Data processing method and device based on block chain, equipment and medium

Abstract

The embodiment of the invention provides a block chain-based data processing method and device, equipment and a medium, which are used for reducing the maintenance cost of a service client. The method is executed by a proxy platform, the proxy platform is used for accessing a plurality of resource clients, and the method comprises the following steps: obtaining transaction data to be signed sent by a service client and an object identifier of a submission object corresponding to the transaction data, and logging in a resource client a according to the object identifier; the resource client a is any resource client determined by the submission object in the plurality of resource clients; sending the to-be-signed transaction data to a resource client a in a logged-in state, so that the resource client a signs the to-be-signed transaction data according to the key information of the submitted object to generate signed transaction data; and receiving the signature transaction data returned by the resource client a, and sending the signature transaction data to the service client a, so that the service client a performs uplink processing on the signature transaction data when the signature transaction data passes verification.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and in particular to a blockchain-based data processing method, device, equipment and medium. Background Art

[0002] Decentralized Application (DAPP) is an application built on a decentralized network, combining smart contracts and front-end interfaces; when the smart contract of DAPP is successfully deployed on the blockchain, the DAPP can provide services to objects that want to interact with the smart contract; that is, each DAPP can act as a business client to provide corresponding services to the object. When the object interacts with the smart contract deployed on the blockchain in the DAPP, all operations performed by it can be stored in the blockchain in the form of transaction data to improve the security and reliability of the data. Before the transaction data is uploaded to the chain, it is usually necessary to sign the transaction data based on the key information of the object to ensure the verifiability of the transaction data.

[0003] In the current transaction signature scenario, in order to improve the storage security of key information, the key information of the object is usually stored by the resource client. Therefore, DAPP usually forwards the transaction data to the resource client for signing, and then submits the signed transaction data to the blockchain for storage. Since different objects may use different types of resource clients, for example, object A is only registered in resource client A, but not in resource client B. If DAPP only connects to resource client B, the transaction data generated by object A in DAPP cannot be signed and thus cannot be submitted to the blockchain for storage. This means that DAPP needs to connect to as many types of resource clients as possible to meet the business needs of different objects.

[0004] In current DAPPs, every time a resource client is connected, a lot of adaptation work is required, which takes a lot of time. In addition, the access and adaptation work of different types of resource clients may be different. This means that every time a new resource client is connected, a new client version must be re-released, and the user must be reminded to update the client version so that the latest connected resource client can be used in the updated DAPP to complete the signing of transaction data, resulting in excessively high maintenance costs for DAPPs. Summary of the invention

[0005] The embodiments of the present application provide a blockchain-based data processing method, apparatus, device, and medium, which can reduce the maintenance cost of a business client.

[0006] On the one hand, an embodiment of the present application provides a data processing method based on blockchain, which is executed by an agent platform, and the agent platform is used to access multiple resource clients. The method includes:

[0007] Obtain the transaction data to be signed sent by the business client, and obtain the object identifier of the submitting object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier; the resource client a is any resource client determined by the submitting object among multiple resource clients;

[0008] Send the transaction data to be signed to the resource client a in the logged-in state, so that the resource client a signs the transaction data to be signed according to the key information corresponding to the submitted object to generate signed transaction data;

[0009] Receive the signed transaction data returned by resource client a, and send the signed transaction data to business client a, so that business client a can process the signed transaction data on the chain when the signed transaction data passes the verification.

[0010] On the one hand, an embodiment of the present application provides a data processing device based on blockchain, which is applied in an agent platform, and the agent platform is used to access multiple resource clients. The device includes:

[0011] The data acquisition module is used to acquire the transaction data to be signed sent by the business client, and acquire the object identifier of the submitting object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier; the resource client a is any resource client determined by the submitting object among multiple resource clients;

[0012] A data sending module is used to send the transaction data to be signed to the resource client a in the logged-in state, so that the resource client a signs the transaction data to be signed according to the key information corresponding to the submitted object to generate signed transaction data;

[0013] The data receiving module is used to receive the signed transaction data returned by the resource client a, and send the signed transaction data to the business client a, so that the business client a can process the signed transaction data on the chain when the signed transaction data passes the verification.

[0014] The data acquisition module acquires the transaction data to be signed sent by the business client, including:

[0015] Receive the transaction signature request sent by the business client, and obtain the ciphertext transaction data corresponding to the submitted object and the client identifier corresponding to the business client in the transaction signature request;

[0016] The client identification library in the proxy platform is obtained. If the client identification exists in the client identification library, it is determined that the client identification verification is successful, and the ciphertext transaction data is decrypted to obtain the transaction data to be signed.

[0017] The data processing device based on blockchain further includes a business client registration module, which is specifically used for:

[0018] Receive a registration request sent by a business client, obtain the client authentication information carried in the registration request, verify the client authentication information, and obtain a client authentication result corresponding to the client authentication information;

[0019] If the client authentication result indicates that the authentication is successful, a client identifier and key pair information are allocated to the business client, and the business private key in the client identifier and key pair information is stored; the business private key is used to decrypt the ciphertext transaction data;

[0020] The client identifier and the business public key in the key pair information are sent to the business client; the business public key is used to encrypt the plaintext transaction data in the business client, and the client identifier is used to represent the identity information of the business client in the proxy platform.

[0021] Among them, the business client registration module verifies the client authentication information and obtains the client authentication result corresponding to the client authentication information, including:

[0022] Obtaining the first registration identifier and registered domain name information corresponding to the service client from the client authentication information;

[0023] If the first registration identifier does not exist in the client identifier library, and the configuration file in the registered domain name information is associated with the service client, it is determined that the client authentication information passes the verification.

[0024] If the client authentication result indicates that the authentication is successful, the service client registration module allocates client identification and key pair information to the service client, including:

[0025] If the client authentication result indicates that the authentication is successful, determining the client identifier corresponding to the service client according to the first registration identifier in the client authentication information;

[0026] Obtain a first random number and a second random number, and obtain a Euler function value between the first random number and the second random number; the first random number and the second random number are prime to each other;

[0027] Obtain a third random number, and generate a business public key in the key pair information corresponding to the business client according to the third random number and the product of the first random number and the second random number; the third random number and the Euler function value are mutually prime, and the third random number is less than the Euler function value;

[0028] A business private key in the key pair information corresponding to the business client is generated according to the third random number, the Euler function value, and the product of the first random number and the second random number.

[0029] The data processing device based on blockchain further includes a resource client access module, which is specifically used for:

[0030] Obtain the application interface corresponding to resource client a, and obtain the interface call instance associated with the application interface;

[0031] The interface calling method of the application interface is determined according to the interface calling instance, and the resource client a is connected to the proxy platform through the interface calling method.

[0032] The data acquisition module acquires the object identifier of the submission object corresponding to the transaction data to be signed, including:

[0033] Displaying a selection page; the selection page includes multiple resource clients connected to the proxy platform;

[0034] In response to the trigger operation for resource client a, the login page corresponding to resource client a is displayed;

[0035] In response to an input operation on the login page, the input information in the login page is determined as an object identifier of a submission object corresponding to the transaction data to be signed.

[0036] The login page includes a login identification code corresponding to the resource client a, and the input operation includes a scanning operation; the data acquisition module responds to the input operation on the login page, and determines the input information in the login page as the object identification of the submission object corresponding to the transaction data to be signed, including:

[0037] In response to a scan operation of a login identification code in a login page, a scan timestamp and a generation timestamp corresponding to the login identification code are obtained;

[0038] If the difference between the generation timestamp and the scanning timestamp is less than the displayed validity period, the input information determined by the scanning operation for the login identification code is determined as the object identification of the submission object corresponding to the transaction data to be signed;

[0039] If the difference between the generation timestamp and the scan timestamp is greater than or equal to the displayed validity period, the login identification code is updated to obtain an updated login identification code;

[0040] In response to a scanning operation on the updated login identification code, the input information determined by the scanning operation corresponding to the updated login identification code is determined as the object identification of the submission object corresponding to the transaction data to be signed.

[0041] The data acquisition module acquires the object identifier of the submission object corresponding to the transaction data to be signed, including:

[0042] Displaying a selection page; the selection page includes multiple resource clients connected to the proxy platform;

[0043] In response to a trigger operation on resource client a, an authorization prompt page associated with the business client is displayed;

[0044] In response to the authorization operation corresponding to the authorization prompt page, the login information corresponding to the submission object corresponding to the transaction data to be signed in the business client is obtained, and the login information is determined as the object identifier corresponding to the submission object.

[0045] The data processing device based on blockchain further includes a re-login module, which is specifically used for:

[0046] If it is detected that the object identifier cannot successfully log in to the resource client a, then the registration application page corresponding to the resource client a is displayed; the registration application page includes an input area and a registration confirmation control;

[0047] In response to an input operation on the input area, obtaining input information in the input area;

[0048] In response to the triggering operation on the registration confirmation control, a second registration identifier corresponding to the submitted object is generated according to the input information in the input area, and the resource client a is logged in again according to the second registration identifier.

[0049] On one hand, an embodiment of the present application provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method in one aspect of the embodiment of the present application.

[0050] On one hand, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. The computer program includes program instructions. When the program instructions are executed by a processor, the steps of the method in one aspect of the embodiment of the present application are executed.

[0051] According to one aspect of the present application, a computer program product or a computer program is provided, the computer program product or the computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the method provided in various optional modes of the above-mentioned first aspect.

