Data processing method, device and equipment based on block chain and readable storage medium

Abstract

The invention discloses a data processing method, device and equipment based on a block chain and a readable storage medium, and the method comprises the steps: receiving a digital asset transfer transaction, and calling a digital asset contract according to the digital asset transfer transaction; the digital asset contract is deployed on the block chain through an asset contract deployment transaction initiated by a digital asset issuer; in the digital asset contract, performing asset security verification processing on the digital asset transfer transaction through a digital asset management interface of the digital asset management contract to obtain an asset security verification result; the digital asset management contract is deployed on the block chain through a management contract deployment transaction initiated by a digital asset management party; and if the asset security verification result is an asset security verification passing result, executing a digital asset transfer transaction according to the digital asset contract to obtain a digital asset transfer result. According to the invention, the development cost of the digital asset contract can be reduced, and the security of digital asset management on the block chain is improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a blockchain-based data processing method, device, equipment, and readable storage medium. Background Art

[0002] With the rapid development of network technology and the government and enterprises' emphasis on data security, blockchain has received great attention and application. Therefore, decentralized applications on blockchain are gradually increasing, and the transfer of digital assets involved is becoming more frequent. Among them, digital assets can be used to represent the ownership of off-chain assets on the chain.

[0003] At present, digital asset managers often send asset security restriction requirements to digital asset issuers to control the risk of asset flows on the blockchain, such as daily asset transfer restrictions, single transaction transfer restrictions, etc. Digital asset issuers need to develop digital asset contracts for implementing digital asset-related business logic based on asset security restriction requirements. Therefore, the verification code used to implement asset security restriction requirements in existing digital asset contracts is seriously coupled with the business code that implements business logic. The verification codes in different digital asset contracts cannot be reused, which increases the development cost of digital asset contracts. It is also difficult for digital asset managers to ensure that digital asset contracts developed by digital asset issuers strictly comply with asset security restriction requirements, resulting in low security of digital asset management on the blockchain. Summary of the invention

[0004] The embodiments of the present application provide a data processing method, apparatus, device, and readable storage medium, which can reduce the development cost of digital asset contracts and improve the security of digital asset management on the blockchain.

[0005] On the one hand, an embodiment of the present application provides a data processing method based on blockchain, including:

[0006] Receive digital asset transfer transactions and call digital asset contracts based on digital asset transfer transactions; digital asset contracts are deployed on the blockchain through asset contract deployment transactions initiated by digital asset issuers;

[0007] In the digital asset contract, the digital asset transfer transaction is processed for asset security verification through the digital asset management interface of the digital asset management contract to obtain the asset security verification result; the digital asset management contract is deployed on the blockchain through the management contract deployment transaction initiated by the digital asset manager;

[0008] If the asset security verification result is a passed result, the digital asset transfer transaction is executed according to the digital asset contract to obtain the digital asset transfer result.

[0009] On the one hand, an embodiment of the present application provides a data processing device based on blockchain, including:

[0010] The receiving module is used to receive digital asset transfer transactions and call digital asset contracts according to the digital asset transfer transactions; the digital asset contract is deployed on the blockchain through the asset contract deployment transaction initiated by the digital asset issuer;

[0011] The verification module is used to perform asset security verification on digital asset transfer transactions in digital asset contracts through the digital asset management interface of the digital asset management contract to obtain asset security verification results; the digital asset management contract is deployed on the blockchain through a management contract deployment transaction initiated by the digital asset manager;

[0012] The transfer module is used to execute the digital asset transfer transaction according to the digital asset contract if the asset security verification result is a passed result, and obtain the digital asset transfer result.

[0013] The verification module includes:

[0014] An information acquisition unit, used to acquire digital asset transfer information in a digital asset transfer transaction in a digital asset contract;

[0015] An information transmission unit, used to transmit digital asset transfer information to the digital asset management contract through the digital asset management interface of the digital asset management contract;

[0016] A verification unit is used to perform asset security verification on digital asset transfer information in a digital asset management contract to obtain an asset security verification result;

[0017] The result return unit is used to return the asset security verification result to the digital asset contract through the digital asset management interface.

[0018] The digital asset transfer information includes the target digital asset type;

[0019] Verification unit, including:

[0020] The first verification subunit is used to obtain an asset security verification rule base in the digital asset management contract; the asset security verification rule base includes one or more asset security verification rules and the digital asset type associated with each asset security verification rule;

[0021] The first verification subunit is further used to obtain an asset security verification rule associated with the target digital asset type from the asset security verification rule library as the target asset security verification rule;

[0022] The first verification subunit is also used to perform asset security verification processing on the digital asset transfer information according to the target asset security verification rule to obtain the asset security verification result.

[0023] The digital asset transfer information includes the address of the asset transfer-out object and the address of the asset transfer-in object;

[0024] Verification unit, including:

[0025] The second verification subunit is used to generate an authentication query request for the asset transfer-out object address and the asset transfer-in object address in the digital asset management contract;

[0026] The second verification subunit is further used to determine the identity authentication status corresponding to the asset transfer-out object address and the asset transfer-in object address respectively according to the authentication query request;

[0027] The second verification subunit is further used to determine that the asset security verification result is a passed asset security verification result if the identity authentication statuses corresponding to the asset transfer-out object address and the asset transfer-in object are both legal identity authentication statuses.

[0028] Among them, digital asset transfer information includes the amount of transferred assets;

[0029] Verification unit, including:

[0030] The third check sub-unit is used to obtain the maximum transfer asset threshold in the digital asset management contract;

[0031] The third verification subunit is further used to determine that the asset security verification result is a result of passing the asset security verification if the amount of transferred assets is less than or equal to the maximum transferred assets threshold;

[0032] The third verification subunit is further used to determine that the asset security verification result is a failure result if the amount of transferred assets is greater than the maximum transfer asset threshold.

[0033] The above data processing device further includes:

[0034] The signature verification module is used to receive the transaction signature data corresponding to the digital asset transfer transaction; the transaction signature data is obtained by signing the digital asset transfer transaction with the private key corresponding to the asset transfer object; the asset transfer object is the object that initiates the digital asset transfer transaction;

[0035] The signature verification module is also used to obtain the public key corresponding to the asset transfer object, verify the transaction signature data through the public key, and obtain the verification result;

[0036] The signature verification module is also used to execute the step of calling the digital asset contract according to the digital asset transfer transaction if the signature verification result is a successful signature verification result.

[0037] The above data processing device further includes:

[0038] The deployment module is used to receive the management contract deployment transaction initiated by the digital asset manager; the management contract deployment transaction includes the management contract code;

[0039] The deployment module is also used to deploy the digital asset management contract by executing the management contract code if the management contract deployment transaction consensus is passed;

[0040] The deployment module is also used to send the management contract address corresponding to the digital asset management contract to the digital asset manager if the management contract deployment transaction is successfully deployed.

[0041] The above data processing device further includes:

[0042] The permission verification module is used to obtain the management object address corresponding to the digital asset manager;

[0043] The permission verification module is also used to send permission error prompt information to the digital asset manager if it is determined that the management object address does not have the permission to manage contract deployment;

[0044] The permission verification module is also used to initiate a consensus request for the management contract deployment transaction to the consensus network if it is determined that the management object address has the management contract deployment permission, so that the consensus network can perform consensus processing on the management contract deployment transaction and obtain a consensus result;

[0045] The permission verification module is also used to determine whether the management contract deployment transaction consensus has passed if the consensus result is a consensus passing result.

