Data processing system, method, electronic device, storage medium and program product

Abstract

The application provides a data processing system, method, electronic device, storage medium and program product. The method comprises the following steps: obtaining an authorized signature corresponding to a target service protocol through an application server, sending the authorized signature to a block chain system, decrypting the authorized signature when the block chain system receives the authorized signature, obtaining the original text of the target service protocol, obtaining the identification information corresponding to the target service protocol, determining the target static data maintained in the target smart contract based on the identification information, comparing the target protocol original text with the target static data, and sending the target static data to the application server when it is determined that the comparison is consistent. The method of the application realizes effective supervision of user data use, enhances the security of user data, and improves user experience.

Description

TECHNICAL FIELD

[0001] The present application relates to the technical field of data processing, and particularly relates to a data processing system and method, an electronic device, a storage medium and a program product. BACKGROUND

[0002] In order to provide personalized services for users, an application service end needs to calculate a large amount of user data, so as to provide more accurate needs for users.

[0003] In the prior art, before a software service provider provides services for users, the software service provider signs a relevant authorization agreement of user data acquisition and use with the users, so as to acquire user data after authorization, and provide required services for the users after the data is analyzed, verified and processed by an internal system of the software service provider.

[0004] However, in the process of acquiring user data by the software service provider after the user authorization, the user cannot effectively audit the software service provider and effectively supervise the authorized user data, so as to easily cause user data leakage, reduce the security of user data and affect user experience. SUMMARY

[0005] Embodiments of the present application provide a data processing system and method, an electronic device, a storage medium and a program product, so as to enhance the security of user data and improve user experience in the process of providing services for users.

[0006] In a first aspect, an embodiment of the present application provides a data processing system, comprising:

[0007] An application service end is configured to acquire an authorization signature corresponding to a target service agreement, and send the authorization signature to a blockchain system.

[0008] The blockchain system is configured to decrypt the authorization signature to obtain a target service agreement original text when the authorization signature is received.

[0009] The blockchain system is further configured to acquire identification information corresponding to the target service agreement, determine a target smart contract corresponding to the identification information, obtain target static data, compare the target service agreement original text with the target static data, and send the target static data to the application service end when the comparison is consistent.

[0010] Optionally, the application service end is further configured to acquire a target service request sent by a user terminal, determine a target service agreement according to the target service request, and send the target service agreement to the user terminal, so that the user terminal sends an authorization signature to the application service end according to the target service agreement.

[0011] Upon obtaining the authorization signature corresponding to the target service protocol, the system sends the identification information corresponding to the target service protocol authorized by the authorization signature to the user terminal, so that the user terminal can send the identification information to the blockchain system.

[0012] Optionally, the system also includes a computing server and a data server;

[0013] The blockchain system is also used to determine whether a dynamic signature exists in the original text of the target service protocol after the target static data is sent to the application server; when a dynamic signature is determined to exist, a calculation instruction is generated and sent to the calculation server.

[0014] The computing server is used to obtain dynamic signatures from the blockchain system according to computing instructions and send the dynamic signatures to the data server;

[0015] The data server is used to determine the dynamic public key of the user terminal corresponding to the dynamic signature, and to decrypt the dynamic signature using the dynamic public key to obtain the original dynamic protocol text, and then send the target dynamic data corresponding to the original dynamic protocol text to the computing server.

[0016] The computing server is also used to perform privacy calculations on the received target dynamic data to obtain target privacy dynamic data, and send it to the blockchain system so that the target privacy dynamic data can be sent to the application server through the blockchain system.

[0017] Optionally, the application server is also used to generate an application server private key and an application server public key before obtaining a target service request, and to upload the application server public key to the blockchain system;

[0018] Each service agreement is encrypted using the application server's private key and then uploaded to the blockchain system;

[0019] The blockchain system is also used to obtain the application server's public key and to decrypt the encrypted service protocols using the application server's public key; if the decrypted service protocols are obtained, it is determined that the application server has a legitimate identity.

[0020] Optionally, the system further includes: a monitoring server, used to verify each service protocol of the application server after receiving an instruction from the blockchain system indicating that the application server has a legitimate identity; if any service protocol fails verification, the service protocol is rejected; otherwise, the smart contract corresponding to the service protocol is determined, and the service protocol identification information is added to the smart contract to determine the target smart contract corresponding to the target service protocol through the identification information, wherein the monitoring server has a legitimate identity in the blockchain system.

[0021] Secondly, embodiments of this application provide a data processing method applied to an application server, comprising:

[0022] obtaining an authorization signature corresponding to the target service agreement;

[0023] sending the authorization signature to the blockchain system, so that the blockchain system, upon receiving the authorization signature, obtains the target service agreement text and the target static data and compares them, and upon a consistent comparison, sends the target static data to the application server; wherein the target service agreement text is obtained by the blockchain system decrypting the authorization signature, and the target static data is obtained by the blockchain system obtaining the identification information corresponding to the target service agreement and then determining the target smart contract corresponding to the identification information.

[0024] In a third aspect, an embodiment of the present application provides a data processing method applied to a blockchain system, comprising:

[0025] obtaining identification information corresponding to the target service agreement, and determining a target smart contract corresponding to the identification information to obtain target static data;

[0026] decrypting the authorization signature to obtain a target service agreement text, and comparing the target service agreement text with the target static data, and upon a consistent comparison, sending the target static data to the application server; wherein the authorization signature is sent by the application server to the blockchain system after obtaining the authorization signature corresponding to the target service agreement.