[0052] In an embodiment of the present application, a business client can access a proxy platform, and the proxy platform can access multiple resource clients; when transaction data to be signed is generated in the business client, the transaction data to be signed can be sent to the proxy platform, and the proxy platform forwards the transaction data to be signed to the resource client selected by the submitting object, for example, resource client a; and then the signature of the transaction data to be signed is completed by resource client a to obtain the signed transaction data, and the signed transaction data is returned to the business client through the proxy platform, and then the business client completes the signature verification and chain processing of the signed transaction data. It can be seen that in an embodiment of the present application, the business client does not need to directly access multiple resource clients, but only needs to access the proxy platform, and then the proxy platform completes the access of multiple resource clients. When a new resource client appears, the proxy platform can complete the access and adaptation of the new resource client. The business client does not need to develop adaptation and publish updates in order to access the new resource client, which can achieve no perception of the developers and users of the business client, thereby reducing the maintenance cost of the business client. BRIEF DESCRIPTION OF THE DRAWINGS

[0053] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0054] Figure 1 It is a system architecture diagram provided by an embodiment of the present application;

[0055] Figure 2 This is a schematic diagram of an interface for digital asset transactions provided in an embodiment of the present application;

[0056] Figure 3 This is a timing diagram of a data processing method based on blockchain provided in an embodiment of the present application. Figure 1 ;

[0057] Figure 4 This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 1 ;

[0058] Figure 5 This is a schematic diagram of a signed transaction data chain provided by an embodiment of the present application;

[0059] Figure 6 This is a timing diagram of a data processing method based on blockchain provided in an embodiment of the present application. Figure 2 ;

[0060] Figure 7It is a timing diagram of a service client registration method provided in an embodiment of the present application;

[0061] Figure 8a This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 2 ;

[0062] Figure 8b This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 3 ;

[0063] Figure 8c This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 4 ;

[0064] Fig. 9 It is a structural schematic diagram of a blockchain-based data processing device provided in an embodiment of the present application;

[0065] Fig.10 It is a structural diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0066] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0067] Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission (P2P transmission), consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0068] The underlying blockchain platform can include processing modules such as user management, basic services, smart contracts, and operation management. Among them, the user management module is responsible for the identity information management of all blockchain participants, including maintaining the generation of public and private keys (account management), key management, and the maintenance of the correspondence between the user's real identity and the blockchain address (authority management), etc., and, under authorization, supervises and audits the transactions of certain real identities and provides risk control rule configuration (risk control audit); the basic service module is deployed on all blockchain node devices to verify the validity of business requests, and records valid requests to storage after consensus is reached. For a new business request, the basic service first adapts the interface for parsing and authentication (interface adaptation), and then encrypts the business information through the consensus algorithm (consensus management). The smart contract module is responsible for the registration and issuance of contracts, as well as contract triggering and contract execution. Developers can define the contract logic in a programming language and publish it to the blockchain (contract registration). According to the logic of the contract terms, the key or other events are called to trigger the execution and complete the contract logic. It also provides the function of contract upgrade and cancellation. The operation management module is mainly responsible for the deployment, configuration modification, contract setting, cloud adaptation and real-time status visualization output of the product during the product release process, such as alarm, network status detection, node equipment health status detection, etc.

[0069] Smart contracts can be understood as computer programs that run on distributed ledgers (i.e., blockchains) with preset rules, states, and conditional responses, and can encapsulate, verify, and execute complex behaviors of distributed nodes to complete information exchange, value transfer, and asset management. Based on the distributed architecture and consensus algorithm of blockchains, smart contracts allow mutually distrustful users to complete transactions without the need for any third-party trusted intermediary or authority. At the same time, digital smart contracts can be flexibly embedded in various tangible or intangible assets, transactions, and data, realizing active or passive asset and information management and control, and gradually building programmable smart assets and systems.

[0070] See also Figure 1 , Figure 1 This is a system architecture diagram provided by an embodiment of the present application. Figure 1 As shown, the system architecture may include a business client 10a, a resource client 10b and a resource client 10d, and an agent platform 10c. The business client 10a may refer to an application for providing a specific business service function, and the business client 10a may include but is not limited to a payment application, a communication application, a live broadcast application, a shopping application, a food delivery application, or a taxi application, etc. The embodiment of the present application does not specifically limit the type of the business client 10a.

[0071] In the embodiment of the present application, the business client 10a can be a decentralized application (DAPP). Among them, DAPP refers to an application built on blockchain technology. It does not rely on traditional centralized servers or institutions to run, but implements functions such as data storage, computing and transactions through a decentralized node network. DAPP consists of a front-end application interface and a smart contract. The object usually does not interact directly with the blockchain, but completes the signature transaction data confirmation through the front-end application interface of DAPP, and the background forwards and calls the smart contract to process the signature transaction data on the chain.

[0072] The proxy platform 10c is an application associated with the service client 10a. The proxy platform 10c may be an independent application or an embedded sub-application integrated in the service client 10a. Figure 1 As shown, the proxy platform 10c can access multiple resource clients, for example, Figure 1 A plurality of resource clients including the resource client 10b and the resource client 10d shown in the figure. A resource client may refer to a client for implementing a resource management business function. Specifically, a resource client may be a tool for managing and storing object digital resources. For example, digital resources may be transferred to other accounts based on a resource client. For another example, digital resources transferred from other accounts may be received based on a resource client. In order to improve security, the key information of the submitted object corresponding to the business client 10a is usually stored by the resource client. Therefore, the transaction data to be signed generated by the business client 10a is usually forwarded to the resource client for signing.

[0073] like Figure 1 As shown, since the business client 10a does not directly access the resource client 10b and the resource client 10d, but accesses the proxy platform 10c, and then the proxy platform 10c accesses the resource client 10b and the resource client 10d, the business client 10a does not interact directly with the resource client (for example, the resource client 10b), but transmits and forwards data through the business platform 10c. Specifically, when the transaction data to be signed is generated in the business client 10a, the transaction data to be signed can be sent to the proxy platform 10c, and the proxy platform 10c forwards the transaction data to be signed to the resource client selected by the submitting object, for example, the resource client 10b; and then the signature of the transaction data to be signed is completed through the resource client 10b to obtain the signed transaction data, and the signed transaction data is returned to the business client 10a through the proxy platform 10c, and then the business client 10a completes the signature verification and chain processing of the signed transaction data.

[0074] In the embodiment of the present application, the service client 10a, the resource client 10b and the proxy platform 10c can all be integrated in the terminal device, and the terminal device may include but is not limited to: smart phones, tablet computers, laptop computers, PDAs, mobile internet devices (mobile internet devices, MIDs), wearable devices (such as smart watches, smart bracelets, etc.), intelligent voice interaction devices, smart home appliances (such as smart TVs, etc.), vehicle-mounted devices, aircraft and other electronic devices. The present application does not limit the type of terminal device. The server corresponding to the terminal device can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services. The terminal device and the server can be directly or indirectly connected via wired or wireless communication, and the present application does not limit this. Among them, the service client 10a, the resource client 10b and the proxy platform 10c can be independent clients, or embedded sub-clients integrated in a client, and the present application does not limit this.

[0075] See also Figure 2 , Figure 2 This is a schematic diagram of a digital asset transaction interface provided by an embodiment of the present application. Figure 2 As shown, the terminal device 200 is a terminal device owned by the object A. A business client Y1 can be installed in the terminal device 200. The business client Y1 can access the proxy platform, and the proxy platform can access multiple resource clients. Among them, the business client Y1 can be any application that can provide business service functions. The embodiment of the present application takes a shopping application as an example. The terminal page 20a of the terminal device 200 is the application homepage of the business client Y1. The terminal page 20a may include multiple digital assets, such as digital asset A, digital asset B, digital asset C, and digital asset D, etc. Figure 2As shown, the terminal page 20a may include information such as pictures, titles, and transfer amounts of digital assets. Object A may select any digital asset included in the terminal page 20a for trading. For example, the terminal device 200 may respond to the trading operation of object A on the digital asset A in the terminal page 20a through the business client Y1, and generate the signature data to be traded corresponding to the digital asset A by object A. The signature data to be traded may include the transaction resources of object A for the digital asset A (for example, the digital asset A and the transaction transfer amount corresponding to the digital asset A). Optionally, the business client Y1 may encrypt the signature data to be traded using the business public key assigned by the proxy platform to obtain the ciphertext transaction data, and encode the ciphertext transaction data and the client identifier (projectid) assigned by the proxy platform and add them to the Uniform Resource Locator (URL), which may be a website address that jumps to the proxy platform, and then jumps to the proxy platform through the URL. The proxy platform can obtain the client identifier (projectid) corresponding to the business client Y1 from the URL and verify the client identifier (projectid) to determine whether the business client Y1 has completed registration in the proxy platform. When the client identifier (projectid) is verified, the business private key corresponding to the business client Y1 can be queried according to the client identifier (projectid), and the ciphertext transaction data can be decrypted according to the business private key to obtain the transaction data to be signed.