[0046] The above data processing device further includes:

[0047] Configuration module, used to receive the verification rule configuration transaction initiated by the digital asset manager; the verification rule configuration transaction includes the management contract address, the digital asset management interface and the asset security verification rules corresponding to the digital asset management interface; the digital asset management interface is used to call the asset security verification rules;

[0048] The configuration module is also used to obtain the digital asset management contract according to the management contract address if the management contract update transaction consensus is passed. In the digital asset management contract, the digital asset management interface and asset security verification rules are configured; the asset security verification rules are used to instruct the digital asset transfer transaction to perform asset security verification processing.

[0049] The above data processing device further includes:

[0050] A registration module, configured to receive an object address registration transaction sent by a digital asset server; the object address registration transaction is generated by the digital asset server when receiving an object address registration request associated with a first object; the object address registration request includes object identity information corresponding to the first object;

[0051] The registration module is further used to call the digital asset contract according to the object address registration transaction, and in the digital asset contract, perform object address registration processing according to the object identity information to obtain the first object address;

[0052] The registration module is further used to send the first object address to the digital asset server, so that when the digital asset server detects abnormal behavior information of the first object address, it sends the abnormal behavior information and the first object address to the digital asset manager;

[0053] An update module, used to receive an asset restriction object update transaction initiated by the digital asset manager upon receiving the abnormal behavior information and the first object address;

[0054] The update module is also used to call the digital asset management contract according to the restricted object update transaction. In the digital asset management contract, the first object address is set as the asset restricted object address; the asset security verification result of the digital asset transfer transaction associated with the asset restricted object address is the asset security verification failure result.

[0055] The above data processing device further includes:

[0056] The prompt module is used to generate a verification failure prompt message according to the verification failure result type corresponding to the asset security verification failure result if the asset security verification result is an asset security verification failure result; the verification failure prompt message is used to indicate the retry processing method corresponding to the verification failure result type.

[0057] On the one hand, an embodiment of the present application provides a computer device, including: a processor, a memory, and a network interface;

[0058] The above-mentioned processor is connected to the above-mentioned memory and the above-mentioned network interface, wherein the above-mentioned network interface is used to provide a data communication network element, the above-mentioned memory is used to store a computer program, and the above-mentioned processor is used to call the above-mentioned computer program to execute the method in the embodiment of the present application.

[0059] On one hand, an embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. The computer program is suitable for being loaded by a processor and executing the method in the embodiment of the present application.

[0060] On the one hand, an embodiment of the present application provides a computer program product or a computer program, which includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the method in the embodiment of the present application.

[0061] In the embodiment of the present application, after receiving the digital asset transfer transaction, the digital asset contract is called according to the digital asset transfer transaction, and then in the digital asset contract, the digital asset transfer transaction is processed by the digital asset management interface of the digital asset management contract to obtain the asset security verification result. If the asset security verification result is the asset security verification pass result, the digital asset transfer transaction is executed according to the digital asset contract to obtain the digital asset transfer result. Among them, the digital asset contract is deployed on the blockchain through the asset contract deployment transaction initiated by the digital asset issuer; the digital asset management contract is deployed on the blockchain through the management contract deployment transaction initiated by the digital asset manager. Through the method provided in the embodiment of the present application, the digital asset issuer does not need to care about the implementation of asset security verification when developing the digital asset contract. It only needs to obtain the asset security verification result through the digital asset management interface of the digital asset management contract in the digital asset contract, which can reduce the development cost of the digital asset contract. In addition, the digital asset management contract is deployed by the digital asset manager, which can ensure that the asset security verification processing during the digital asset transfer strictly complies with the asset security restriction requirements, thereby improving the security of digital asset management on the blockchain. BRIEF DESCRIPTION OF THE DRAWINGS

[0062] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0063] Figure 1 This is a schematic diagram of a network architecture provided by an embodiment of the present application;

[0064] Figure 2a It is a schematic diagram of a scenario for deploying a digital asset management contract provided in an embodiment of the present application;

[0065] Figure 2b It is a schematic diagram of a scenario for deploying a digital asset contract provided in an embodiment of the present application;

[0066] Figure 2cThis is a schematic diagram of a scenario of digital asset transfer provided by an embodiment of the present application;

[0067] Figure 3 It is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application;

[0068] Figure 4 It is a flowchart of a data processing method provided in an embodiment of the present application;

[0069] Figure 5 It is a flowchart of an asset security verification provided by an embodiment of the present application;

[0070] Figure 6 It is a structural schematic diagram of a blockchain-based data processing device provided in an embodiment of the present application;

[0071] Figure 7 It is a structural diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0072] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0073] See also Figure 1 , Figure 1 It is a network architecture diagram provided by an embodiment of the present application. Blockchain is a new application mode of computer technologies such as distributed data storage, point-to-point transmission, consensus mechanism and encryption algorithm. It is mainly used to organize data in chronological order and encrypt it into an account book so that it cannot be tampered with or forged. At the same time, data can be verified, stored and updated. Blockchain is essentially a decentralized database. Each node in the database stores an identical blockchain. The blockchain network can divide nodes into consensus nodes and business nodes, where the consensus node is responsible for the consensus of the entire blockchain network. The process of transaction data being written into the account book in the blockchain network can be: the client sends the transaction data to the business node, and then the transaction data is passed between the business nodes in the blockchain network in a relay manner until the consensus node receives the transaction data. The consensus node then packs the transaction data into a block and reaches a consensus with other consensus nodes. After the consensus is passed, the block carrying the transaction data is written into the account book.

[0074] Among them, it can be understood that a block is a data packet that carries transaction data (i.e., transaction business) on the blockchain network. It is a data structure marked with a timestamp and a hash value of the previous block. The block is verified by the network's consensus mechanism and the transactions in the block are determined.

[0075] Among them, it can be understood that the hash value, also known as the information characteristic value or characteristic value, is generated by converting input data of any length into a password through a hash algorithm and performing a fixed output. The original input data cannot be retrieved by decrypting the hash value. It is a one-way encryption function. In the blockchain, each block (except the initial block) contains the hash value of the previous block, which is called the parent block of the current block. The hash value is the potential core foundation and the most important aspect of blockchain technology. It retains the authenticity of the recorded and viewed data, as well as the integrity of the blockchain as a whole.

[0076] Among them, it can be understood that the blockchain system can include a smart contract, which can be understood as a code that can be understood and executed by each node (including consensus node) of the blockchain in the blockchain system, and can execute any logic and obtain results. The user can call the smart contract deployed on the blockchain by initiating a transaction service request through the client. Subsequently, the business node on the blockchain can send the transaction service request to the consensus node, and each consensus node on the blockchain can run the smart contract respectively. It should be understood that the blockchain can include one or more smart contracts, which can be distinguished by identification number (Identity document, ID) or name, and the transaction service request initiated by the client can also carry the identification number or name of the smart contract to specify the smart contract that the blockchain needs to run. If the smart contract specified by the client is a contract that needs to read data, each consensus node will access the local account to read the data, and finally each consensus node will verify whether the execution results are consistent with each other (that is, consensus is reached). If they are consistent, the execution results can be stored in their respective local accounts and returned to the client.