[0027] In a fourth aspect, an embodiment of the present application provides a data processing method applied to a computing server, comprising:

[0028] obtaining a dynamic signature from the blockchain system according to a computing instruction, and sending the dynamic signature to a data server; wherein the computing instruction is generated by the blockchain system when it determines that there is a dynamic signature in the target service agreement text, and the target service agreement text is obtained by the blockchain system decrypting the authorization signature upon receiving the authorization signature;

[0029] obtaining target dynamic data corresponding to the dynamic agreement text, performing privacy computation on the target dynamic data to obtain target privacy dynamic data, and sending the target privacy dynamic data to the blockchain system, so that the blockchain system sends the target privacy dynamic data to the application server; wherein the dynamic agreement text is obtained by the data server decrypting the dynamic signature using a user terminal dynamic public key upon determining the user terminal dynamic public key corresponding to the dynamic signature.

[0030] In a fifth aspect, an embodiment of the present application provides a data processing method applied to a supervision server, comprising:

[0031] Obtain each service agreement of the application service end with a legal identity, and verify each service agreement respectively; when any one service agreement verification fails, reject the service agreement, otherwise, determine the smart contract corresponding to the service agreement, and add the identification information of the service agreement to the smart contract, so as to determine the target smart contract corresponding to the target service agreement through the identification information, wherein the supervision server has a legal identity in the blockchain system; the legal identity of the application service end is determined by the blockchain system after obtaining the public key of the application service end and decrypting each encrypted service agreement through the public key of the application service end; each encrypted service agreement is obtained by encrypting each service agreement through the private key of the application service end by the application service end; the private key of the application service end and the public key of the application service end are generated by the application service end.

[0032] In a sixth aspect, an embodiment of the present application provides a data processing method, applied to a data server, comprising:

[0033] Obtain the dynamic signature sent by the computing service end, and determine the user terminal dynamic public key corresponding to the dynamic signature;

[0034] Decrypt the dynamic signature through the user terminal dynamic public key to obtain the dynamic protocol original text, send the target dynamic data corresponding to the dynamic protocol original text to the computing service end, so that the computing service end performs privacy calculation on the target dynamic data to obtain target privacy dynamic data, and sends the target privacy dynamic data to the blockchain system, so that the blockchain system sends the target privacy dynamic data to the application service end; wherein the dynamic signature is obtained by the computing service end according to the computing instruction from the blockchain system, the computing instruction is generated by the blockchain system when it is determined that the target service protocol original text contains a dynamic signature, and the target service protocol original text is obtained by the blockchain system after decrypting the authorization signature when receiving the authorization signature.

[0035] In a seventh aspect, an embodiment of the present application provides an electronic device, comprising: a memory, a processor;

[0036] The memory stores computer execution instructions;

[0037] The processor executes the computer execution instructions stored in the memory, so that the processor executes the embodiments of any one of the second aspect to the sixth aspect.

[0038] In an eighth aspect, an embodiment of the present application provides a computer readable storage medium, the computer readable storage medium stores computer execution instructions, and the computer execution instructions are executed by the processor to realize the embodiments of any one of the second aspect to the sixth aspect.

[0039] In a ninth aspect, an embodiment of the present application provides a computer program product, comprising a computer program, which, when executed by a processor, implements the implementation manner of any one of the second aspect to the sixth aspect.

[0040] The data processing system and method, the electronic device, the storage medium and the program product provided by the embodiments of the present application can obtain the authorized signature corresponding to the target service agreement through the application server, and send the authorized signature to the blockchain system; and when the authorized signature is received by the blockchain system, the authorized signature is decrypted to obtain the original text of the target service agreement; the blockchain system also obtains the identification information corresponding to the target service agreement, determines the corresponding target smart contract based on the identification information, obtains the target static data, compares the target protocol original text with the target static data, and when it is determined that the comparison is consistent, the target static data is sent to the application server. In the process of providing services to users, the effective supervision of user data is realized, the security of user data is enhanced, and the user experience is improved. BRIEF DESCRIPTION OF DRAWINGS

[0041] The accompanying drawings, which are incorporated herein and form part of the specification, illustrate embodiments consistent with the present application and, together with the description, further serve to explain the principles of the application.

[0042] Figure 1 The prior art data processing scene provided by the present application is shown in the figure;

[0043] Figure 2 The structure diagram of the data processing system provided by the present application is shown in the figure;

[0044] Figure 3 The flowchart of the data processing method provided by the present application is shown in the figure;

[0045] Figure 4 The structure diagram of the first data processing device provided by the present application is shown in the figure;

[0046] Figure 5 The structure diagram of the second data processing device provided by the present application is shown in the figure;

[0047] Figure 6 The structure diagram of the electronic device provided by the present application is shown in the figure.

[0048] Through the above-mentioned drawings, the specific embodiments of the present application have been shown, and more detailed description will be given hereinafter. These drawings and textual descriptions are not intended to limit the scope of the concept of the present application by any means, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0049] The exemplary embodiments will be described in detail herein with reference to the attached drawings. In the following description, like reference numerals refer to like elements throughout the description. The following exemplary embodiments described herein represent illustrations only. They are not meant to be limiting in any respect. Rather, they are merely examples of apparatuses and methods consistent with some aspects of the present application as detailed in the appended claims.

[0050] It should be noted that the user information (including but not limited to user equipment information, user personal information, etc.) and data (including but not limited to data for analysis, stored data, displayed data, etc.) involved in the present application are all information and data authorized by the user or authorized by all parties, and the collection, use and processing of related data need to comply with relevant laws, regulations and standards in the relevant region, and provide corresponding operation portal for user to choose authorization or refusal.