[0076] In an embodiment of the present application, when the client identification (projectid) is verified, the terminal device 200 can display the terminal page 20b. It can be understood that the terminal page 20b can be a sub-page displayed independently on the terminal page 20a, or a page jumped from the terminal page 20a. Among them, the terminal page 20b is the application homepage of the proxy platform, and the terminal page 20b displays a signature prompt box 20g. The business prompt box 20g may include signature prompt information "Business client Y1 applies for access to the resource client" to prompt object A which business client is applying for the signature. In an embodiment of the present application, the access of the resource client is all completed in the proxy platform, without the need for the business client to directly access multiple resource clients. The terminal page 20b may include a "Select resource client" control 21a in the terminal page 20b. As shown Figure 2As shown, the terminal device 200 can display the terminal page 20c through the proxy platform response object A for the trigger operation of the "Select Resource Client" control 21a in the terminal page 20b. The terminal page 20c is a selection page corresponding to the resource client. The terminal page 20c may include multiple resource clients accessed by the proxy platform, for example, resource client a, resource client b, resource client c, and resource client d.

[0077] In the embodiment of the present application, the resource client can be a tool for managing and storing the digital resources of the object. The object A can select any resource client (for example, resource client a) in the terminal page 20c to sign the transaction signature data to be signed to verify the authenticity and integrity of the transaction data to be signed. The terminal page 20c can also include a "go to create" control 21b. When the object A has not registered the resource client, the "go to create" control 21b can be triggered to apply for the registration identification of a certain resource client. In addition, the terminal page 20c can also include an "expand more" control 21c. When the resource client currently displayed on the terminal page 20c does not include the resource client used by the object A, the "expand more" control 21c can be triggered. The terminal device 200 can respond to the triggering operation of the "expand more" control 21c through the proxy platform, and display more resource clients in the terminal page 20c for the object A to select.

[0078] Furthermore, after object A selects resource client a to sign the transaction data to be signed, the proxy platform can obtain the object identifier corresponding to object A, and then use the object identifier to log in to resource client a. The login method can be authorized login or code scanning login, which is not limited in this embodiment of the application. After object A logs in to resource client a, the proxy platform can send the transaction data to be signed by object A to resource client a in the logged-in state. Figure 2As shown, the terminal device 200 can respond to the trigger operation of the object A on the resource client a through the resource client a, and display the terminal page 20d. The terminal page 20d is the signature content confirmation page associated with the object A. The object A can check whether the content to be signed is correct through the terminal page 20d. After confirming that it is correct, the trigger operation of the "confirm" control 21d can be executed. The terminal device 200 can respond to the trigger operation of the object A on the "confirm" control 21d through the resource client a, and display the terminal page 20e. The terminal page 20e can be a partial area in the terminal page 20d, or a subpage independent of the terminal page 20d, or a page jumped from the terminal page 20d. Specifically, the terminal page 20e is the digital signature page of the object A. The object A can enter the key information in the key input area 21e in the terminal page 20e. After the input is completed, the trigger operation of the "confirm" control 21f can be executed, and then the resource client a signs the transaction data to be signed according to the key information entered by the object A in the key input area 21e, and generates the signed transaction data.

[0079] Furthermore, resource client a can return the signed transaction data to the proxy platform, and the proxy platform will create a new URL access based on the signed transaction data, and transmit the signed transaction data back to business client Y1 through the new URL; business client Y1 verifies the signed transaction data, and after verification, the signed transaction data is uploaded to the blockchain. After the upload is completed, the terminal page 20f can be displayed in the terminal device 200. The terminal page 20f is a successful upload reminder page, and the terminal page 20f can be used to remind object A that the transaction of digital asset A has been completed, and the signed transaction data corresponding to the transaction has been stored in the blockchain.

[0080] In an embodiment of the present application, the business client does not need to directly access multiple resource clients, but only needs to access the proxy platform, and then the proxy platform completes the access of multiple resource clients. When a new resource client appears, the proxy platform can complete the access and adaptation of the new resource client. The business client does not need to develop adaptation and release updates in order to access the new resource client, which can achieve unawareness to the developers and users of the business client, thereby reducing the maintenance cost of the business client.

[0081] See also Figure 3 , Figure 3 This is a timing diagram of a data processing method based on blockchain provided in an embodiment of the present application. Figure 1 It is understandable that the blockchain-based data processing method can be used by a business client (e.g. Figure 1 The service client 10a in the corresponding embodiment), the proxy platform (for example, Figure 1The corresponding embodiment of the proxy platform 10c) and the resource client a (for example, Figure 1 The resource client 10b) in the corresponding embodiment is interactively executed. Figure 3 As shown, the blockchain-based data processing method may include the following steps S101-S106:

[0082] Step S101: Send transaction data to be signed.

[0083] The business client sends the transaction data to be signed to the proxy platform, and accordingly, the proxy platform receives the transaction data to be signed sent by the business client. The transaction data to be signed may refer to transaction information that has not yet been signed. The transaction data to be signed may be generated by the business client, and the transaction data to be signed may include but is not limited to: submission object, transaction type, transaction resources (for example, transaction transfer amount, transaction items, etc.), transaction timestamp and other information.

[0084] Among them, the business client may refer to an application for providing specific business service functions, and the business client may include but is not limited to payment applications, communication applications, live broadcast applications, shopping applications, food delivery applications, or taxi applications, etc. The embodiment of the present application does not specifically limit the type of business client. In the embodiment of the present application, the business client may be a decentralized application, that is, the business client may be an application built on blockchain technology, which does not rely on traditional centralized servers or institutions to run, and can realize data storage, computing, and transaction functions through a decentralized node network, and has the characteristics of openness, transparency, security, and reliability.

[0085] The proxy platform is an application associated with a business client. The proxy platform can be associated with one business client or multiple business clients. The proxy platform can be an independent application or an embedded sub-application integrated in the business client. In an embodiment of the present application, the business client needs to be registered in the proxy platform in advance. After successful registration, the business client can access the proxy platform, and the proxy platform calls multiple resource clients without the need for the business client to directly access multiple resource clients. The registration process of the business client in the proxy platform will be described in detail below and will not be repeated here. Among them, the resource client can be a tool for managing and storing object digital resources. Object A can sign the transaction signature data to be signed through the resource client to verify the authenticity and integrity of the transaction data to be signed.

[0086] In the embodiment of the present application, the access of the resource client is all completed in the proxy platform. The embodiment of the present application takes the access to the resource client a as an example to describe in detail the process of the proxy platform accessing the resource client. Specifically, the proxy platform can obtain the application interface corresponding to the resource client a, and obtain the interface call instance associated with the application interface; then, the interface call method of the application interface can be determined according to the interface call instance, and the resource client a can be connected to the proxy platform through the interface call method.

[0087] In an embodiment of the present application, different resource clients may have different application interfaces. For example, the application interface corresponding to resource client a may be an API interface of window.Ethereum (an object that interacts with the blockchain network), and the application interface corresponding to resource client b may be an SDK (software development kit) interface for scanning and logging in with a unique identification code (such as a QR code, barcode, etc.); therefore, in order to correctly access resource client a, the proxy platform needs to obtain the application interface provided by resource client a so as to interact with resource client a in the proxy platform.

[0088] An interface call instance is a set of code snippets or documents that describe how to use an application interface. The interface call instance may include information such as the URL, request parameters, response format, and sample code for calling the application interface. By obtaining the interface call instance corresponding to resource client a, it is easy to correctly use the application interface corresponding to resource client a, reduce coding errors and debugging time, and thus improve the stability and reliability of the system. The proxy platform can determine the interface call method of the application interface based on the interface call instance. Specifically, the proxy platform can obtain the interface call method of the application interface by parsing the interface call instance and generating the corresponding interface call code; the proxy platform can use the interface call method to directly call the application interface of resource client a, realize the access of resource client a to the proxy platform, and then realize the data interaction between the proxy platform and resource client a. Optionally, after the proxy platform accesses resource client a, it can also encapsulate resource client a into a general component, and the object can perform a trigger operation on the general component. The proxy platform responds to the trigger operation and starts connecting to resource client a.

[0089] It is understandable that when a new resource client (for example, resource client f) appears, the proxy platform can complete the access and adaptation work of resource client f, and the access and adaptation work of resource client f can refer to the implementation process of resource client a. It can be seen that the proxy platform completes the access and adaptation work of resource client f. When resource client f is accessed, the business client does not need to develop adaptation and release updates in order to access resource client f, which can achieve no perception of the developers and users of the business client, reduce the maintenance cost of the business client, and further improve the experience of using objects in the business client.

[0090] Step S102: Obtain the object identifier of the submitting object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier.

[0091] The object identifier can be understood as the submission object corresponding to the transaction data to be signed (for example, Figure 2 The object A) is shown as a login account in the resource client a. The resource client a can be any resource client determined by the submitting object among multiple resource clients accessed by the proxy platform.

[0092] In an embodiment of the present application, the specific implementation process of obtaining the object identifier of the submission object corresponding to the transaction data to be signed may include: displaying a selection page; responding to a trigger operation on the resource client a, displaying an authorization prompt page associated with the business client; responding to an authorization operation corresponding to the authorization prompt page, obtaining the login information corresponding to the submission object corresponding to the transaction data to be signed on the business client, and determining the login information as the object identifier corresponding to the submission object.

[0093] Please also see Figure 4 , Figure 4 This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 1 .like Figure 4 As shown, the terminal device 200 is a terminal device held by the object A, and the agent platform may be integrated in the terminal device 200. The terminal page 30a of the terminal device 200 is a selection page corresponding to the resource client, and the terminal page 30a may include multiple resource clients accessed by the agent platform, for example, resource client a, resource client b, resource client c, and resource client d. Object A can select any resource client (for example, resource client a) in the terminal page 30a to sign the transaction signature data to be signed, so as to verify the authenticity and integrity of the transaction data to be signed.