[0077] like Figure 1 As shown, the network architecture may include a blockchain node cluster 1000, a business server (server) cluster 100, and a terminal device (client) cluster 10. The blockchain node cluster 1000 may include at least two blockchain nodes. Figure 1As shown, the blockchain node cluster 1000 may include blockchain node 1000a, blockchain node 1000b, ..., blockchain node 1000n, the business server cluster 100 may specifically include business server 100a, business server 100b, ..., business server 100n, and the terminal device cluster 10 may specifically include terminal device 10a, terminal device 10b, ..., terminal device 10n.

[0078] like Figure 1 As shown, terminal device 10a, terminal device 10b, ..., terminal device 10n can respectively establish data connection with business server 100a, business server 100b, ..., business server 100n, so that the terminal device can exchange data with the business server through the data connection; business server 100a, business server 100b, ..., business server 100n can respectively establish data connection with blockchain node 1000a, blockchain node 1000b, ..., blockchain node 1000n, so that the business server can exchange data with the blockchain node through the data connection; blockchain node 1000a, blockchain node 1000b, ..., blockchain node 1000n are connected to each other so that data can be exchanged between blockchain nodes.

[0079] It is understandable that data or blocks can be transferred between blockchain nodes through the above data connection. The blockchain network can realize data connection between blockchain nodes based on node identification. Each blockchain node in the blockchain network has a node identification corresponding to it, and each of the above blockchain nodes can store the node identifications of other blockchain nodes that are connected to itself, so that the acquired data or generated blocks can be broadcast to other blockchain nodes according to the node identifications of other blockchain nodes. For example, a node identification list as shown in Table 1 can be maintained in blockchain node 1000a, and the node identification list stores the node names and node identifications of other nodes:

[0080] Table 1

[0081] Node Name Node ID Blockchain Node 1000a AAA.AAA.AAA.AAA Blockchain node 1000b BBB.BBB.BBB.BBB … … Blockchain node 1000n CCC.CCC.CCC.CCC

[0082] The node identifier may be an Internet Protocol (IP) address for interconnecting networks or any other information that can be used to identify a blockchain node in a blockchain network. Table 1 only uses the IP address as an example for illustration. For example, blockchain node 1000a may send information (e.g., transaction data) to blockchain node 1000b via node identifier BBB.BBB.BBB.BBB, and blockchain node 1000b may determine that the information is sent by blockchain node 1000a via node identifier AAA.AAA.AAA.AAA.

[0083] In the blockchain, before a block is put on the chain, the block must be agreed upon by the consensus nodes in the blockchain network. Only after the consensus is passed can the block be added to the blockchain. It is understandable that when the blockchain is used in some scenarios of government or commercial organizations, not all participating nodes in the blockchain (i.e., the blockchain nodes in the above blockchain node cluster 1000) have sufficient resources and necessity to become consensus nodes of the blockchain. For example, in Figure 1 In the blockchain node cluster 1000 shown, blockchain nodes 1000a, 1000b and 1000n can be used as consensus nodes in the blockchain node cluster. The consensus nodes in the blockchain node cluster 1000 participate in consensus, that is, consensus on blocks (including a batch of transactions), including generating blocks and voting on blocks; while non-consensus nodes do not participate in consensus, but will help spread block and voting messages, as well as synchronize status with each other.

[0084] It can be understood that the above-mentioned data connection does not limit the connection method, and can be directly or indirectly connected through wired communication, directly or indirectly connected through wireless communication, or through other connection methods, which are not limited in this application.

[0085] It is understandable that the data processing method based on blockchain provided in the embodiment of the present application can be executed by a computer device, which includes but is not limited to the above-mentioned blockchain node (which can be a terminal or server), a business server, and a terminal device. The above-mentioned server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms. The above-mentioned terminal device can be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, etc., but is not limited to this.

[0086] It can be understood that the embodiments of the present application can be applied to various scenarios, including but not limited to cloud technology, artificial intelligence, smart transportation, assisted driving and other scenarios.

[0087] It is understandable that in the specific implementation of this application, the transaction data and other related data involved, when the above embodiments of this application are applied to specific products or technologies, need to obtain user permission or consent, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of relevant countries and regions.

[0088] like Figure 1 As shown, each terminal device in the terminal device cluster can be installed with a business application client. When the business application client runs in each terminal device, data can be exchanged with the business background server corresponding to the business application client, so that the business background server can receive business data from each terminal device. Among them, the business background server corresponding to the business application client can be any business server in the above-mentioned business server cluster 100. Among them, the application client can be a game application, video editing application, social application, instant messaging application, live broadcast application, short video application, video application, music application, shopping application, novel application, payment application, browser, etc., which has the function of displaying text, images, audio and video data information. Among them, the business application client can be an independent client or an embedded sub-client integrated in a client (such as an instant messaging client, a social client, a video client, etc.), which is not limited here.

[0089] like Figure 1 As shown, each terminal device in the terminal device cluster can also be installed with a blockchain application client. When the blockchain application client runs in each terminal device, data can be exchanged with the digital asset server corresponding to the blockchain application client, so that the digital asset server can receive business data from each terminal device. Among them, the digital asset server corresponding to the blockchain application client can be any business server in the above-mentioned business server cluster 100. Among them, the blockchain application client can be an application client such as a management application, a browser, etc. that has the function of displaying data information such as text, images, audio, and video. Among them, the blockchain application client can be an independent client or an embedded sub-client integrated in a client (such as an instant messaging client, a social client, a video client, etc.), which is not limited here.

[0090] like Figure 1As shown, the first object can interact with the blockchain through the business application client running in the terminal device associated with it, so as to use the business functions provided by the digital asset contract in the blockchain. For example, the first object wants to apply for a smart wallet through the business application client, which can help the first object manage its digital assets in the blockchain, wherein digital assets refer to new intangible assets issued, registered, stored, held, transferred or traded based on blockchain technology, and these intangible assets exist in a specific system in a digital form as a digital identification of value or rights. Among them, all the functions provided by the smart wallet can be implemented by the corresponding digital asset contract in the blockchain, and the digital asset contract is deployed on the blockchain through the asset contract deployment transaction initiated by the digital asset issuer. Specifically, the digital asset issuer can send an asset contract deployment request for the digital asset contract to the digital asset server through the blockchain application client, and the digital asset server can respond to the asset contract deployment request, generate an asset contract deployment transaction, and then send the asset contract deployment transaction to the blockchain node. After the consensus of the asset contract deployment transaction is passed, the blockchain node can deploy the digital asset contract according to the asset contract deployment transaction. When the first object uses the smart wallet to perform a digital asset transfer operation, the terminal device will respond to the digital asset transfer operation, generate a digital asset transfer request, and then send the digital asset transfer request to the business server. The business server can generate a digital asset transfer transaction based on the digital asset transfer request, and then send the digital asset transfer transaction to the blockchain node.

[0091] It should be noted that in order to control the risk of the flow of digital assets on the blockchain, the digital asset manager will impose asset security restrictions on digital asset transfers, such as daily asset transfer limits for a single object, asset transfer limits for a single transaction, etc. Therefore, before performing the corresponding digital asset transfer according to the digital asset transfer transaction, it is necessary to first perform asset security verification on the digital asset transfer transaction, that is, to verify whether the digital asset transfer information contained in the digital asset transfer transaction meets the asset security restriction requirements. Among them, the digital asset transfer information may include the object of asset transfer-out, the object of asset transfer-in, the amount of transferred assets, etc.