[0051] First, the terms involved in the present application are explained:

[0052] Figure 1 The data processing scene of the prior art provided for the present application is shown in FIG. 1, which includes an application service end, a user terminal and a data institution. The application service end sends a related authorization agreement for obtaining user data and using user data to the user terminal, and obtains user data from the user terminal or the data institution after the user terminal signs the related authorization agreement, and processes (such as analyzes, verifies, processes) the obtained user data, thereby providing related services to the user based on the processed data. Figure 1

[0053] However, after the application service end obtains the authorization of the user on the user terminal, it is difficult to effectively supervise the subsequent process of using data by the application service end, which increases the probability of user data leakage. And with the continuous expansion of service scope and the continuous deepening of business development, the range and type of data that the application service end needs to authorize from the user also gradually increase, so it is easy to need the user to sign multiple authorization agreements successively, which affects the customer experience.

[0054] In addition, the prior art provides user data to a trusted data platform through the user terminal, and feeds back to the application service end after the trusted data platform calculates the user data. However, the simultaneous reception, storage and calculation of user data by the trusted data platform reduces the efficiency of the application service end in obtaining user data and providing services to the user, and the security management of the trusted data platform needs to be strengthened, which increases the security cost.

[0055] In view of the above scenario, in the prior art, the security of user data is low, and the efficiency of the application service end in obtaining user data is low, which affects the user experience.​

[0056] The data processing system provided in the application comprises an application server, a blockchain system, a data server, a supervision server and a computing server. The application server is configured to receive a target service request and feed back a target service agreement verified by the supervision server to a user terminal according to the target service request, so that the user terminal sends an authorization signature corresponding to the target service agreement, feeds back identification information corresponding to the target service agreement to the user terminal based on the authorization signature, sends the identification information to the blockchain system through the user terminal, and determines target static data corresponding to the identification information through the blockchain system. When the blockchain system obtains the authorization signature sent by the application server, the authorization signature is decrypted to obtain the original text of the target service agreement. When it is determined that the original text of the target agreement and the target static data are consistent, the target static data is sent to the application server, the verification of the user data obtained by the application server is realized, and the security of the user data is enhanced. When the blockchain system determines that there is a dynamic signature in the original text of the target service agreement, the dynamic signature is obtained through the computing server, and the data server feeds back target dynamic data corresponding to the dynamic signature after the dynamic signature is verified by the data server through the dynamic signature. The target dynamic signature is subjected to privacy calculation through the computing server, target privacy dynamic data is obtained and sent to the blockchain system, and the blockchain system sends the target privacy dynamic data to the application server, thereby avoiding the direct provision of user data to the application server in the prior art, enhancing the security of the user data, improving the data processing efficiency, and enhancing the user experience.

[0057] The data processing system provided in the application aims to solve the above technical problems in the prior art.

[0058] The technical solutions of the application and how the technical solutions of the application solve the above technical problems will be described in detail in specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes can not be described again in some embodiments. The embodiments of the application will be described below with reference to the drawings.

[0059] Figure 2 The structural schematic diagram of the data processing system provided in the application is shown in FIG. 1. Figure 2 The data processing system comprises an application server, a blockchain system, a data server and a computing server. The application server, the computing server and the data server respectively perform data transmission with the blockchain system. The blockchain system refers to a set of programs, modules and data associated with each other designed and developed based on the specific functions of the blockchain platform.

[0060] Optionally, the application server obtains an authorization signature corresponding to the target service agreement, and sends the authorization signature to the blockchain system. Upon receiving the authorization signature, the blockchain system decrypts the authorization signature to obtain the original text of the target service agreement, obtains the identification information corresponding to the target service agreement, and determines the corresponding target smart contract based on the identification information to obtain the target static data, wherein the identification information corresponding to the target service agreement is determined by the application server; and compares the target protocol original text with the target static data, and sends the target static data to the application server when the comparison is consistent.

[0061] For example, the target service agreement is a data acquisition clause on which the normal operation of the target service depends, and the target service agreement original text is the clause data after the user authorizes based on the target service agreement, such as the clause data after entering the user name.

[0062] Optionally, the blockchain system includes a contract management module, a data management module, and a computing management module.

[0063] In one possible embodiment, when the application server needs to obtain the user data corresponding to the target service agreement, the application server can send the obtained authorization signature of the target service agreement to the blockchain system. After receiving the authorization signature, the blockchain system decrypts the authorization signature according to the user terminal authorization public key obtained previously by the computing management module to obtain the original text of the target service agreement. The authorization signature is obtained by encrypting the original text of the target service agreement using the user terminal authorization private key corresponding to the user terminal authorization public key, and the user terminal authorization public key obtained previously by the computing management module is generated and sent by the user terminal. The computing management module of the blockchain system compares the original text of the target service agreement with the target static data obtained based on the identification information previously, and determines that the authorization signature of the application server is verified when the comparison is consistent, and sends the target static data to the application server. In this embodiment, the blockchain system decrypts the authorization signature sent by the application server to obtain the original text of the target service agreement, compares the original text of the target service agreement with the target static data, and sends the corresponding target static data to the application server after the comparison is passed, thereby enhancing the audit of the application server and further enhancing the security of the user data.

[0064] Optionally, the application server is further configured to obtain a target service request sent by the user terminal, determine a target service agreement according to the target service request, and send the target service agreement to the user terminal, so that the user terminal sends an authorization signature of the target service agreement to the application server according to the target service agreement; when the authorization signature corresponding to the target service agreement is obtained, the target service agreement authorized by the authorization signature is sent to the user terminal, so that the user terminal sends the identification information to the blockchain system. The target service agreement refers to a clause that is pre-planned for repeated use and does not need special negotiation when the contract is concluded. The target smart contract refers to a code contract and / or algorithm contract driven by the identification information, which has the characteristics of self-execution and can automatically execute the preset logic operation to obtain the target static data.