[0094] like Figure 4As shown, the terminal device 200 can respond to the trigger operation of the object A on the resource client a through the proxy platform, and display the terminal page 30b, which is the authorization prompt page associated with the business client. The terminal page 30b can display an authorization prompt box, and the authorization prompt box can include authorization prompt information "agree to authorize the login account 12345X of the business client Y1 to the resource client a", so as to prompt the object A to use the login account (login information) of the business client Y1 as the login account corresponding to the resource client a to log in to the resource client a. The terminal page 30b can also include an authorization login control 31a. When the object A agrees to use the login account (login information) of the business client Y1 as the login account corresponding to the resource client a, the authorization login control 31a can be triggered. The terminal device 200 can respond to the trigger operation on the authorization login control 31a through the proxy platform, obtain the login account 12345X corresponding to the object A on the business client Y1, and determine the login account 12345X as the object identifier corresponding to the object A, and log in to the resource client a through the login account 12345X. The terminal device 200 can respond to the trigger operation of the authorization login control 31a through the proxy platform, and display the terminal page 30c; wherein the terminal page 30c is the login success prompt page corresponding to the resource client a, and the terminal page 30c can remind the object A that the resource client a is in the logged-in state at this time. Optionally, the terminal device 200 can also respond to the trigger operation of the cancel authorization control 31b in the terminal page 30b by the object A through the proxy platform, and cancel the authorization of the login account 12345X corresponding to the business client Y1 to the resource client a for login. At this time, other methods need to be used to log in to the resource client a.

[0095] In the embodiment of the present application, the submission object corresponding to the transaction data to be signed logs in to the resource client a with the login information corresponding to the business client. The submission object does not need to remember multiple complex passwords, which can reduce the difficulty of password management.

[0096] Step S103: Send the transaction data to be signed.

[0097] The proxy platform sends the transaction data to be signed to the resource client a in the logged-in state, and correspondingly, the resource client a receives the transaction data to be signed.

[0098] Step S104: Sign the transaction data to be signed according to the key information corresponding to the submitting object to generate signed transaction data.

[0099] In order to ensure the authenticity and integrity of the transaction data to be signed, the resource client a can sign the transaction data to be signed according to the key information corresponding to the submitted object to generate the signed transaction data. Specifically, the resource client a can assign a key pair as key information to the submitted object, which can include the object private key and the object public key. The object private key is managed by the submitted object itself or entrusted to a specific service for management. The object public key can be notified to all blockchain nodes in the blockchain network, such as business clients, etc. Figure 2 As shown, after object A confirms that the content to be signed is correct through the terminal page 20d, he can enter the key information in the key input area 21e in the terminal page 20e. Resource client a can use a hash algorithm to perform a hash operation on the transaction data to be signed, generate the first summary information corresponding to the transaction data to be signed, and obtain the key information entered in the key input area 21e as the object private key, encrypt the first summary information, and the encrypted first summary information can be used as the signature transaction data corresponding to the transaction data to be signed.

[0100] Step S105: Return the signed transaction data.

[0101] Resource client a returns the signed transaction data to the proxy platform. Accordingly, the proxy platform receives the signed transaction data and sends the signed transaction data to the business client. Accordingly, the business client receives the signed transaction data.

[0102] Step S106: When the signed transaction data passes the verification, the signed transaction data is put on-chain.

[0103] After receiving the signed transaction data, the business client can verify the signed transaction data. The purpose of the verification is to detect whether the signed transaction data has been tampered with during the transmission process. If the verification fails, it means that the signed transaction data may have been tampered with during the transmission process, and it needs to be resent by the resource client a; if the verification passes, it means that the signed transaction data has not been tampered with during the transmission process, and the signed transaction data can be processed on the chain.

[0104] The signature verification process of the signed transaction data may specifically include: the business client may obtain the object public key corresponding to the submitted object, decrypt the signed transaction data based on the object public key, and obtain the first summary information corresponding to the signed transaction data; and then perform a hash operation on the signed transaction data according to the hash algorithm (the hash algorithm used when the submitted object generates the signed transaction data) to obtain the second summary information corresponding to the received signed transaction data. If the first summary information is the same as the second summary information, it means that the signed transaction data has not been tampered with during the transmission process, and the signature verification passes. At this time, the signed transaction data can be stored in the transaction pool, and the transactions in the transaction pool can be used to package into a new block. If the first summary information is different from the second summary information, it means that the signed transaction data may have been tampered with during the transmission process, and the signature verification fails.

[0105] Please also see Figure 5 , Figure 5 This is a schematic diagram of a signed transaction data chain provided by an embodiment of the present application. Figure 5 As shown, the business client 10a can obtain the smart contract 11c and deploy the smart contract 11c in the blockchain by initiating a transaction. The smart contract 11c can be a computer program code, and the developer can use the smart contract high-level language to write it. The compiler can compile the contract written in the high-level language into the bytecode in the virtual machine of the blockchain node, and the virtual machine can be used to interpret and execute the bytecode in the smart contract. Smart contract high-level languages ​​include but are not limited to Solidity (a smart contract programming language), Serpent (a smart contract programming language), and LLL (a smart contract programming language). For example, developers can use Solidity to write data contracts and business contracts, and use the compiler to compile the data contracts and business contracts written in Solidity into virtual machine bytecodes respectively, and then submit the compiled virtual machine bytecodes to the blockchain network along with the signed transaction data and upload them to the chain.

[0106] Specifically, the blockchain node 11a can execute the contract code in the smart contract 11c in the virtual machine. The contract code can automatically determine whether the current scenario meets the contract triggering conditions, and strictly execute the contract response rules. It determines whether the signed transaction data is valid according to the contract code execution result. When the signed transaction data is verified to be valid, the signed transaction data can be packaged into a new data block (block 11b). The blockchain node 11a can broadcast block 11b in the blockchain network, so that the remaining nodes in the blockchain network can share block 11b according to the consensus algorithm. After the block 11b passes the consensus, it can be formally put on the chain. After the consensus is passed, the block height of block 11b can be updated according to the maximum block height in the blockchain stored by blockchain node 11a, and the updated block 11b is stored in the local database of blockchain node 11a. At this time, the updated block 11b is block N+i in the local database of blockchain node 11a. N+i is used to represent the block order of the updated block 11b in the local blockchain. N and i are both integers greater than or equal to 0. At this time, the signing transaction data on-chain process is completed in the blockchain.

[0107] In an embodiment of the present application, a business client can access a proxy platform, and the proxy platform can access multiple resource clients; when transaction data to be signed is generated in the business client, the transaction data to be signed can be sent to the proxy platform, and the proxy platform forwards the transaction data to be signed to the resource client selected by the submitting object, for example, resource client a; and then the signature of the transaction data to be signed is completed by resource client a to obtain the signed transaction data, and the signed transaction data is returned to the business client through the proxy platform, and then the business client completes the signature verification and chain processing of the signed transaction data. It can be seen that in an embodiment of the present application, the business client does not need to directly access multiple resource clients, but only needs to access the proxy platform, and then the proxy platform completes the access of multiple resource clients. When a new resource client appears, the proxy platform can complete the access and adaptation of the new resource client. The business client does not need to develop adaptation and publish updates in order to access the new resource client, which can achieve no perception of the developers and users of the business client, thereby reducing the maintenance cost of the business client.

[0108] See also Figure 6 , Figure 6 This is a timing diagram of a data processing method based on blockchain provided in an embodiment of the present application. Figure 2 It is understandable that the blockchain-based data processing method can be used by a business client (e.g. Figure 1 The service client 10a in the corresponding embodiment), the proxy platform (for example, Figure 1The corresponding embodiment of the proxy platform 10c) and the resource client a (for example, Figure 1 The resource client 10b) in the corresponding embodiment is interactively executed. Figure 6 As shown, the blockchain-based data processing method may include the following steps S201-S214:

[0109] Step S201: Send a registration request.

[0110] The business client sends a registration request to the proxy platform, and accordingly, the proxy platform receives the registration request sent by the business client. The registration request may apply to the proxy platform for the registration of the business client. The registration request may include the first registration identifier and registered domain name information corresponding to the business client. The first registration identifier is provided by the business client and may be identification information input by the submitting object; the registered domain name information may refer to identification information such as a domain name or website name associated with the business client. The registration request may include, but is not limited to, information such as the registration password of the business client and the client interface corresponding to the business client.

[0111] Step S202: Acquire the client authentication information carried in the registration request, verify the client authentication information, and obtain a client authentication result corresponding to the client authentication information.

[0112] Specifically, the client authentication information may include the first registration identifier corresponding to the service client and the registration domain name information corresponding to the service client. The proxy platform may obtain the first registration identifier and the registration domain name information corresponding to the service client from the client authentication information carried in the registration request, and compare the first registration identifier with the client identifier stored in the client identifier of the proxy platform. The client identifier library is used to store the identification information of the service client that has been registered. If the first registration identifier exists in the client identifier library, it indicates that the first registration identifier has been registered in the proxy platform, and the first registration identifier cannot be used again to register the service client. At this time, the client authentication information fails the verification.

[0113] In an embodiment of the present application, the registered domain name information may include a configuration file, which is used to characterize the identification information of the business client and can be used to prove that the registered domain name belongs to the business client; if the configuration file is not associated with the business client, it means that the registered domain name information does not belong to the business client, and the registration cannot be completed for the business client at this time, and the client authentication information fails to pass the verification. Optionally, it is detected whether the length and composition of the registration password of the business client meet the specifications of the proxy platform. If it does not meet the specifications, the client authentication information fails to pass the verification. In an embodiment of the present application, if the first registration identifier does not exist in the client identification library, and the configuration file in the registered domain name information is associated with the business client, it can be determined that the client authentication information passes the verification. At this time, the business client can be registered and connected to the proxy platform, so that the business client can establish a connection with the proxy platform, so that data can be exchanged between the business client and the proxy platform.

