments of the present application by executing the instructions stored in the memory 403.

[0128] The memory 403, as a non-volatile computer readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 403 can include at least one type of storage medium, for example, can include flash memory, hard disk, multimedia card, card type memory, random access memory (RAM), static random access memory (SRAM), programmable read only memory (PROM), read only memory (ROM), electrically erasable programmable read only memory (EEPROM), magnetic storage, magnetic disk, optical disk, etc. The memory 403 is any other medium capable of carrying or storing desired program code in the form of instructions or data structures and capable of being accessed by a computer, but is not limited to this. The memory 403 in the embodiment of the present application can also be a circuit or other any device capable of realizing a storage function, used to store program instructions and / or data.

[0129] In the embodiment of the present application, the device can further include a communication interface 402, and the electronic device can transmit data through the communication interface 402.

[0130] Optionally, the processor 401 (or the processor 401 and the communication interface 402) can be configured to perform the actions of the processing module 302 and / or the communication module 301. Figure 4 The processing module 302 and / or the communication module 301 shown in the figure, that is, the actions of the processing module 302 and / or the communication module 301 can be performed by the processor 401 (or the processor 401 and the communication interface 402). Figure 3 The processing module 302 and / or the communication module 301 shown in the figure, that is, the actions of the processing module 302 and / or the communication module 301 can be performed by the processor 401 (or the processor 401 and the communication interface 402).

[0131] Based on the same inventive concept, the embodiment of the present application further provides a computer readable storage medium, wherein instructions can be stored, when the instructions run on a computer, make the computer execute the operation steps provided by the above-mentioned method embodiment. The computer readable storage medium can be the memory 403 shown in the figure. Figure 4 The memory 403 shown in the figure.

[0132] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this application can take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0133] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to this application. It should be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0134] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0135] These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer-implemented process, thereby in the computer or other programmable apparatus.

Claims

1. An information processing method characterized by comprising: The method comprises: The management device receives a first indication from the verification device, the first indication indicating that the identity information of the data collection device is successfully verified; The management device sends an encryption public key to the data collection device, the encryption public key being used to encrypt plaintext information to obtain first ciphertext; and The management device sends a decryption private key to the storage device, the decryption private key being used to decrypt the first ciphertext to obtain the plaintext information, the encryption public key and the decryption private key forming a first key pair; The management device receives a second indication from the storage device, the second indication indicating that the storage device successfully obtains the plaintext information; The management device updates the first key pair; The method further comprises: The management device sends an identity authentication public key to the data collection device, the identity authentication public key being used to encrypt the first ciphertext to obtain second ciphertext, the second ciphertext indicating that the device sending the first ciphertext is a device whose identity information is successfully verified; The management device sends an identity authentication private key to the storage device, the identity authentication private key being used to decrypt the second ciphertext to obtain the first ciphertext, the identity authentication public key and the identity authentication private key forming a second key pair.

2. The method of claim 1, wherein, After the management device receives the second indication from the storage device, the method further comprises: The management device updates the second key pair.

3. The method of claim 1, wherein, The method further comprises: The management device sends an integrity verification public key to the data collection device, the integrity verification public key being used to encrypt the second ciphertext to obtain third ciphertext; The management device sends an integrity verification private key to the storage device, the integrity verification private key being used to decrypt the third ciphertext to obtain the second ciphertext, the integrity verification public key and the integrity verification private key forming a third key pair.

4. An information processing apparatus, characterized by comprising: The apparatus comprises: A communication module, configured to receive a first indication from a verification device, the first indication indicating that the identity information of a data collection device is successfully verified; The communication module is further configured to send an encryption public key to the data collection device, the encryption public key being used to encrypt plaintext information to obtain first ciphertext; and The communication module is further configured to send a decryption private key to a storage device, the decryption private key being used to decrypt the first ciphertext to obtain the plaintext information, the encryption public key and the decryption private key forming a first key pair; The communication module is further configured to receive a second indication from the storage device, the second indication indicating that the storage device successfully obtains the plaintext information; A processing module, configured to update the first key pair; The communication module is further configured to send an identity authentication public key to the data collection device, the identity authentication public key being used to encrypt the first ciphertext to obtain second ciphertext, the second ciphertext indicating that the device sending the first ciphertext is a device whose identity information is successfully verified; The communication module is further configured to send an identity authentication private key to the storage device, the identity authentication private key being used to decrypt the second ciphertext to obtain the first ciphertext, the identity authentication public key and the identity authentication private key forming a second key pair.

5. The apparatus of claim 4, wherein, The processing module is further configured to update the second key pair.

6. The apparatus of claim 4, wherein, The apparatus further comprises: The communication module is further configured to send an integrity verification public key to the data collection device, the integrity verification public key being used to encrypt the second ciphertext to obtain a third ciphertext; The communication module is further configured to send an integrity verification private key to the storage device, the integrity verification private key being used to decrypt the third ciphertext to obtain the second ciphertext, the integrity verification public key and the integrity verification private key forming a third key pair.

7. An electronic device, comprising: The electronic device comprises a processor configured to implement the steps of the method of any one of claims 1-3 when executing a computer program stored in a memory.

8. A computer-readable storage medium, characterized in that, The computer program is stored in a memory and is configured to implement the steps of the method of any one of claims 1-3 when executed by a processor.

Images