[0065] In one possible embodiment, before obtaining the target static data, the user maintains data through the user terminal. The specific data maintenance process includes: the user registers on the blockchain system through the user terminal, and after successful registration, determines the target smart contract stored in the contract management module of the blockchain system, and inputs static data into the target smart contract according to the target service agreement corresponding to the target smart contract, so that the related preset logic of the target smart contract processes the currently input static data. If the preset logic of the target smart contract is privacy processing logic, the target smart contract processes the currently input static data by adding noise, data generalization, data randomization, etc., to obtain the static data after privacy processing, thereby enhancing the security of user data and enhancing the management of user data; if the preset logic of the target smart contract is storage logic, the target smart contract associates the identification information of the corresponding target service agreement with the currently input static data and stores it.

[0066] For example, the user sends a target service request through the user terminal, and when the application server obtains the target service request, it feeds back the target service agreement corresponding to the target service request to the user terminal; after the user terminal receives the target service agreement, the user reads the target service agreement presented on the user terminal, and sends the authorization signature of the target service agreement to the application server through the user terminal; when the application server obtains the authorization signature of the target service agreement, it sends the identification information corresponding to the target service agreement to the user terminal, so that the user terminal sends the identification information to the data management module of the blockchain system, so that the data management module of the blockchain system automatically drives the preset logic operation according to the identification information to obtain the data corresponding to the target service agreement.

[0067] Exemplarily, the target service agreement is a login service agreement, and the identification information is a login service agreement ID corresponding to the login service agreement. In the process that the user logs in the application software corresponding to the application service end through the user terminal, the user fills in the user data indicated by the login service agreement according to the login smart contract corresponding to the login service agreement, such as a personal username and a contact method, so as to realize effective maintenance of the user data corresponding to the login service agreement, and upload the maintained user data to the data management module in the blockchain system for storage. When the blockchain system obtains the login service agreement ID sent by the user terminal, the login smart contract corresponding to the target service agreement ID is determined, and the user data corresponding to the target service agreement is obtained through the login smart contract, that is, the target static data of the user is obtained. In this embodiment, the data maintenance is performed in the blockchain system when the user terminal logs in the application software, so that the blockchain system quickly obtains the target static data that has been maintained in the smart contract corresponding to the identification information according to the identification information obtained by the user terminal, and the efficiency of obtaining the user data by the blockchain system is improved.

[0068] Exemplarily, if the data maintenance of the login service agreement is not performed before the user terminal sends a login service request, and the blockchain system determines the login smart contract corresponding to the login service agreement ID when obtaining the login service agreement ID sent by the user terminal, and provides a data maintenance page to the user based on the login smart contract, so that the user performs data maintenance on the data maintenance page. After the blockchain system obtains the data maintained by the user, the data is stored.

[0069] Exemplarily, if the data maintenance of the login service agreement has been completed before the user terminal obtains the identification information corresponding to the login service agreement, and the previously maintained data needs to be updated and modified, the user terminal sends a maintenance request corresponding to the identification information to the blockchain system, so that the blockchain system feeds back a data maintenance page to the user terminal after receiving the maintenance request, so that the user modifies the previously maintained data through the user terminal. In this embodiment, the real-time modification of the user data by the user terminal and the real-time update of the user data on the blockchain system are realized, the effectiveness of the user data is enhanced, and the user experience is improved.

[0070] Optionally, the blockchain system is configured to determine whether the target service protocol text contains a dynamic signature after sending the target static data to the application server, and generate a calculation instruction and send the calculation instruction to the calculation server when it is determined that the target service protocol text contains a dynamic signature. The calculation server is configured to obtain the dynamic signature from the blockchain system according to the calculation instruction, and send the dynamic signature to the data server. The data server is configured to determine the user terminal dynamic public key corresponding to the dynamic signature, and decrypt the dynamic signature by using the user terminal dynamic public key to obtain a dynamic protocol text, send the target dynamic data corresponding to the dynamic protocol text to the calculation server, and perform privacy calculation on the target dynamic data received by the calculation server to obtain target privacy dynamic data, and send the target privacy dynamic data to the blockchain system, so that the blockchain system sends the target privacy dynamic data to the application server. The target static data includes, but is not limited to, user personal identity data (such as user email and user address), and the target dynamic data is data that needs to be obtained from a device other than the user terminal, including but not limited to user transaction data (such as income proof and flow proof).

[0071] In a possible embodiment, when the dynamic data of the user is stored in the data server, the user sends the user terminal dynamic public key to the data server.

[0072] In a possible embodiment, the blockchain system determines whether the target service protocol text contains a dynamic signature, and generates a calculation instruction and sends the calculation instruction to the calculation server when it is determined that the target service protocol text contains a dynamic signature. The calculation server extracts the dynamic signature corresponding to the calculation instruction from the blockchain system when receiving the calculation instruction, and sends the dynamic signature to the data server (such as a bank system) after obtaining the dynamic signature. The data server obtains the target dynamic data of the user according to the user terminal dynamic public key, and sends the target dynamic data to the calculation server.

[0073] For example, when the bank system obtains the dynamic signature, the dynamic signature is decrypted by using the obtained user terminal dynamic public key, a dynamic protocol text is obtained after decryption, the target dynamic data (such as transaction data) corresponding to the user terminal is determined from the database in the bank system by using the dynamic protocol text, and the target dynamic data is fed back to the calculation server. The calculation server obtains the target dynamic data, performs privacy calculation on the target dynamic data to obtain target privacy dynamic data, and sends the target privacy dynamic data to the blockchain system, so that the target privacy dynamic data is sent to the application server when the authorization signature verification passes in the blockchain system.

[0074] For example, the calculation server receives the target dynamic data, performs aggregation processing on the target dynamic data, performs security calculation on the data after the aggregation processing in a secure execution environment, and feeds back a logical result of "yes" or "no" to the blockchain system.