[0114] Step S203: If the client authentication result indicates that the authentication is successful, a client identifier and key pair information are allocated to the business client, and the business private key in the client identifier and key pair information is stored; the business private key is used to decrypt the encrypted transaction data.

[0115] Among them, the key pair information may include the business public key and business private key corresponding to the business client. The business private key is generally kept by the proxy platform and can be used to decrypt the ciphertext transaction data sent by the client. The business public key is sent by the proxy platform to the business client. After receiving the business public key, the business client can use the business public key to encrypt the plaintext transaction data in the business client. For example, when the business client performs a business operation on the submitted object (for example, object A), the business client will generate a transaction data to be signed corresponding to object A according to the business operation. At this time, the transaction data to be signed is unencrypted plaintext transaction data. In order to prevent the transaction data to be signed from being tampered with during the transmission process, the transaction data to be signed can be encrypted by the business public key to generate ciphertext transaction data. It can be seen that compared with the use of transaction data to be signed for data transmission, the use of ciphertext transaction data for data transmission has a higher security for data transmission between the business client and the proxy platform.

[0116] The client ID (projectid) is an identity ID assigned by the proxy platform to the business client, which can be used to represent the identity information of the business client in the proxy platform. When the business client sends data or messages to the proxy platform, it can carry the client ID (projectid) so that the proxy platform can quickly identify the identity of the business client. In addition, the proxy platform can also use the client ID (projectid) as a query ID to quickly query the information related to the business client on the proxy platform, such as the business private key corresponding to the business client.

[0117] Specifically, when the client authentication result indicates that the authentication is successful, the client identifier corresponding to the business client can be determined based on the first registration identifier. For example, the first registration identifier can be determined as the client identifier corresponding to the business client, or a unique client identifier can be generated for the business client based on part or all of the information of the first registration identifier.

[0118] The generation process of the business public key and the business private key may include: obtaining a first random number p and a second random number q, and obtaining the Euler function value between the first random number p and the second random number q; wherein the first random number p and the second random number q are two mutually prime positive integers, and in order to improve the security of the business public key and the business private key, the first random number p and the second random number q generally take a larger value; the Euler function value between the first random number p and the second random number q can be expressed as Select a third random number e, the third random number e and the Euler function value are mutually prime, and the third random number is an integer less than the Euler function value and greater than 1. In other words, the third random number e satisfies And e and are mutually prime numbers; further, the product n between the first random number p and the second random number q can be calculated, and the business public key (n, e) in the key pair information corresponding to the business client can be generated according to the third random number e and the product n; according to the third random number e, the Euler function value Calculate the candidate value d such that Wherein, % represents a modulo operation, and the candidate value d and the product n generate the business private key (n, d) in the key pair information corresponding to the business client. In the embodiment of the present application, the business public key and business private key corresponding to the business client are constructed by two mutually prime first random numbers and second random numbers, which can improve the security of the business public key and business private key.

[0119] Step S204: Send the client identifier and the service public key in the key pair information.

[0120] The proxy platform sends the client identifier corresponding to the business client and the business public key in the key pair information to the business client, and correspondingly, the business client receives the client identifier and the business public key in the key pair information.

[0121] Please also see Figure 7 , Figure 7 FIG. 1 is a timing diagram of a service client registration method provided in an embodiment of the present application. Figure 7 As shown, the business client registration method may include steps S301 to S305. Specifically, in step S301, the business client sends a first registration identifier and registered domain name information to the proxy platform, and correspondingly, the proxy platform receives the first registration identifier and registered domain name information sent by the business client. The definitions of the first registration identifier and the registered domain name information can refer to the description above. In step S302, the proxy platform can review the first registration identifier submitted by the business client, and after the review is passed, it can allocate client identifier and key pair information to the business client. Among them, the review of the first registration identifier involves the detection of whether the first registration identifier exists in the client identifier library involved in the previous text, or it can also be a review of whether the string length and string format of the first registration identifier meet the specifications of the proxy platform, etc.; the allocation method of the client identifier and key pair information can refer to the description in the previous text, which will not be repeated here.

[0122] like Figure 7 As shown, in step S303, the client identification corresponding to the business client, the business private key in the key pair information, and the registered domain name information can be recorded in the proxy platform. In step S304, it can be detected whether the registered domain name information belongs to the business client. If so, a text file is placed in the registered domain name information. Specifically, the proxy platform can detect whether the registered domain name information contains the identification information of the business client (for example, IP address, port number, etc.). If it does, it indicates whether the registered domain name information belongs to the business client. At this time, a random string generated by the open platform can be stored in the text file in the registered domain name information. The random string can also be used as the identification information of the business client to prove that the registered domain name information belongs to the business client, so that the business client establishes contact with the proxy platform, so that data can be exchanged between the business client and the proxy platform. In step S305, if the registered domain name information is detected, the client identification and the business public key in the key pair information can be sent to the business client, and accordingly, the business client receives the client identification and the business public key in the key pair information.

[0123] Step S205: Send a transaction signature request.

[0124] The business client sends a transaction signature request to the proxy platform, and accordingly, the proxy platform receives the transaction signature request sent by the business client; the transaction signature request can be used to request the proxy platform to forward the transaction data to be signed to the resource client for signing.

[0125] The transaction signature request may include a client identifier and ciphertext transaction data, wherein the ciphertext transaction data refers to the transaction data obtained after the business client encrypts the signed transaction data using the business public key. Optionally, the business client may encapsulate the client identifier and ciphertext transaction data into a URL, which may be represented as "https: / / B.com / projectid?data=xxx&rediret_url=https: / / A.com / callback", wherein "https" may represent the Hypertext Transfer Protocol Security Protocol; "B.com" may represent the address of the proxy platform; "A.com" may represent the address of the business client; "projectid" may represent the client identifier corresponding to the business client; "data=xxx" may represent the ciphertext transaction data; "redirct_url" may represent the callback address after the signature succeeds or fails, that is, the address of the business client; the domain name of "redirect_url" needs to be registered when registering on the proxy platform and is detected by the proxy platform; "callback" may represent the callback function.

[0126] Step S206: Obtain the encrypted transaction data corresponding to the submitted object and the client identifier corresponding to the business client in the transaction signature request.

[0127] Step S207: Obtain the client identification library in the proxy platform. If the client identification exists in the client identification library, determine that the client identification verification is successful, decrypt the encrypted transaction data, and obtain the transaction data to be signed.

[0128] Specifically, the proxy platform can parse the URL carried in the transaction signature request to obtain the ciphertext transaction data corresponding to the submission queue and the client identifier (projectid) corresponding to the business client; then compare the client identifier (projectid) with the identifier stored in the client identifier library. If the client identifier (projectid) exists in the client identifier library, it indicates that the business client has completed registration in the proxy platform, the business client is a client trusted by the proxy platform, and the client identifier verification is passed; if the client identifier (projectid) does not exist in the client identifier library, it indicates that the business client is not registered in the proxy platform, and the signature transaction request will not be processed. When the client identifier verification is passed, the proxy platform can use the client identifier (projectid) as a query index to obtain the business private key corresponding to the business client, and decrypt the ciphertext transaction data through the business private key to obtain the transaction data to be signed.

[0129] In an embodiment of the present application, by verifying the client identifier and then decrypting the encrypted transaction data, the number of times the proxy platform processes malicious or erroneous signature transaction requests can be reduced, thereby improving the security and efficiency of the proxy platform in processing data.

[0130] Step S208: displaying a selection page; the selection page includes multiple resource clients connected to the proxy platform.

[0131] Step S209: In response to the trigger operation on the resource client a, the login page corresponding to the resource client a is displayed.

[0132] Step S210: In response to the input operation on the login page, the input information in the login page is determined as the object identifier of the submission object corresponding to the transaction data to be signed, and the resource client a is logged in according to the object identifier.

[0133] Please also see Figure 8a , Figure 8a This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 2 ,like Figure 8a As shown, the terminal device 200 is a terminal device owned by the object A, and the terminal page 40a can be displayed in the terminal device 200, and the terminal page 40a can include multiple resource clients accessed by the proxy platform. The object A can perform a trigger operation on any resource client among the multiple resource clients included in the terminal page 40a, and the terminal device 200 can respond to the trigger operation of the object A on a certain resource client (for example, resource client a) through the proxy platform, and display the terminal page 40b, which is the login page corresponding to the resource client a.

[0134] like Figure 8a As shown, the terminal page 40b may include an account input area 41a, and the object A may input the login account and login password of the resource client a in the account input area 41a; the terminal device 200 may respond to the input operation on the terminal page 40b through the proxy platform, obtain the login account 123457888X input by the object A, and determine the input information (login account 123457888X) of the object A in the terminal page 40b as the object identifier of the submitting object corresponding to the transaction data to be signed, and log in to the resource client a through the login account 123457888X. Further, the terminal device 200 may respond to the trigger operation on the login control 41b through the proxy platform, and compare the login password input in the account input area 41a with the login password corresponding to the login account 123457888X reserved in the resource client a. If the two are consistent, the terminal page 40c may be displayed, and the terminal page 40c is the login success prompt page corresponding to the resource client a, and the terminal page 40c may remind the object A that the resource client a is in the logged-in state at this time. If the two are inconsistent, a login failure prompt page can be displayed to remind object A that the login password is wrong or the account does not exist, so that object A can log in to resource client a again.