[0092] Therefore, after receiving the digital asset transfer transaction, the blockchain node can call the digital asset contract according to the digital asset transfer transaction, and then in the digital asset contract, through the digital asset management interface of the digital asset management contract, perform asset security verification on the digital asset transfer transaction to obtain the asset security verification result. If the asset security verification result is a passing result, the blockchain node will execute the digital asset transfer transaction according to the digital asset contract to obtain the digital asset transfer result, and then the blockchain node will return the digital asset transfer result to the terminal device. Among them, the digital asset management contract is deployed on the blockchain through the management contract deployment transaction initiated by the digital asset manager. Specifically, the digital asset manager can send a management contract deployment request for the digital asset management contract to the digital asset server through the blockchain application client. The digital asset server can respond to the management contract deployment request, generate a management contract deployment transaction, and then send the management contract deployment transaction to the blockchain node. After the consensus of the management contract deployment transaction is passed, the blockchain node can deploy the digital asset management contract according to the management contract deployment transaction.

[0093] To understand the above process, please refer to Figure 2a-2c , among which, Figure 2a-2c The terminal device 20, the terminal device 21 and the terminal device 22 shown in the figure can all be the above Figure 1 Any terminal device in the terminal device cluster 10 shown, for example, the terminal device 20 may be the terminal device 10a, the terminal device 21 may be the terminal device 10b, and the terminal device 22 may be the terminal device 10n; Figure 2a-2c The digital asset server 23 shown in FIG. 2 can be the above Figure 1 Any business server in the business server cluster 100 shown, such as the digital asset server 23, may be the business server 100b; Figure 2a-2c The business application server 24 shown in FIG. 24 may be the above Figure 1 Any business server in the business server cluster 100 shown, such as the business application server 24, may be the business server 100a; Figure 2a-2c The blockchain network 25 shown in FIG. Figure 1 The blockchain network composed of the blockchain node cluster 1000 shown in the figure, the blockchain node 26 in the blockchain network 25 can be the above Figure 1 Any blockchain node in the blockchain node cluster 1000 shown, such as blockchain node 26, is blockchain node 1000a.

[0094] Please see first Figure 2a , Figure 2a Schematic diagram of a scenario for deploying a digital asset management contract provided by an embodiment of the present application. Figure 2aAs shown, the terminal device 20 has an association relationship with the digital asset manager, and the terminal device 20 has the above-mentioned blockchain application client 200 installed. The digital asset manager who has the right to log in to the blockchain application client 200 can apply for the deployment of a digital asset management contract for risk control of on-chain asset flows in the blockchain network through the blockchain application client 200. Figure 2a As shown, the digital asset manager can specify asset security restriction requirements based on the actual circulation of digital assets in the blockchain network 25, and then develop the management contract code based on the asset security restriction requirements. Then, the digital asset manager can perform the management contract deployment operation through the terminal device 20. After the terminal device 20 responds to the management contract deployment operation, it will generate a management contract deployment request 201. Among them, the management contract deployment request 201 can carry the management contract code. Then, the terminal device 20 will send the management contract deployment request 201 to the digital asset server 23, and the digital asset server 23 can generate a management contract deployment transaction 231 based on the management contract deployment request 201. Then, the digital asset server 23 can send the management contract deployment transaction 231 to any blockchain node in the blockchain network 25, for example, the blockchain node 26.

[0095] like Figure 2a As shown, after blockchain node 26 receives the management contract deployment transaction 231, it can first verify the management authority, that is, determine whether the digital asset manager who initiated the management contract deployment transaction 231 has the authority to control the risk of on-chain asset flows. If blockchain node 26 determines that the digital asset manager has the authority to control the risk of on-chain asset flows, it can initiate a consensus request for the management contract deployment transaction 231 to blockchain network 25. When blockchain node 26 determines that the consensus of the management contract deployment transaction 231 is passed, the digital asset management contract 261 can be deployed according to the management contract code carried in the management contract deployment transaction 231. Figure 2aAs shown, the digital asset management contract 261 may include a digital asset management interface, wherein the digital asset management interface is used to transfer the digital asset transfer information passed in by the external smart contract to the digital asset management contract 261 when it is called by an external smart contract (e.g., a digital asset contract), and then perform the corresponding asset security verification process in the digital asset management contract 261, and return the asset security verification result to the external smart contract. After the digital asset management contract 261 is successfully deployed, the blockchain node 26 may return the corresponding digital asset management interface information 262 to the digital asset server 23, and the digital asset server 23 may store the digital asset management interface information 262 and return the deployment result to the terminal device 20. It should be understood that the digital asset management interface information 262 is used by an external smart contract to call the digital asset management interface in the digital asset management contract 261.

[0096] Please see again Figure 2b , Figure 2b Schematic diagram of a scenario for deploying a digital asset contract provided by an embodiment of the present application. Figure 2a As shown, the terminal device 21 has an association with the digital asset issuer, and the terminal device 21 is installed with the above-mentioned blockchain application client 210. The digital asset issuer with the permission to log in to the blockchain application client 210 can apply for the deployment of a digital asset contract for managing digital assets in the blockchain network through the blockchain application client 210. It can be understood that different types of digital assets can correspond to different digital asset contracts, and the application of the same type of digital assets in different business scenarios can be realized through different digital asset contracts. Suppose that the digital asset issuer wants to provide a smart wallet for the object in the business application, and the smart wallet is used to help the object manage the digital assets in the blockchain network. The digital asset issuer can first deploy the digital asset contract corresponding to the smart wallet in the blockchain network, and the business functions provided by the smart wallet for digital assets on the blockchain are all implemented by the digital asset contract.

[0097] like Figure 2bAs shown, when developing a digital asset contract, the digital asset issuer needs to ensure that it meets the asset security restriction requirements specified by the digital asset manager. Therefore, the digital asset issuer can first obtain the digital asset management interface information 262, and then develop the asset contract code according to the digital asset management interface information 262, that is, before the code step for digital asset transfer, add the code for calling the digital asset management interface in the digital asset management contract 261 according to the digital asset management interface information 262, so that before each digital asset transfer, it is necessary to call the digital asset management interface to perform a security check of the digital asset transfer. After the asset contract code is developed, the digital asset issuer can perform an asset contract deployment operation through the terminal device 21, and after the terminal device 21 responds to the asset contract deployment operation, an asset contract deployment request 211 will be generated. Among them, the asset contract deployment request 211 can carry the asset contract code. Then, the terminal device 20 will send the asset contract deployment request 211 to the digital asset server 23, and the digital asset server 23 can generate an asset contract deployment transaction 232 according to the asset contract deployment request 211. The digital asset server 23 may then send the asset contract deployment transaction 232 to any blockchain node in the blockchain network 25 , for example, blockchain node 26 .

[0098] like Figure 2b As shown, after receiving the asset contract deployment transaction 232, the blockchain node 26 can initiate a consensus request for the asset contract deployment transaction 232 to the blockchain network 25. When the blockchain node 26 determines that the consensus of the asset contract deployment transaction 232 is passed, the digital asset contract 262 can be deployed according to the asset contract code carried in the asset contract deployment transaction 232. Among them, the digital asset contract 262 may include a digital asset management interface call code and a business logic code, wherein the digital asset management interface call code is used to call the digital asset management interface in the digital asset management contract 261, and the business logic code is used to implement the business functions provided by the smart wallet for digital assets on the blockchain, such as the transfer of digital assets. Then, the blockchain node 26 can send a message of successful deployment of the digital asset contract 262 to the digital asset server 23, and then the digital asset server 23 will notify the terminal device 21 that the digital asset contract 262 is successfully deployed. After that, the digital asset issuer can launch the smart wallet in the business application.