[0075] In a possible embodiment, when the verification of the authorization signature currently sent by the application service end is passed, the blockchain system does not need to repeatedly verify the authorization signature when the application service end obtains the target static data within a preset number of times; and within a preset time period after the data server verifies the dynamic signature currently sent, the blockchain system does not need to repeatedly verify the dynamic signature through the data server when the application service end obtains the target private dynamic data. In this embodiment, when it is determined that the target service agreement original text contains a dynamic signature, the target dynamic data is obtained by the computing service end from the data mechanism, and is sent to the blockchain system after privacy calculation, thereby avoiding sending the original data of the user to the application service end directly, and enhancing data security.

[0076] The data processing system provided by the embodiment of the application manages each service agreement through the blockchain system, enhances the legality of the service agreement published by the application service end, verifies the authorization signature of the application service end through the blockchain system, and sends data after verification, thereby enhancing the security of user data, and when dynamic data needs to be obtained, the corresponding dynamic data is obtained by the computing service end from the data server, and the calculation result is sent to the blockchain system after privacy calculation, thereby avoiding obtaining the original information of the user data at will, and enhancing the protection of user data.

[0077] Optionally, the application service end is further configured to generate an application service end private key and an application service end public key before obtaining the target service request, upload the application service end public key to the blockchain system, and encrypt each service agreement through the application service end private key and upload the encrypted service agreement to the blockchain system. The blockchain system is further configured to obtain the application service end public key, and decrypt each encrypted service agreement through the application service end public key; if each decrypted service agreement is obtained, it is determined that the application service end has a legal identity.

[0078] Optionally, as shown in Figure 2 The data processing system further includes a supervision server.

[0079] Optionally, the supervision server generates a supervision server private key and a supervision server public key, generates an audit supervision instruction, encrypts the audit supervision instruction through the supervision server private key, obtains the encrypted audit supervision instruction, and uploads the encrypted audit supervision instruction to the contract management module of the blockchain system, and further uploads the supervision server public key to the contract management module of the blockchain system, so that the contract management module of the blockchain system decrypts the obtained encrypted audit supervision instruction through the supervision server public key, obtains the decrypted audit supervision information, and determines that the supervision server has a legal identity.

[0080] Exemplarily, the application service end, the computing service end and the data server respectively generate corresponding public keys according to the cryptographic characteristics, and register each public key address on the contract management module of the blockchain system, and determine that the registered device has a legal identity, wherein the method for determining that the application service end, the computing service end and the data server have a legal identity is similar to the implementation principle and technical effect of determining that the application service end and the regulatory server have a legal identity in the above embodiment, and this embodiment will not be described here. In this embodiment, the legal identity of the application service end and the regulatory agency is verified, so that the regulatory agency verifies the service agreement of the application service end with a legal identity in the blockchain system, enhances the supervision of each service agreement published by the application service end, and avoids the application service end from randomly obtaining unnecessary data related to the target service request.

[0081] Optionally, the regulatory server is configured to verify each service agreement of the application service end after determining that the application service end has a legal identity; when any service agreement verification fails, the service agreement is rejected, otherwise, a smart contract corresponding to the service agreement is determined, and identification information of the service agreement is added to the smart contract, so as to determine a target smart contract corresponding to a target service agreement through the identification information, wherein the regulatory server has a legal identity in the blockchain system.

[0082] Exemplarily, when the application service end needs to publish a service agreement, the regulatory server needs to audit the published service agreement, and permit the publication of the corresponding service agreement after the audit is passed. If the regulatory server determines that the corresponding service agreement has the phenomenon of excessive acquisition of user data after the audit, the corresponding service agreement is suspended, or the application service end is instructed to upgrade the service agreement. This embodiment avoids the application service end from excessively acquiring user data by publishing unverified service agreements, thereby causing user privacy leakage, and each service agreement and smart contract is published on the blockchain system, so that each service agreement and smart contract has traceability, supervisability and auditability, and is disclosed to all parties with a legal identity. It can realize the tracking management of user data, and effectively enhance the security of user data.

[0083] Figure 3 The flowchart of the data processing method provided in the present application is shown in Figure 3 The data processing method is described in detail based on the Figure 2 embodiment, and the method comprises the following steps:

[0084] S301, the application service end acquires a target service request.

[0085] More specifically, the application service end acquires a target service request, which is issued by a user through a user terminal operating an application software corresponding to the application service end.

[0086] S302, the application server sends the target service protocol to the user terminal.

[0087] More specifically, after the application server receives the target service request, the target service protocol is determined according to the target service request and sent to the user terminal.

[0088] Optionally, after the user terminal receives the target service protocol, when it is determined that there is content related to the user dynamic data in the target service protocol, the user terminal generates a user terminal dynamic public key and a user terminal dynamic private key, encrypts the content related to the user dynamic data using the user terminal dynamic private key, and sends the user terminal dynamic public key to the data server.

[0089] Optionally, the user terminal generates a user terminal authorization public key and a user terminal authorization private key, encrypts the content related to the user data in the target service protocol using the user terminal authorization private key to obtain an authorization signature, sends the authorization signature to the application server, and sends the user terminal authorization public key to the blockchain system.

[0090] S303, the application server obtains the authorization signature of the user terminal.

[0091] More specifically, the application server obtains the authorization signature and determines the identification information corresponding to the target service protocol indicated by the authorization signature.

[0092] S304, the application server feeds back the identification information to the user terminal.

[0093] S305, the user terminal sends the identification information to the blockchain system.

[0094] More specifically, after the user terminal receives the identification information fed back by the application server, the identification information is sent to the blockchain system to provide the target service request of the user terminal to the blockchain system,

[0095] S306, the blockchain system obtains the target static data according to the identification information.

[0096] More specifically, the blockchain system determines the target service protocol associated with the identification information according to the identification information, and the target smart contract corresponding to the target service protocol, wherein the target smart contract includes the static data of the user maintained by the user terminal to the blockchain system before initiating the target service request.