[0135] Optionally, if it is detected that the resource client a cannot be successfully logged in according to the object identifier corresponding to the submitted object (for example, object A), the registration application page corresponding to the resource client a can be displayed; wherein the registration application page includes an input area and a registration confirmation control; in response to an input operation on the input area, the input information in the input area is obtained; and then in response to a trigger operation on the registration confirmation control, a second registration identifier corresponding to the submitted object is generated according to the input information in the input area, and the resource client a is re-logged in according to the second registration identifier. In an embodiment of the present application, when the object identifier corresponding to the submitted object cannot successfully log in to the resource client a, a registration application page can be provided for the submitted object so that the submitted object can quickly apply for a login account of the resource client a, thereby completing the login of the resource client a.

[0136] Specifically, see Figure 8b , Figure 8b This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 3 .like Figure 8bAs shown, the terminal device 200 is a terminal device held by the object A, the terminal page 60b is a login page corresponding to the resource client a, and the terminal page 60b may include an account input area 61a. After the object A can input the login account and login password of the resource client a in the account input area 61a, the login control 61b can be triggered. The terminal device 200 can respond to the trigger operation for the login control 61b through the proxy platform, and compare the login account 123457888X input in the account input area 61a with the login account stored in the resource client a. If it is detected that the login account 123457888X does not exist, the registration prompt page 61c can be displayed, and the registration prompt page 61c can include the registration prompt information "The account does not exist, and you will be registered soon" to prompt the object A to register the account. The registration prompt page 61c may include a registration confirmation control 61d, and the object A can perform a trigger operation on the registration confirmation control 61d. The terminal device 200 can display the terminal page 60b in response to the trigger operation of the registration confirmation control 61d.

[0137] like Figure 8b As shown, the terminal page 60b is the registration application page corresponding to the resource client a, wherein the terminal page 60b may include an input area 61e and a registration confirmation control 61f. Object A may input a registration account, a registration password, and a confirmation of the registration password in the input area 61e, and the terminal device 200 may respond to the input operation of the object A on the input area 61e through the proxy platform, and obtain the input information (including the registration account and the registration password) in the input area 61e. Object A may perform a trigger operation on the registration confirmation control 61f, and the terminal device 200 may respond to the trigger operation on the registration confirmation control 61f through the proxy platform, and register the account of the resource client a for the object A according to the input information in the input area 61e. After successful registration, the terminal page 60c may be displayed, and the terminal page 60c is the registration success prompt page corresponding to the resource client a, and the terminal page 60c may be used to remind the object A that it has been successfully registered on the resource client a. The terminal page 60c may include a return login control 60g. The terminal device 200 may respond to the trigger operation on the login control 60g through the agent platform and re-login to the resource client a according to the second registration identifier (eg, registration account 123457888X) generated by the registration account in the input area 61e.

[0138] In a possible implementation, the login page corresponding to the resource client a includes a login identification code corresponding to the resource client a, and the input operation may include a scanning operation; in response to the input operation on the login page, the input information in the login page is determined as the object identification of the submission object corresponding to the transaction data to be signed, which may specifically include: in response to the scanning operation on the login identification code in the login page, the scanning timestamp and the generation timestamp corresponding to the login identification code are obtained; if the difference between the generation timestamp and the scanning timestamp is less than the display validity period, the input information determined by the scanning operation on the login identification code can be determined as the object identification of the submission object corresponding to the transaction data to be signed; if the difference between the generation timestamp and the scanning timestamp is greater than or equal to the display validity period, the login identification code can be updated to obtain an updated login identification code; in response to the scanning operation on the updated login identification code, the input information determined by the scanning operation corresponding to the updated login identification code is determined as the object identification of the submission object corresponding to the transaction data to be signed. In the embodiment of the present application, the security of logging in to the resource client a can be improved by setting a display validity period for the login identification code.

[0139] The login identification code is a unique identifier used to mark the identity and related information of the object currently performing the scanning operation. The login identification code is usually a randomly generated string or number, which can be a QR code or a barcode, etc. The display validity period refers to the length of time within a specific time range that the login identification code can be considered valid; the display validity period can be set according to specific application scenarios and requirements, and its length can be appropriately adjusted according to actual conditions.

[0140] Specifically, see Figure 8c , Figure 8c This is a schematic diagram of an interface for logging into a resource client provided in an embodiment of the present application. Figure 4 ,like Figure 8cAs shown, the terminal device 200 is a terminal device owned by the object A. The terminal page 50a can be displayed in the terminal device 200. The terminal page 50a can include multiple resource clients accessed by the proxy platform. The terminal device 200 can respond to the trigger operation of the object A on the resource client a through the proxy platform, and display the terminal page 50b. The terminal page 50b is the login page corresponding to the resource client a. The terminal page 50b can include a login identification code 51a. When the terminal device 200 generates the login identification code 51a, it can record the timestamp of the login identification code 51a as the generation timestamp corresponding to the login identification code 51a; the terminal device 200 can respond to the scanning operation of the object A on the login identification code 51a through the proxy platform, and record the timestamp corresponding to the scanning operation of the object A on the login identification code 51a as the scanning timestamp corresponding to the login identification code 51a. At this time, the difference between the generation timestamp and the scan timestamp can be calculated. If the difference between the generation timestamp and the scan timestamp is less than the displayed validity period, the input information determined by the scanning operation for the login identification code 51a can be determined as the object identification of the object A. At this time, the resource client a can be logged in according to the object identification determined by the scanning operation of the login identification code 51a. Optionally, a login success prompt page corresponding to the resource client a can also be displayed, and the object A can be reminded through the login success prompt page that the resource client a is in the logged-in state at this time.

[0141] like Figure 8c As shown, if the difference between the generation timestamp and the scan timestamp is greater than or equal to the display validity period, it indicates that the login identification code 5a1 has expired. At this time, an update prompt page 51d can be displayed. The update prompt page 51d can include an update prompt message "The code has expired, please refresh the identification code and try again" to prompt object A to update the login identification code 51a. The update prompt page 51d can include an update confirmation control 51b. Object A can perform a trigger operation on the update confirmation control 51b. The terminal device 200 can update the login identification code 51b in response to the trigger operation of the update confirmation control 51b to obtain an updated login identification code 51c. At this time, in response to the scanning operation on the updated login identification code 51c, the input information determined by the scanning operation corresponding to the updated login identification code 51c can be determined as the object identification of object A. At this time, the resource client a can be logged in according to the object identification determined by the scanning operation of the updated login identification code 51c. In addition, a terminal page 50c may also be displayed. The terminal page 50c is a login success prompt page corresponding to the resource client a. The terminal page 50c may be used to remind the object A that the resource client a is currently in the logged-in state.

[0142] Step S211: Send transaction data to be signed.

[0143] Step S212: Sign the transaction data to be signed according to the key information corresponding to the submitting object to generate signed transaction data.

[0144] The specific implementation of step S211 and step S212 can refer to step S103 and step S104, and the embodiment of the present application will not be repeated here.

[0145] Step S213: Return the signed transaction data.

[0146] Resource client a returns the signed transaction data to the proxy platform, and accordingly, the proxy platform receives the signed transaction data. In the embodiment of the present application, the proxy platform can create a new URL access by encoding the signed transaction data into the "redirect_url" parameter in the URL previously sent by the business client. The new URL can be "https: / / A.com / callback?sign=xxx,sign", where "sign=xxx,sign" can represent the signed transaction data, and the signed transaction data is transmitted back to the business client through the new URL.

[0147] Step S214: When the signed transaction data passes the verification, the signed transaction data is put on-chain.

[0148] The specific implementation method of step S214 can refer to step S106, and the embodiment of the present application will not be repeated here.

[0149] In an embodiment of the present application, a business client can access a proxy platform, and the proxy platform can access multiple resource clients; when transaction data to be signed is generated in the business client, the transaction data to be signed can be sent to the proxy platform, and the proxy platform forwards the transaction data to be signed to the resource client selected by the submitting object, for example, resource client a; and then the signature of the transaction data to be signed is completed by resource client a to obtain the signed transaction data, and the signed transaction data is returned to the business client through the proxy platform, and then the business client completes the signature verification and chain processing of the signed transaction data. It can be seen that in an embodiment of the present application, the business client does not need to directly access multiple resource clients, but only needs to access the proxy platform, and then the proxy platform completes the access of multiple resource clients. When a new resource client appears, the proxy platform can complete the access and adaptation of the new resource client. The business client does not need to develop adaptation and publish updates in order to access the new resource client, which can achieve no perception of the developers and users of the business client, thereby reducing the maintenance cost of the business client.

[0150] It is understandable that in the specific implementation of this application, relevant information of the user in the client may be involved (for example, the user's login information, registration information, account information, etc. in the client). When the above embodiments of this application are applied to specific products or technologies, the user's permission or consent is required, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of relevant countries and regions.