[0099] Please see again Figure 2c , Figure 2c2 is a schematic diagram of a scenario of digital asset transfer provided by an embodiment of the present application. The terminal device 22 has an association relationship with the first object, and the terminal device 22 is installed with the above-mentioned business application client 220. An ordinary object with the permission to log in to the business application client can apply for a smart wallet that belongs only to itself through the business application client. The corresponding functions of the smart wallet for digital assets on the blockchain can be implemented by the digital asset contract 262 in the blockchain network 25.

[0100] like Figure 2c As shown, the first object performs a business operation through the smart wallet in the terminal device 22. After the terminal device 22 responds to the business operation, it will generate a business request 221. Then, the terminal device 22 will send the business request 201 to the business application server 24 corresponding to the business application client 220. The business application server 24 will respond to the business request 201 and perform corresponding business processing. Assuming that the business request 201 is used to transfer the digital assets of the first object on the blockchain to the second object, the business application server 24 will generate a digital asset transfer request 241 and then send the digital asset transfer request 241 to the digital asset server 23. The digital asset server 23 can generate a digital asset transfer transaction 233 according to the digital asset transfer request 241. Then, the digital asset server 23 can send the digital asset transfer transaction 233 to any blockchain node in the blockchain network 25, for example, the blockchain node 26.

[0101] like Figure 2c As shown, after receiving the digital asset transfer transaction 233, the blockchain node 26 can call the digital asset contract 262, and then in the digital asset contract 262, according to the digital asset management interface calling code, call the digital asset management interface in the digital asset management contract 261, and then perform asset security verification processing on the digital asset transfer transaction 233 through the digital asset management interface to obtain the asset security verification result. If the asset security verification result is the asset security verification passing result, the digital asset transfer processing is performed through the business logic code in the digital asset contract 262 to obtain the digital asset transfer result. The blockchain node 26 can return the digital asset transfer result to the digital asset server 23, and the digital asset server 23 will return the digital asset transfer result to the business application server 24, and the business application server 24 will notify the terminal device 22 that the digital asset transfer is successful.

[0102] It can be seen that by adopting the method provided in the embodiment of the present application, the digital asset contract used for digital asset transfer does not need to care about the implementation details of the asset security verification processing. It only needs to complete the asset security verification processing of the digital asset transfer transaction through a fixed digital asset management interface before performing specified steps such as digital asset transfer. This reduces the cost of understanding the asset security verification processing process on the digital asset contract side, and at the same time, it consolidates the authority management of digital assets on the blockchain, that is, the implementation details of the asset security verification processing process are only known by the digital asset manager, which is conducive to the digital asset manager to better manage and risk the on-chain permissions of the digital asset issuer.

[0103] For further information, see Figure 3 , Figure 3 is a flowchart of a data processing method based on blockchain provided by an embodiment of the present application. The method may be performed by a blockchain node (for example, the above Figure 1 The method is executed by any blockchain node in the blockchain node cluster 1000 in the corresponding embodiment. The following will be described by taking the execution of the method by a blockchain node as an example, wherein the blockchain-based data processing method may at least include the following steps S101-S103:

[0104] Step S101, receiving a digital asset transfer transaction, and calling a digital asset contract according to the digital asset transfer transaction; the digital asset contract is deployed on the blockchain through an asset contract deployment transaction initiated by a digital asset issuer.

[0105] Specifically, a digital asset transfer transaction may be a transaction for realizing the transfer of digital assets of an asset transfer-out object on a blockchain. The digital asset transfer transaction may include an asset transfer-out object, an asset transfer-in object, and the amount of assets to be transferred. Among them, the asset transfer-out object is the initiator of the digital asset transfer transaction, the asset transfer-in object is the object receiving the digital asset, and the amount of assets to be transferred is the value corresponding to the digital asset to be transferred.

[0106] Specifically, the digital asset transfer transaction may include the digital asset contract name. When a blockchain node receives a digital asset transfer transaction, it may call the digital asset contract through the digital asset contract name contained therein. The digital asset contract may be a smart contract deployed in the blockchain that has the authority to call the digital asset management interface in the digital asset management contract, which is usually used to implement the transfer, query and other processing of digital assets on the blockchain.

[0107] Optionally, in a feasible embodiment, the blockchain node can receive the transaction signature data corresponding to the digital asset transfer transaction while receiving the digital asset transfer transaction. The transaction signature data is obtained by signing the digital asset transfer transaction with the private key corresponding to the asset transfer object; the asset transfer object is the object that initiates the digital asset transfer transaction. Then, the blockchain node can obtain the public key corresponding to the asset transfer object, verify the transaction signature data with the public key, and obtain the verification result; if the verification result is a successful verification result, then execute the step of calling the digital asset contract according to the digital asset transfer transaction.

[0108] Optionally, in a feasible embodiment, the digital asset transfer transaction received by the blockchain node may be sent by the digital asset server, that is, after receiving the digital asset transfer request associated with the asset transfer object, the digital asset server may construct a digital asset transfer transaction according to the digital asset transfer request, and then the digital asset server may obtain the private key of the asset transfer object from the local storage, and then sign the digital asset transfer transaction with the private key of the asset transfer object to obtain the transaction signature data, and then the digital asset server may send the digital asset transfer transaction and the transaction signature data together to the blockchain node. Among them, the digital asset transfer request may be generated after the terminal device responds to the digital asset transfer operation of the asset transfer object, or it may be generated by the business application server after receiving the business request generated by the terminal device in response to the digital asset transfer operation of the asset transfer object. It should be noted that the digital asset server needs to be authorized by the asset transfer object before storing the private key of the asset transfer object locally.

[0109] Step S102, in the digital asset contract, through the digital asset management interface of the digital asset management contract, the digital asset transfer transaction is subjected to asset security verification processing to obtain an asset security verification result; the digital asset management contract is deployed on the blockchain through a management contract deployment transaction initiated by the digital asset manager.

[0110] Specifically, an interface generally refers to an abstraction that an entity provides to the outside world, which is used to separate external communication methods from internal operations, so that it can be modified internally without affecting the way other external entities interact with it. The digital asset management interface can be a specification for describing the methods and events of the digital asset management contract. When the asset contract code contained in the digital asset contract contains a digital asset management interface call code for the digital asset management interface, when the digital asset contract is run on the blockchain node, a series of methods and events in the digital asset management contract can be used in the digital asset contract, thereby realizing asset security verification processing for digital asset transfer transactions and obtaining asset security verification results.

[0111] Specifically, in order to reduce the risk of digital asset flows on the blockchain, digital asset managers usually put forward a series of asset security restriction requirements, such as daily asset transfer limits for a single object, asset transfer limits for a single transaction, etc. The purpose of asset security verification is to ensure that digital asset transfer transactions meet the asset security restriction requirements put forward by digital asset managers. For example, if the limit on the number of assets transferred in a single transaction is 20,000, and the number of transferred assets in digital asset transfer transaction A is 30,000, then the asset security verification result corresponding to digital asset transfer transaction A will be an asset security verification failure result, and digital asset transfer transaction A will not be executed.