[0097] For example, before initiating the target request, the user terminal completes the identity registration of the user terminal on the blockchain system. The identity registration method of the present application is similar to the implementation principle and technical effect of the prior art, and will not be repeated here.

[0098] S307, the blockchain system receives the authorization signature sent by the application service end.

[0099] More specifically, before the application service end provides the target service to the user terminal, the application service end sends the authorization signature fed back by the user terminal to the blockchain system.

[0100] S308, the blockchain system determines the target service protocol original text based on the authorization signature, and compares it with the target static data.

[0101] More specifically, the blockchain system receives the user terminal authorization public key sent by the user terminal, and after receiving the authorization signature, decrypts the authorization signature through the user terminal authorization public key to obtain the target service protocol original text, and compares the target service protocol original text with the target static data.

[0102] S309, the blockchain system determines that the comparison is consistent, and sends the target static data to the application service end.

[0103] More specifically, the blockchain system sends the target static data to the application service end when it is determined that the comparison is consistent, and refuses to send the target static data to the application service end when it is determined that the comparison is inconsistent.

[0104] S310, the blockchain system determines whether there is a dynamic signature in the target service protocol original text, and sends a calculation instruction to the calculation service end when it is determined that there is.

[0105] More specifically, the blockchain system determines whether there is a dynamic signature in the target service protocol original text, and generates a calculation instruction when it is determined that there is a dynamic signature, and sends the calculation instruction to the calculation service end.

[0106] S311, the calculation service end obtains the dynamic signature according to the calculation instruction, and sends the dynamic signature to the data server.

[0107] More specifically, after the calculation service end obtains the calculation instruction, it obtains the dynamic signature corresponding to the calculation instruction from the blockchain system, and sends the dynamic signature to the data server.

[0108] S312, the data server obtains the target dynamic data according to the dynamic signature, and sends it to the calculation service end.

[0109] More specifically, after the data server obtains the dynamic signature, it determines the user terminal dynamic public key corresponding to the user terminal corresponding to the dynamic signature according to the dynamic signature. The dynamic signature is decrypted through the user terminal dynamic public key to obtain the target dynamic data, and the target dynamic data is sent to the calculation service end.

[0110] S313, the computing server obtains target dynamic data and performs privacy calculation to obtain target privacy dynamic data.

[0111] More specifically, the computing server obtains target dynamic data and performs calculation on the target dynamic data to obtain target privacy dynamic data.

[0112] S314, the blockchain system obtains the target privacy dynamic data and feeds back to the application server.

[0113] More specifically, the blockchain system obtains the target privacy dynamic data and sends the target privacy dynamic data to the application server after the authorization signature sent by the application server is verified.

[0114] The data processing method provided by the embodiment of the application performs identity legal verification on multiple parties of data interaction through the blockchain system, enhances the security of user data, and feeds back the result of privacy calculation to the application server after the privacy calculation, thereby reducing the data security risks increased by directly providing user data to the application server in the prior art.

[0115] Figure 4 The structure diagram of the first data processing device provided by the application is shown in FIG. 1, and the first data processing device 40 applied to the application server provided by the embodiment of the application comprises: Figure 4

[0116] The first obtaining module 401 is configured to obtain an authorization signature corresponding to a target service agreement.

[0117] The first processing module 402 is configured to send the authorization signature to the blockchain system, so that the blockchain system obtains a target protocol original text and target static data and performs comparison when receiving the authorization signature, and sends the target static data to the application server when the comparison is consistent. The target protocol original text is obtained by decrypting the authorization signature by the blockchain system, and the target static data is obtained by the blockchain system after obtaining the identification information corresponding to the target service agreement, and is obtained by determining the target smart contract corresponding to the identification information.

[0118] The data processing device applied to the application server provided by the embodiment of the application can execute the method provided by the method embodiment, and the implementation principle and technical effects are similar, which will not be described here.

[0119] Figure 5 The structure diagram of the second data processing device provided by the application is shown in FIG. 2, and the second data processing device 50 applied to the blockchain system provided by the embodiment of the application comprises: Figure 5

[0120] ​​The second obtaining module 501 is configured to obtain identification information corresponding to the target service agreement, determine a target smart contract corresponding to the identification information, and obtain target static data.

[0121] The second processing module 502 is configured to obtain an authorization signature sent by the application service end, decrypt the authorization signature to obtain a target service agreement original text, and compare the target service agreement original text with the target static data. When the comparison is consistent, the target static data is sent to the application service end. The authorization signature is sent by the application service end to the blockchain system after the application service end obtains the authorization signature corresponding to the target service agreement.

[0122] The data processing apparatus applied to the blockchain system provided in this embodiment can execute the method provided in the method embodiments, and has similar implementation principles and technical effects. Details are not described herein again.

[0123] Optionally, the data processing apparatus applied to the computing service end provided in this embodiment comprises:

[0124] The dynamic signature is obtained from the blockchain system according to the computing instruction, and the dynamic signature is sent to the data server. The computing instruction is generated by the blockchain system when it is determined that the target service agreement original text contains the dynamic signature. The target service agreement original text is obtained by decrypting the authorization signature by the blockchain system when the authorization signature is received.

[0125] The target dynamic data corresponding to the dynamic agreement original text is obtained, the target dynamic data is subjected to privacy calculation to obtain target privacy dynamic data, and the target privacy dynamic data is sent to the blockchain system, so that the target privacy dynamic data is sent to the application service end through the blockchain system. The dynamic agreement original text is obtained by decrypting the dynamic signature by the data server using the user terminal dynamic public key after determining the user terminal dynamic public key corresponding to the dynamic signature.

[0126] The data processing apparatus applied to the computing service end provided in this embodiment can execute the method provided in the method embodiments, and has similar implementation principles and technical effects. Details are not described herein again.