[0151] See also Fig. 9 , Fig. 9 is a schematic diagram of a data processing device based on blockchain provided in an embodiment of the present application; it can be understood that the data processing device based on blockchain 1 can be applied in Figure 1 In the proxy platform 10c shown, the proxy platform can be used to access multiple resource clients. Fig. 9 As shown, the blockchain-based data processing device may include a data acquisition module 11, a data sending module 12, and a data receiving module 13, wherein:

[0152] The data acquisition module 11 is used to acquire the transaction data to be signed sent by the business client, and acquire the object identifier of the submitting object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier; the resource client a is any resource client determined by the submitting object among multiple resource clients;

[0153] The data sending module 12 is used to send the transaction data to be signed to the resource client a in the logged-in state, so that the resource client a signs the transaction data to be signed according to the key information corresponding to the submitted object to generate signed transaction data;

[0154] The data receiving module 13 is used to receive the signed transaction data returned by the resource client a, and send the signed transaction data to the business client a, so that the business client a can process the signed transaction data on the chain when the signed transaction data passes the verification.

[0155] In a possible implementation, the data acquisition module 11 acquires the transaction data to be signed sent by the business client, including:

[0156] Receive the transaction signature request sent by the business client, and obtain the ciphertext transaction data corresponding to the submitted object and the client identifier corresponding to the business client in the transaction signature request;

[0157] The client identification library in the proxy platform is obtained. If the client identification exists in the client identification library, it is determined that the client identification verification is successful, and the ciphertext transaction data is decrypted to obtain the transaction data to be signed.

[0158] In a possible implementation, the blockchain-based data processing device 1 may further include a business client registration module 14, which is specifically used to:

[0159] Receive a registration request sent by a business client, obtain the client authentication information carried in the registration request, verify the client authentication information, and obtain a client authentication result corresponding to the client authentication information;

[0160] If the client authentication result indicates that the authentication is successful, a client identifier and key pair information are allocated to the business client, and the business private key in the client identifier and key pair information is stored; the business private key is used to decrypt the ciphertext transaction data;

[0161] The client identifier and the business public key in the key pair information are sent to the business client; the business public key is used to encrypt the plaintext transaction data in the business client, and the client identifier is used to represent the identity information of the business client in the proxy platform.

[0162] In a possible implementation, the service client registration module 14 verifies the client authentication information and obtains a client authentication result corresponding to the client authentication information, including:

[0163] Obtaining the first registration identifier and registered domain name information corresponding to the service client from the client authentication information;

[0164] If the first registration identifier does not exist in the client identifier library, and the configuration file in the registered domain name information is associated with the service client, it is determined that the client authentication information passes the verification.

[0165] In a possible implementation manner, if the client authentication result indicates that the authentication is successful, the service client registration module 14 allocates a client identifier and key pair information to the service client, including:

[0166] If the client authentication result indicates that the authentication is successful, determining the client identifier corresponding to the service client according to the first registration identifier in the client authentication information;

[0167] Obtain a first random number and a second random number, and obtain a Euler function value between the first random number and the second random number; the first random number and the second random number are prime to each other;

[0168] Obtain a third random number, and generate a business public key in the key pair information corresponding to the business client according to the third random number and the product of the first random number and the second random number; the third random number and the Euler function value are mutually prime, and the third random number is less than the Euler function value;

[0169] A business private key in the key pair information corresponding to the business client is generated according to the third random number, the Euler function value, and the product of the first random number and the second random number.

[0170] In a possible implementation, the blockchain-based data processing device 1 may further include a resource client access module 15, and the resource client access module 15 is specifically used to:

[0171] Obtain the application interface corresponding to resource client a, and obtain the interface call instance associated with the application interface;

[0172] The interface calling method of the application interface is determined according to the interface calling instance, and the resource client a is connected to the proxy platform through the interface calling method.

[0173] In a possible implementation, the data acquisition module 11 acquires the object identifier of the submission object corresponding to the transaction data to be signed, including:

[0174] Displaying a selection page; the selection page includes multiple resource clients connected to the proxy platform;

[0175] In response to the trigger operation for resource client a, the login page corresponding to resource client a is displayed;

[0176] In response to an input operation on the login page, the input information in the login page is determined as an object identifier of a submission object corresponding to the transaction data to be signed.

[0177] In a possible implementation, the login page includes a login identification code corresponding to the resource client a, and the input operation includes a scanning operation; the data acquisition module 11 responds to the input operation on the login page, and determines the input information in the login page as the object identification of the submission object corresponding to the transaction data to be signed, including:

[0178] In response to a scan operation of a login identification code in a login page, a scan timestamp and a generation timestamp corresponding to the login identification code are obtained;

[0179] If the difference between the generation timestamp and the scanning timestamp is less than the displayed validity period, the input information determined by the scanning operation for the login identification code is determined as the object identification of the submission object corresponding to the transaction data to be signed;

[0180] If the difference between the generation timestamp and the scan timestamp is greater than or equal to the displayed validity period, the login identification code is updated to obtain an updated login identification code;

[0181] In response to a scanning operation on the updated login identification code, the input information determined by the scanning operation corresponding to the updated login identification code is determined as the object identification of the submission object corresponding to the transaction data to be signed.

[0182] In a possible implementation, the data acquisition module 11 acquires the object identifier of the submission object corresponding to the transaction data to be signed, including:

[0183] Displaying a selection page; the selection page includes multiple resource clients connected to the proxy platform;

[0184] In response to a trigger operation on resource client a, an authorization prompt page associated with the business client is displayed;

[0185] In response to the authorization operation corresponding to the authorization prompt page, the login information corresponding to the submission object corresponding to the transaction data to be signed in the business client is obtained, and the login information is determined as the object identifier corresponding to the submission object.

[0186] In a possible implementation, the blockchain-based data processing device 1 may further include a re-login module 16, which is specifically used to:

[0187] If it is detected that the object identifier cannot successfully log in to the resource client a, then the registration application page corresponding to the resource client a is displayed; the registration application page includes an input area and a registration confirmation control;

[0188] In response to an input operation on the input area, obtaining input information in the input area;

[0189] In response to the triggering operation on the registration confirmation control, a second registration identifier corresponding to the submitted object is generated according to the input information in the input area, and the resource client a is logged in again according to the second registration identifier.

[0190] According to an embodiment of the present application, the steps involved in the blockchain-based data processing method shown above can be Fig. 9 The various modules in the blockchain-based data processing device 1 shown are executed. For example, Figure 3 Step S102 shown can be performed by Fig. 9 The data acquisition module 11 shown is used to execute, Figure 3 Step S103 shown can be performed by Fig. 9 The data sending module 12 shown is used to execute the following operations.

[0191] According to one embodiment of the present application, Fig. 9The various modules in the blockchain-based data processing device 1 shown can be separately or completely combined into one or several units to constitute, or one (some) of the units can be further divided into at least two functionally smaller sub-units, which can achieve the same operation without affecting the realization of the technical effects of the embodiments of the present application. The above modules are divided based on logical functions. In practical applications, the functions of one module can also be implemented by at least two units, or the functions of at least two modules can be implemented by one unit. In other embodiments of the present application, the blockchain-based data processing device 1 may also include other units. In practical applications, these functions can also be implemented with the assistance of other units, and can be implemented by at least two units in collaboration.

[0192] In the embodiment of the present application, the business client can access the proxy platform, and the proxy platform can access multiple resource clients; when the transaction data to be signed is generated in the business client, the transaction data to be signed can be sent to the proxy platform, and the proxy platform forwards the transaction data to be signed to the resource client selected by the submitting object, for example, resource client a; and then the signature of the transaction data to be signed is completed by resource client a, the signed transaction data is obtained, and the signed transaction data is returned to the business client through the proxy platform, and then the business client completes the signature verification and chain processing of the signed transaction data. It can be seen that in the embodiment of the present application, the business client does not need to directly access multiple resource clients, but only needs to access the proxy platform, and then the proxy platform completes the access of multiple resource clients. When a new resource client appears, the proxy platform can complete the access and adaptation of the new resource client. The business client does not need to develop adaptation and publish updates in order to access the new resource client, which can achieve no perception of the developers and users of the business client, thereby reducing the maintenance cost of the business client.

[0193] See also Fig.10 , Fig.10 Schematic diagram of the structure of a computer device provided in an embodiment of the present application. Fig.10As shown, the computer device 1000 can be a server, or it can also be a terminal device, which will not be limited here. For ease of understanding, the embodiment of the present application takes the computer device as a terminal device as an example, and the terminal device can be integrated with a business client, a resource client and an agent platform, wherein the agent platform can be used to access multiple resource clients. The computer device 1000 may include: a processor 1001, a network interface 1004 and a memory 1005. In addition, the computer device 1000 may also include: a user interface 1003, and at least one communication bus 1002. Among them, the communication bus 1002 is used to realize the connection communication between these components. Among them, the user interface 1003 may include a display screen (Display), a keyboard (Keyboard), and optionally, the user interface 1003 may also include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or it may be a non-volatile memory (non-volatile memory), such as at least one disk memory. The memory 1005 may optionally be at least one storage device located away from the aforementioned processor 1001. Fig.10 As shown, the memory 1005 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and a device control application program.

[0194] Among them, Fig.10 In the computer device 1000 shown, the network interface 1004 can provide a network communication function; the user interface 1003 is mainly used to provide an input interface for the user; and the processor 1001 can be used to call the device control application stored in the memory 1005 to achieve:

[0195] Obtain the transaction data to be signed sent by the business client, and obtain the object identifier of the submitting object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier; the resource client a is any resource client determined by the submitting object among multiple resource clients;

[0196] Send the transaction data to be signed to the resource client a in the logged-in state, so that the resource client a signs the transaction data to be signed according to the key information corresponding to the submitted object to generate signed transaction data;

[0197] Receive the signed transaction data returned by resource client a, and send the signed transaction data to business client a, so that business client a can process the signed transaction data on the chain when the signed transaction data passes the verification.