[0112] It can be understood that the asset security verification process is determined by the digital asset management contract, which is managed by the digital asset manager, ensuring that the asset security verification process strictly complies with the asset security restriction requirements put forward by the digital asset manager. In addition, the digital asset manager can update the digital asset management contract based on the actual situation of the digital asset flow on the blockchain and the transaction of blockchain objects, thereby updating the asset security verification process for digital asset transfer transactions.

[0113] Optionally, a feasible implementation process for blockchain nodes to deploy digital asset management contracts can be: receiving a management contract deployment transaction initiated by a digital asset manager, the management contract deployment transaction containing a management contract code; if the management contract deployment transaction consensus is passed, the digital asset management contract is deployed by executing the management contract code; if the management contract deployment transaction is successfully deployed, the management contract address corresponding to the digital asset management contract is sent to the digital asset manager. Among them, the management contract deployment transaction initiated by the digital asset manager refers to the transaction generated after the digital asset server receives the management contract deployment request initiated by the digital asset manager and signs it with the private key associated with the digital asset manager.

[0114] Optionally, obtain the management object address corresponding to the digital asset manager; if it is determined that the management object address does not have the management contract deployment authority, send a permission error prompt message to the digital asset manager; if it is determined that the management object address has the management contract deployment authority, initiate a consensus request for the management contract deployment transaction to the consensus network, so that the consensus network can process the management contract deployment transaction by consensus and obtain a consensus result; if the consensus result is a consensus passing result, it is determined that the management contract deployment transaction consensus has passed. Among them, the management object address refers to the unique address generated in the blockchain network based on the public and private key pair bound to the digital asset manager, and is also the unique address used to identify the digital asset manager on the blockchain. It can be understood that not all objects have the management contract deployment authority. All permission object addresses with management contract deployment authority can be written into the blockchain ledger first, and then the management object address can be verified to be the permission object address.

[0115] Optionally, a feasible implementation process for updating the management contract deployment transaction can be: receiving the verification rule configuration transaction initiated by the digital asset manager; the verification rule configuration transaction includes the management contract address, the digital asset management interface, and the asset security verification rules corresponding to the digital asset management interface; the digital asset management interface is used to call the asset security verification rules; if the management contract update transaction consensus is passed, the digital asset management contract is obtained according to the management contract address, and the digital asset management interface and the asset security verification rules are configured in the digital asset management contract. Among them, the asset security verification rule is used to indicate that the digital asset transfer transaction is to be processed for asset security verification; for example, the asset security verification rule is that the cumulative number of assets transferred per day by a single object does not exceed 50,000. When the digital asset transfer transaction is processed for asset security verification according to the asset security verification rule, the cumulative number of assets transferred by the object of the asset transfer out of the digital asset transfer transaction today will be determined, and then it will be determined whether the sum of the cumulative number of assets transferred by the object and the number of asset transfers contained in the digital asset transfer transaction exceeds 50,000. If it exceeds 50,000, the asset security verification result is determined to be the result of asset security verification failure.

[0116] Step S103: If the asset security verification result is a passed asset security verification result, the digital asset transfer transaction is executed according to the digital asset contract to obtain a digital asset transfer result.

[0117] Specifically, if the asset security verification result is a passed asset security verification result, it indicates that the digital asset transfer transaction complies with the asset security restriction requirements proposed by the digital asset manager, and the digital asset transfer transaction can be executed to transfer the digital assets of the asset transfer quantity corresponding to the asset transfer-out object included in the digital asset transfer transaction to the asset transfer-in object included in the digital asset transfer transaction.

[0118] Optionally, if the asset security verification result is an asset security verification failure result, a verification failure prompt message is generated according to the verification failure result type corresponding to the asset security verification failure result; the verification failure prompt message is used to indicate the retry processing method corresponding to the verification failure result type. For example, the verification failure prompt message can be "Today's digital asset transfer quantity has been limited, please try again tomorrow", at which time the asset transferor can know that the verification failure result type is a single object's daily asset transfer limit, and then wait until the next day to transfer digital assets.

[0119] Optionally, receiving an object address registration transaction sent by a digital asset server; the object address registration transaction is generated by the digital asset server when receiving an object address registration request associated with the first object; the object address registration request includes the object identity information corresponding to the first object; calling the digital asset contract according to the object address registration transaction, and performing object address registration processing in the digital asset contract according to the object identity information to obtain the first object address; sending the first object address to the digital asset server so that when the digital asset server detects abnormal behavior information of the first object address, it sends the abnormal behavior information and the first object address to the digital asset manager; receiving an asset restriction object update transaction initiated by the digital asset manager when receiving the abnormal behavior information and the first object address; calling the digital asset management contract according to the restricted object update transaction, and setting the first object address as the asset restriction object address in the digital asset management contract. Among them, the behavior information may include: the number of historical transfers, the cumulative amount of historical transfers, the maximum amount of a single transfer, the asset balance, etc., and the abnormal behavior information refers to the behavior information that is prone to risks. For example, if the number of historical transfers is 1000, which seriously exceeds the normal transfer threshold, it can be determined that the historical transfer is abnormal behavior information at this time.

[0120] It can be understood that the asset security verification result of the digital asset transfer transaction associated with the asset restriction object address is the asset security verification failure result, that is, when it is detected that the digital asset transfer transaction involves the asset restriction object address, it is determined that the asset security verification result corresponding to the digital asset transfer transaction is the asset security verification failure result.

[0121] Optionally, each time the first object sends a service request to the digital asset server, the digital asset server may record the service request and the service result information corresponding to the service request as the behavior information corresponding to the first object address, and the digital asset server may periodically detect the recorded behavior information through a behavior detection model to determine whether the behavior information contains abnormal behavior information. The behavior detection model may be a machine learning model trained based on a normal behavior information sample of the object, and is used to identify whether the behavior information of the object is abnormal.

[0122] Through the method provided in the embodiment of the present application, the digital asset issuer no longer needs to worry about the implementation of asset security verification when developing a digital asset contract. It only needs to obtain the asset security verification result through the digital asset management interface of the digital asset management contract in the digital asset contract, which can reduce the development cost of the digital asset contract. In addition, the digital asset management contract is deployed by the digital asset manager, which can ensure that the asset security verification processing during the transfer of digital assets strictly complies with the asset security restriction requirements, thereby improving the security of digital asset management on the blockchain.

[0123] For further information, see Figure 4 , Figure 4 is a flow chart of a data processing method provided by an embodiment of the present application. The method may be performed by a blockchain node (for example, Figure 1 The method is executed by any blockchain node in the blockchain node cluster 1000 in the corresponding embodiment. The following will be described by taking the execution of this method by a blockchain node as an example, wherein the blockchain-based data processing method may at least include the following steps S201-S204:

[0124] Step S201, receiving a digital asset transfer transaction, and calling a digital asset contract according to the digital asset transfer transaction; the digital asset contract is deployed on the blockchain through an asset contract deployment transaction initiated by a digital asset issuer.

[0125] Specifically, the implementation of step S201 can refer to the above Figure 3 The description of step S101 in the corresponding embodiment will not be repeated here.

[0126] Step S202, in the digital asset contract, obtain the digital asset transfer information in the digital asset transfer transaction, and transmit the digital asset transfer information to the digital asset management contract through the digital asset management interface of the digital asset management contract.

[0127] Specifically, the digital asset transfer information may include information related to the digital asset transfer, such as the digital asset type, the asset transfer-out object, the asset transfer-in object, and the amount of transferred assets, etc. The specific digital asset transfer information that needs to be obtained needs to be determined based on the specific implementation of the digital asset management interface and the received parameters.