[0127] Optionally, the data processing apparatus applied to the monitoring server provided in this embodiment comprises:

[0128] The fourth obtaining module is configured to obtain each service agreement of an application service end with a legal identity, and perform verification on each service agreement respectively; when verification of any one service agreement fails, the service agreement is rejected, otherwise, a smart contract corresponding to the service agreement is determined, and identification information of the service agreement is added to the smart contract, so as to determine a target smart contract corresponding to a target service agreement through the identification information, wherein the supervision server has a legal identity in the blockchain system; the legal identity of the application service end is determined by the blockchain system after obtaining a public key of the application service end and decrypting each encrypted service agreement through the public key of the application service end; each encrypted service agreement is obtained by the application service end through encryption by using a private key of the application service end; the private key of the application service end and the public key of the application service end are generated by the application service end.

[0129] The data processing apparatus applied to the supervision server provided in the embodiment can execute the method provided in the method embodiment, and has similar implementation principles and technical effects. Details are not described herein.

[0130] Optionally, the data processing apparatus applied to the data server provided in the embodiment includes:

[0131] The fifth obtaining module is configured to obtain a dynamic signature sent by the computing service end, and determine a user terminal dynamic public key corresponding to the dynamic signature.

[0132] The fifth processing module is configured to decrypt the dynamic signature through the user terminal dynamic public key to obtain a dynamic protocol original text, send target dynamic data corresponding to the dynamic protocol original text to the computing service end, so that the computing service end performs privacy calculation on the target dynamic data to obtain target privacy dynamic data, and sends the target privacy dynamic data to the blockchain system, so that the blockchain system sends the target privacy dynamic data to the application service end; wherein the dynamic signature is obtained by the computing service end according to a computing instruction from the blockchain system, the computing instruction is generated by the blockchain system when it is determined that the target service protocol original text contains the dynamic signature, and the target service protocol original text is obtained by the blockchain system after decrypting the authorization signature when receiving the authorization signature.

[0133] The data processing apparatus applied to the data server provided in the embodiment can execute the method provided in the method embodiment, and has similar implementation principles and technical effects. Details are not described herein.

[0134] Figure 6 The structure schematic diagram of the electronic device provided in the present application is shown in FIG. 6. As shown in FIG. 6, the electronic device 60 provided in the embodiment includes at least one processor 601 and a memory 602. Optionally, the device 60 further includes a communication component 603. The processor 601, the memory 602 and the communication component 603 are connected through a bus 604. Figure 6 The structure schematic diagram of the electronic device provided in the present application is shown in FIG. 6. As shown in FIG. 6, the electronic device 60 provided in the embodiment includes at least one processor 601 and a memory 602. Optionally, the device 60 further includes a communication component 603. The processor 601, the memory 602 and the communication component 603 are connected through a bus 604.

[0135] In the implementation process, the at least one processor 601 executes the computer execution instructions stored in the memory 602, so that the at least one processor 601 executes the above-mentioned method.

[0136] The specific implementation process of the processor 601 can refer to the method embodiments described above, which have similar implementation principles and technical effects, and will not be described here in detail.

[0137] In the above embodiments, it should be understood that the processor can be a central processing unit (English: Central Processing Unit, CPU for short), and can also be other general-purpose processors, digital signal processors (English: Digital Signal Processor, DSP for short), application specific integrated circuits (English: Application Specific Integrated Circuit, ASIC for short) and the like. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in combination with the application can be directly embodied as hardware processor execution completion, or executed by hardware and software modules in the processor.

[0138] The memory can include a random access memory (RAM), and can also include a non-volatile memory (NVM), such as at least one disk memory.

[0139] The bus can be an industry standard architecture (ISA) bus, a peripheral component (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For the convenience of representation, the bus in the drawings of the present application does not limit only one bus or one type of bus.

[0140] The present application also provides a computer program product, comprising a computer program, which is executed by a processor to implement the above-mentioned method.

[0141] The present application also provides a computer readable storage medium, which stores computer execution instructions, and when the processor executes the computer execution instructions, the above-mentioned method is implemented.

[0142] The above-mentioned readable storage medium can be realized by any type of volatile or nonvolatile storage devices or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk or optical disk. The readable storage medium can be any available medium that can be accessed by a general or special purpose computer.

[0143] An exemplary readable storage medium is coupled to the processor, so that the processor can read information from the readable storage medium and write information to the readable storage medium. Of course, the readable storage medium can also be an integral part of the processor. The processor and the readable storage medium can be located in an application specific integrated circuit (ASIC). Of course, the processor and the readable storage medium can also exist as discrete components in the device.

[0144] The division of units is only a logical functional division, and in actual implementation, there can be another division manner, for example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the units shown or discussed can be indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0145] The units described as separate components can or can not be physically separated, and the components shown as units can or can not be physical units, that is, they can be located in one place, or can be distributed on multiple network units. According to actual needs, part or all of the units can be selected to achieve the purpose of the embodiment.

[0146] In addition, the functional units in each embodiment of the present application can be integrated in one processing unit, or each unit can be physically present separately, or two or more units can be integrated in one unit.

[0147] If the functions are implemented in the form of software function units and sold or used as independent products, they can be stored in a computer readable storage medium. Based on this understanding, the technical solutions of the present application essentially or the parts that contribute to the prior art or parts of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a number of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the embodiments of the method of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM, Read-Only Memory), a random access memory (RAM, Random Access Memory), a magnetic disk or an optical disk, and various media that can store program codes.

[0148] It can be understood by those skilled in the art that all or part of the steps of the above-mentioned method embodiments can be completed by program instruction related hardware. The aforementioned program can be stored in a computer readable storage medium. The program executes the steps of the above-mentioned method embodiments when executed; and the aforementioned storage medium includes: ROM, RAM, magnetic disk or optical disk, and various media that can store program codes.