[0198] It should be understood that the computer device 1000 described in the embodiment of the present application can execute the above Figure 3 and Figure 6 The description of the data processing method based on blockchain in the corresponding embodiment can also be performed as described above. Fig. 9 The description of the blockchain-based data processing device 1 in the corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated here.

[0199] In addition, it should be pointed out here that: the embodiment of the present application also provides a computer-readable storage medium, and the computer-readable storage medium stores a computer program executed by the blockchain-based data processing device 1 mentioned above, and the computer program includes program instructions. When the processor executes the program instructions, it can execute the above Figure 3 and Figure 6 The description of the data processing method based on blockchain in any corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. Among them, the storage medium can be a disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc. For technical details not disclosed in the computer-readable storage medium embodiment involved in this application, please refer to the description of the method embodiment of this application. As an example, program instructions can be deployed on a computing device for execution, or on multiple computing devices located at one location, or on multiple computing devices distributed at multiple locations and interconnected by a communication network. Multiple computing devices distributed at multiple locations and interconnected by a communication network can constitute a blockchain system.

[0200] In addition, it should be noted that: the embodiment of the present application also provides a computer program product or a computer program, which may include computer instructions, and the computer instructions may be stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor may execute the computer instructions, so that the computer device executes the above Figure 3 and Figure 6 The description of the data processing method based on blockchain in any corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the computer program product or computer program embodiment involved in this application, please refer to the description of the method embodiment of this application.

[0201] The terms "first", "second", etc. in the description, claims, and drawings of the embodiments of the present application are used to distinguish different media contents, rather than to describe a specific order. In addition, the term "comprising" and any variation thereof are intended to cover non-exclusive inclusions. For example, a process, method, device, product, or equipment comprising a series of steps or units is not limited to the listed steps or modules, but may optionally include steps or modules that are not listed, or may optionally include other step units inherent to these processes, methods, devices, products, or equipment.

[0202] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0203] The method and related apparatus provided by the embodiment of the present application are described with reference to the method flow chart and / or structural diagram provided by the embodiment of the present application. Specifically, each process and / or box in the method flow chart and / or structural diagram, as well as the combination of the processes and / or boxes in the flow chart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the process in the process. Figure 1 Schematic diagram of one or more processes and / or structures Figure 1 These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing device to work in a specific way, so that the instructions stored in the computer-readable memory produce a product including an instruction device, which implements the functions specified in the process. Figure 1 Schematic diagram of one or more processes and / or structures Figure 1 These computer program instructions can also be loaded onto a computer or other programmable data processing device, so that a series of operation steps are executed on the computer or other programmable device to produce a computer-implemented process, so that the instructions executed on the computer or other programmable device provide for implementing the process in the process. Figure 1 A flow or multiple flows and / or structures illustrate the steps of the functions specified in one block or multiple blocks.

[0204] The above disclosure is only the preferred embodiment of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims

1. A data processing method based on blockchain, characterized in that: The method is executed by a proxy platform, the proxy platform is used to access multiple resource clients, and the method includes: Acquire the transaction data to be signed sent by the business client, and acquire the object identifier of the submission object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier; the resource client a is any resource client determined by the submission object among the multiple resource clients; Sending the transaction data to be signed to the resource client a in a logged-in state, so that the resource client a signs the transaction data to be signed according to the key information corresponding to the submitted object to generate signed transaction data; Receive the signed transaction data returned by the resource client a, and send the signed transaction data to the business client a, so that the business client a processes the signed transaction data on the chain when the signed transaction data passes the verification.

2. The method according to claim 1, characterized in that The step of obtaining the transaction data to be signed sent by the business client includes: Receiving a transaction signature request sent by the business client, and obtaining the ciphertext transaction data corresponding to the submitted object and the client identifier corresponding to the business client from the transaction signature request; A client identification library in the proxy platform is obtained. If the client identification exists in the client identification library, it is determined that the client identification verification is passed, and the ciphertext transaction data is decrypted to obtain the transaction data to be signed.

3. The method according to claim 2, characterized in that The method further comprises: Receive a registration request sent by the service client, obtain client authentication information carried in the registration request, verify the client authentication information, and obtain a client authentication result corresponding to the client authentication information; If the client authentication result indicates that the authentication is successful, a client identifier and key pair information are allocated to the business client, and the client identifier and the business private key in the key pair information are stored; the business private key is used to decrypt the ciphertext transaction data; The client identifier and the business public key in the key pair information are sent to the business client; the business public key is used to encrypt the plaintext transaction data in the business client, and the client identifier is used to represent the identity information of the business client in the proxy platform.

4. The method according to claim 3, characterized in that The verifying the client authentication information to obtain a client authentication result corresponding to the client authentication information includes: Obtaining the first registration identifier and registered domain name information corresponding to the service client from the client authentication information; If the first registration identifier does not exist in the client identifier library, and the configuration file in the registered domain name information is associated with the service client, it is determined that the client authentication information passes the verification.

5. The method according to claim 3, characterized in that: If the client authentication result indicates that the authentication is successful, assigning a client identifier and key pair information to the service client includes: If the client authentication result indicates that the authentication is successful, determining the client identifier corresponding to the service client according to the first registration identifier in the client authentication information; Obtaining a first random number and a second random number, and obtaining an Euler function value between the first random number and the second random number; the first random number and the second random number are mutually prime; Obtain a third random number, and generate a business public key in the key pair information corresponding to the business client according to the third random number and the product of the first random number and the second random number; the third random number and the Euler function value are mutually prime, and the third random number is smaller than the Euler function value; A business private key in the key pair information corresponding to the business client is generated according to the third random number, the Euler function value, and the product of the first random number and the second random number.

6. The method according to claim 1, characterized in that The method further comprises: Obtaining the application interface corresponding to the resource client a, and obtaining the interface call instance associated with the application interface; The interface calling method of the application interface is determined according to the interface calling instance, and the resource client a is connected to the proxy platform through the interface calling method.

7. The method according to claim 1, characterized in that The obtaining the object identifier of the submission object corresponding to the transaction data to be signed includes: Displaying a selection page; the selection page includes the multiple resource clients connected to the proxy platform; In response to a trigger operation on the resource client a, a login page corresponding to the resource client a is displayed; In response to an input operation on the login page, the input information in the login page is determined as the object identifier of the submission object corresponding to the transaction data to be signed.

8. The method according to claim 7, characterized in that The login page includes a login identification code corresponding to the resource client a, and the input operation includes a scanning operation; In response to the input operation on the login page, determining the input information in the login page as the object identifier of the submission object corresponding to the transaction data to be signed, includes: In response to a scanning operation on the login identification code in the login page, obtaining a scanning timestamp and a generation timestamp corresponding to the login identification code; If the difference between the generation timestamp and the scanning timestamp is less than the displayed validity period, the input information determined by the scanning operation for the login identification code is determined as the object identification of the submission object corresponding to the transaction data to be signed; If the difference between the generation timestamp and the scanning timestamp is greater than or equal to the display validity period, the login identification code is updated to obtain an updated login identification code; In response to a scanning operation on the updated login identification code, the input information determined by the scanning operation corresponding to the updated login identification code is determined as the object identifier of the submission object corresponding to the transaction data to be signed.

9. The method according to claim 1, characterized in that: The obtaining the object identifier of the submission object corresponding to the transaction data to be signed includes: Displaying a selection page; the selection page includes the multiple resource clients connected to the proxy platform; In response to a trigger operation on resource client a, an authorization prompt page associated with the business client is displayed; In response to the authorization operation corresponding to the authorization prompt page, the login information corresponding to the submission object corresponding to the transaction data to be signed in the business client is obtained, and the login information is determined as the object identifier corresponding to the submission object.

10. The method according to claim 1, characterized in that The method further comprises: If it is detected that the object identifier cannot successfully log in to the resource client a, a registration application page corresponding to the resource client a is displayed; the registration application page includes an input area and a registration confirmation control; In response to an input operation on the input area, acquiring input information in the input area; In response to the triggering operation on the registration confirmation control, a second registration identifier corresponding to the submitted object is generated according to the input information in the input area, and the resource client a is re-logged in according to the second registration identifier.

11. A data processing device based on blockchain, characterized in that: The device is applied in a proxy platform, and the proxy platform is used to access multiple resource clients. The device includes: A data acquisition module is used to acquire the transaction data to be signed sent by the business client, and acquire the object identifier of the submission object corresponding to the transaction data to be signed, and log in to the resource client a according to the object identifier; the resource client a is any resource client determined by the submission object among the multiple resource clients; A data sending module, used for sending the transaction data to be signed to the resource client a in a logged-in state, so that the resource client a signs the transaction data to be signed according to the key information corresponding to the submitted object to generate signed transaction data; The data receiving module is used to receive the signed transaction data returned by the resource client a, and send the signed transaction data to the business client a, so that the business client a can process the signed transaction data on the chain when the signed transaction data passes the verification.

12. A computer device, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program, and when the computer program is executed by the processor, the processor executes the steps of the method according to any one of claims 1 to 10.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, wherein the computer program includes program instructions, and when the program instructions are executed by a processor, the steps of the method according to any one of claims 1 to 10 are executed.

14. A computer program product, characterized in that The method comprises a computer program / instruction, which implements the method according to any one of claims 1 to 10 when executed by a processor.

Images