[0128] Specifically, in a feasible embodiment, the implementation of the digital asset management contract can be seen in Table 2 below:

[0129] Table 2

[0130]

[0131] As can be seen from Table 2 above, the digital asset management contract provides an interface called TokenValidator, which is the digital asset management interface mentioned above. Through the digital asset management interface, the two check functions contained therein can be called. The first check function accepts two parameters: _token and _subject. _token refers to the digital asset type, and _subject refers to the object. When the _token and _subject contained in the digital asset transfer transaction are passed in through the digital asset management interface, the first check function can be used to perform asset security verification. The second check function accepts four parameters: _token, _from, _to, and _amount. _token refers to the digital asset type, from refers to the object address corresponding to the asset transfer-out object, to refers to the object address corresponding to the asset transfer-in object, and amount refers to the amount of asset transfer. When the _token, _from, _to, and _amount contained in the digital asset transfer transaction are passed in through the digital asset management interface, the second check function can be used to perform asset security verification.

[0132] It can be understood that the above Table 2 only provides the function signatures corresponding to the two check functions, and its specific implementation can be set according to the actual situation, and is not limited here. The digital asset management interface shown in the above Table 2 defines the function name, parameter type and return type that need to be provided when the external smart contract calls the digital asset management contract. The specific function implementation needs to be defined in the implementation part of the digital asset management contract.

[0133] Step S203: In the digital asset management contract, asset security verification is performed on the digital asset transfer information to obtain an asset security verification result.

[0134] Specifically, the digital asset transfer information may include the target digital asset type. In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing to obtain a feasible implementation process of the asset security verification result. The asset security verification rule base is obtained in the digital asset management contract; the asset security verification rule base includes one or more asset security verification rules and the digital asset type associated with each asset security verification rule; in the asset security verification rule base, the asset security verification rule associated with the target digital asset type is obtained as the target asset security verification rule; the digital asset transfer information is subjected to asset security verification processing according to the target asset security verification rule to obtain the asset security verification result. It can be understood that the digital assets that can flow on the blockchain correspond to a variety of digital asset types. Different asset security verification rules can be formulated for digital assets of different digital asset types. For example, the number of single transactions corresponding to digital assets of digital asset type A is limited to 1, while the number of single transactions corresponding to digital assets of digital asset type B can be limited to 100. After the digital asset manager formulates asset security verification rules for digital assets of different digital asset types, they can be stored in the asset security verification rule base of the digital asset management contract.

[0135] Specifically, the digital asset transfer information may include the address of the asset transfer-out object and the address of the asset transfer-in object. In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing to obtain a feasible implementation process of the asset security verification result. The process may be as follows: in the digital asset management contract, an authentication query request is generated for the asset transfer-out object address and the asset transfer-in object address; the identity authentication status corresponding to the asset transfer-out object address and the asset transfer-in object address is determined according to the authentication query request; if the identity authentication status corresponding to the asset transfer-out object address and the asset transfer-in object address is a legal identity authentication status, the asset security verification result is determined to be the asset security verification pass result. Among them, the legal identity authentication status indicates that the object address has completed the on-chain address KYC (Know Your Customer, customer call) verification, that is, when the object address has completed the on-chain address KYC verification, its identity authentication status can be updated to a legal identity authentication status.

[0136] Among them, on-chain address KYC verification is a process of identity verification and authentication of the object address on the blockchain. On-chain address KYC verification aims to ensure that the identity of the object address participating in the blockchain transaction is authentic and compliant, and meets the asset security restrictions proposed by the digital asset manager. A feasible on-chain address KYC verification process can include the following steps: identity verification information collection, identity verification information review, and identity verification result recording. Among them, identity verification information collection means that the object associated with the object address needs to provide information related to its identity, such as name, certificate number, address, etc., which is used to verify whether the identity of the object is compliant. Among them, identity verification information review can be conducted by a dedicated KYC verification agency or a digital asset manager. The KYC verification agency or the digital asset manager is responsible for reviewing the identity verification information submitted by the collected object to ensure that the identity of the object is authentic and credible. Among them, identity verification result recording means recording the verification results on the blockchain, so that when performing asset security verification processing, the identity authentication status of the object can be quickly queried.

[0137] Specifically, the digital asset transfer information may include the amount of transferred assets. In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing. A feasible implementation process for obtaining the asset security verification result may be: in the digital asset management contract, the maximum transfer asset threshold is obtained; if the amount of transferred assets is less than or equal to the maximum transfer asset threshold, the asset security verification result is determined to be the asset security verification pass result; if the amount of transferred assets is greater than the maximum transfer asset threshold, the asset security verification result is determined to be the asset security verification fail result. The maximum transfer asset threshold is the maximum amount of a single digital asset transfer set by the digital asset manager.

[0138] Step S204: Return the asset security verification result to the digital asset contract through the digital asset management interface. If the asset security verification result is a passed result, the digital asset transfer transaction is executed according to the digital asset contract to obtain a digital asset transfer result.

[0139] Specifically, the implementation of step S204 may refer to the description of step S103 above, which will not be described again here.

[0140] By adopting the method provided in the embodiment of the present application, the authority for asset security verification processing is centralized, and the asset security verification processing is implemented by the digital asset management contract deployed by the digital asset manager, which is conducive to the digital asset manager to better manage and risk control the transfer of digital assets on the chain.

[0141] For further understanding, please refer to Figure 5 , Figure 5: is a flowchart of an asset security verification provided by an embodiment of the present application. Figure 5 As shown, the entire process involves a management terminal device 51, an object terminal device 52, a business application 53, a blockchain applet 54, a digital asset server 55, a digital asset contract 56, and a digital asset management contract 57. The management terminal device 51 and the object terminal device 52 can be the above Figure 1 Any terminal device in the terminal device cluster 10 shown in the figure, for example, the management terminal device 51 can be the terminal device 10a, and the object terminal device 52 can be the terminal device 10b. Among them, the business application 53 can include a business application applet and a business application server (that is, the above Figure 1 Any business server in the business server cluster 100 shown, for example, business server 100a), the business application applet can be deployed in the object terminal device 52, and when the business application applet is running in the object terminal device 52, it can interact with the corresponding business application server. Among them, the blockchain applet 54 can be a small program, a native App (Application) or an H5 (Hyper Text Markup Language 5) page, and the deployment architecture can adopt C / S (Client / Server) or B / S (Browser / Server) mode. For example, the blockchain applet 54 can be deployed in the management terminal device 51, and its corresponding server can be a digital asset server 55 (that is, the above-mentioned Figure 1 Any business server in the business server cluster 100 shown, for example, business server 100b). Wherein, both the digital asset contract 56 and the digital asset management contract 57 can be smart contracts deployed in the blockchain network, that is, any blockchain node in the blockchain network (which can be the above-mentioned Figure 1 Any blockchain node in the blockchain network 1000 shown, for example, blockchain node 1000a) can be deployed with a digital asset contract 56 and a digital asset management contract 57. The data interaction between the blockchain applet 54 and the digital asset contract 56 and the digital asset management contract 57 can be achieved through the digital asset server corresponding to the blockchain applet 54 communicating with the blockchain node on which the digital asset contract 56 and the digital asset management contract 57 are deployed.

[0142] like Figure 5 As shown in the figure, the entire asset safety verification process includes the following steps:

[0143] Step S301, the management terminal device 51 logs in to the blockchain applet 54.