[0149] Other embodiments of the present application will be apparent to those skilled in the art from consideration of the specification and practice of the application disclosed herein. The application is intended to cover any variations, uses or adaptations of the application following, in general, the principles of the application and including such departures from the present disclosure as come within known or customary practice in the art to which the application pertains or can relate. The specification and examples are to be regarded as illustrative only, and the true scope and spirit of the application are indicated by the following claims.

[0150] It should be understood that the present application is not limited to the precise construction that has been described and illustrated herein and that various modifications and changes can be made therein without departing from the scope thereof. The scope of the application is indicated by the appended claims.

Claims

1. A data processing system, characterized by include: The application server is used to obtain the authorization signature corresponding to the target service protocol and send the authorization signature to the blockchain system; A blockchain system is used to decrypt the authorized signature upon receiving it to obtain the original text of the target service agreement; The blockchain system is further configured to obtain the identification information corresponding to the target service protocol, and determine the corresponding target smart contract based on the identification information to obtain target static data, wherein the identification information corresponding to the target service protocol is determined by the application server; the original text of the target service protocol is compared with the target static data, and when the comparison is confirmed to be consistent, the target static data is sent to the application server; The system also includes a computing server and a data server; The blockchain system is also used to determine whether a dynamic signature exists in the original text of the target service protocol after the target static data is sent to the application server; and when the dynamic signature is determined to exist, to generate a calculation instruction and send it to the computing server. The computing server is used to obtain the dynamic signature from the blockchain system according to the computing instructions, and send the dynamic signature to the data server; The data server is used to determine the dynamic public key of the user terminal corresponding to the dynamic signature, and decrypt the dynamic signature using the dynamic public key of the user terminal to obtain the dynamic protocol original text, and send the target dynamic data corresponding to the dynamic protocol original text to the computing server. The computing server is also used to perform privacy calculations on the received target dynamic data to obtain target privacy dynamic data, and send it to the blockchain system so that the target privacy dynamic data can be sent to the application server through the blockchain system.

2. The system according to claim 1, characterized in that, The application server is also used for: The system obtains a target service request sent by a user terminal, determines a target service protocol based on the target service request, and sends it to the user terminal so that the user terminal issues an authorization signature to the application server according to the target service protocol. Upon obtaining the authorization signature corresponding to the target service protocol, the system sends the identification information corresponding to the target service protocol authorized by the authorization signature to the user terminal, so that the user terminal sends the identification information to the blockchain system.

3. The system according to any one of claims 1-2, characterized in that, The application server is also used to generate an application server private key and an application server public key before obtaining a target service request, and upload the application server public key to the blockchain system; and to encrypt each service protocol using the application server private key and upload it to the blockchain system. The blockchain system is also used to obtain the application server's public key and decrypt the encrypted service protocols using the application server's public key; if the decrypted service protocols are obtained, it is determined that the application server has a legitimate identity.

4. The system of claim 3, wherein, The system also includes: A monitoring server, upon receiving an instruction from the blockchain system indicating that the application server has a legitimate identity, verifies each service protocol of the application server. If any service protocol fails verification, the server rejects the service protocol; otherwise, it determines the smart contract corresponding to the service protocol and adds the service protocol's identification information to the smart contract to identify the target smart contract corresponding to the target service protocol. The monitoring server has a legitimate identity within the blockchain system.

5. A data processing method, characterized by, Applied to the application server, including: Obtain the authorization signature corresponding to the target service agreement; The authorized signature is sent to the blockchain system, so that when the blockchain system receives the authorized signature, it obtains the original text of the target service protocol and the target static data and compares them. If they match, the target static data is sent to the application server. The original text of the target service protocol is obtained by the blockchain system decrypting the authorized signature, and the target static data is obtained by the blockchain system after obtaining the identification information corresponding to the target service protocol and determining the target smart contract corresponding to the identification information. The system receives target privacy dynamic data sent by the blockchain system. The target privacy dynamic data is obtained by the blockchain system sending a calculation instruction to the computing server when it determines that there is a dynamic signature in the original text of the target service protocol. The computing server then obtains the dynamic signature according to the calculation instruction and sends the dynamic signature to the data server. The data server then obtains the target dynamic data according to the dynamic signature and sends it to the computing server. The computing server then obtains the target dynamic data and performs privacy calculations.

6. A data processing method, characterized by, Applied to blockchain systems, including: Obtain the identification information corresponding to the target service agreement, determine the target smart contract corresponding to the identification information, and obtain the target static data; The system obtains the authorization signature sent by the application server, decrypts the authorization signature to obtain the target service protocol plaintext, and compares the target service protocol plaintext with the target static data. If the comparison is consistent, the target static data is sent to the application server. The authorization signature is sent by the application server to the blockchain system after obtaining the authorization signature corresponding to the target service protocol. The system determines whether a dynamic signature exists in the original text of the target service agreement. If it does, it sends a calculation instruction to the computing server, enabling the computing server to obtain the dynamic signature based on the calculation instruction. The computing server then sends the dynamic signature to the data server, enabling the data server to obtain the target dynamic data based on the dynamic signature and send it to the computing server. The computing server then obtains the target dynamic data and performs privacy calculations to obtain the target privacy dynamic data. The calculation instruction is generated by the blockchain system when it determines that a dynamic signature exists in the original text of the target service agreement. Obtain target privacy dynamic data and report it back to the application server.

7. An electronic device, comprising: include: Memory, processor; The memory stores computer-executed instructions; The processor executes computer execution instructions stored in the memory, causing the processor to perform the method as described in claim 5 or 6.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method as described in claim 5 or 6.

9. A computer program product, characterized in that, Includes a computer program that, when executed by a processor, implements the method of claim 5 or 6.

Images