[0144] Specifically, the management terminal device 51 can respond to the login operation of the digital asset manager, run and log in to the blockchain applet 54.

[0145] Step S302, the blockchain applet 54 sends a management contract deployment transaction to the digital asset server 55.

[0146] Specifically, the digital asset manager can upload the management contract code corresponding to the digital asset management contract constructed in a fixed format through the blockchain applet 54. The blockchain applet 54 can generate a management contract deployment transaction based on the acquired management contract code, and use the private key corresponding to the digital asset manager to sign the management contract deployment transaction. Finally, the blockchain applet 54 can send the management contract deployment transaction to the digital asset server 55.

[0147] In step S303, the digital asset server 55 sends the management contract deployment transaction to any blockchain node in the blockchain network, so that the blockchain node performs on-chain processing of the management contract deployment transaction.

[0148] Specifically, the digital asset server 55 may send the management contract deployment transaction to the blockchain node, so that the blockchain node deploys the digital asset management contract 57 in the blockchain network according to the management contract deployment transaction. Optionally, in order to avoid the waste of resources and the confusion of digital asset flow control caused by all objects applying to deploy the digital asset management contract in the blockchain network, the blockchain applet 54 may verify the object authority of the digital asset manager before generating the management contract deployment transaction. If the digital asset manager has administrator authority, a management contract deployment transaction is generated; if the first object does not have administrator authority, the management contract deployment request is rejected.

[0149] Step S304, after the blockchain node deploys the digital asset management contract 57, it returns the management contract deployment result and the management contract address to the blockchain applet 54.

[0150] Specifically, the management contract address refers to the address corresponding to the digital asset management contract. The process of deploying the digital asset management contract 57 can be found in the above Figure 3 The optional description of step S102 in the corresponding embodiment will not be repeated here.

[0151] Step S305, the management terminal device 51 responds to the configuration operation of the digital asset manager to configure the verification rules of the digital asset management contract and calls the blockchain applet 54.

[0152] Specifically, the digital asset manager can update the verification rules of the digital asset management contract on the chain through the blockchain applet 54 at regular intervals, such as adding new blacklist and whitelist users, setting single maximum transfer amount and other rule restrictions.

[0153] Step S306, the blockchain applet 54 sends a verification rule configuration transaction to any blockchain node in the blockchain network, so that the blockchain node performs on-chain processing of the verification rule configuration transaction.

[0154] Specifically, the blockchain applet 54 can generate a verification rule configuration transaction based on the acquired management contract address, digital asset management interface, and asset security verification rules corresponding to the digital asset management interface, and use the private key corresponding to the digital asset manager to sign the verification rule configuration transaction. Finally, the blockchain applet 54 can send the verification rule configuration transaction to the blockchain node.

[0155] Step S307, after the blockchain node configures the transaction according to the verification rules and updates the digital asset management contract 57, it returns the configuration result to the blockchain applet 54.

[0156] Specifically, the implementation of step S307 can refer to the above Figure 3 The optional description of step S102 in the corresponding embodiment will not be repeated here.

[0157] Step S308: The target terminal device 52 responds to the target registration operation through the service application 53.

[0158] Specifically, the business object can perform object registration operations through the business application applet corresponding to the business application 53 installed in the object terminal device 52. The object terminal device 52 can respond to the object registration operation of the business object and forward the object registration information to the business application server corresponding to the business application 53. The business application server can determine whether the business object needs to register the object on-chain address on the blockchain based on the business type.

[0159] Step S309 , the business application 53 sends an object chain address registration request to the digital asset server 55 .

[0160] Specifically, if the business application server included in the business application 53 determines that the business object needs to register the object chain address on the blockchain, it sends an object chain address registration request to the digital asset server 55.

[0161] In step S310, the digital asset server 55 generates an object chain address registration transaction according to the object chain address registration request, and sends the object chain address registration transaction to the blockchain node.

[0162] Step S311, the blockchain node calls the digital asset contract 56 according to the object chain address registration transaction, registers the business object chain address for the business object through the digital asset contract 56, and returns the registration result to the digital asset server 55.

[0163] Specifically, the digital asset server 55 can store the business object chain address corresponding to the business object. Optionally, the digital asset server 55 can request to store the private key corresponding to the business object chain address. If the business object authorizes, the digital asset server 55 can store and use the private key corresponding to the business object chain address.

[0164] Step S312 , the digital asset server 55 returns the registration result to the business application 53 .

[0165] Step S313, the digital asset server 55 pushes object exception information to the blockchain applet 54.

[0166] Specifically, after the business object's business object on-chain address is successfully registered, the business object can perform digital asset activities in the business application. The digital asset server 55 will regularly collect the business object's digital asset activity information, and push the abnormal business object on-chain address and related abnormal behavior information to the blockchain applet 54. The blockchain applet 54 will display the abnormal business object on-chain address and related abnormal behavior information to the digital asset manager. The digital asset manager can formulate new asset security verification rules based on the abnormal business object on-chain address and related abnormal behavior information, such as adding the abnormal business object on-chain address to the blacklist. All asset security verification results corresponding to digital asset transfer transactions related to the abnormal business object on-chain address are asset security verification failure results.

[0167] Step S314 , the object terminal device 52 responds to the business operation of the business object and calls the business application 53 .

[0168] In step S315 , the business application 53 generates a digital asset transfer request and sends the digital asset transfer request to the digital asset server 55 .

[0169] In step S316, the digital asset server 55 generates a digital asset transfer transaction according to the digital asset transfer request, and signs the digital asset transfer transaction according to the key escrow type of the object.

[0170] In step S317, the digital asset server 55 sends the digital asset transfer transaction to any blockchain node in the blockchain network so that the blockchain node performs on-chain processing of the digital asset transfer transaction.

[0171] In step S318, the blockchain node calls the digital asset contract 56 according to the digital asset transfer transaction. In the digital asset contract 56, the digital asset management contract 57 is called to perform asset security verification on the digital asset transfer transaction.

[0172] Specifically, when the blockchain node executes the digital asset contract 56 according to the digital asset transfer transaction, it will call the digital asset management interface of the digital asset management contract 57 in the digital asset contract 56 to perform asset security verification. The implementation of calling the digital asset management interface can be found in the above Figure 4 The description of step S202 and step S203 in the corresponding embodiment will not be repeated here.

[0173] Step S319, the blockchain node returns the asset security verification result to the digital asset contract 56 through the digital asset management contract 57.

[0174] Specifically, after the digital asset management contract 57 is called, the digital asset transfer transaction can be subjected to asset security verification according to the internal asset security verification rules to obtain the asset security verification result.

[0175] Step S320, if the asset security verification result is a passed asset security verification result, the blockchain node executes the digital asset transfer transaction through the digital asset contract 56.

[0176] Specifically, the digital asset contract 56 needs to decide whether to perform the actual transfer action on the digital asset chain based on the asset security verification result. Only when the asset security verification result is a passed result, the digital asset transfer transaction will continue to be executed.

[0177] Step S321, the blockchain node returns the transaction execution result to the digital asset server 55 through the digital asset contract 56.

[0178] Step S322, the digital asset server 55 returns the transaction execution result to the business application 53, and the business application 53 updates the front-end digital asset display according to the transaction execution result.

[0179] Specifically, assume that before the digital assets are transferred, the number of remaining assets in the digital asset display on the front end of business object A is 1000. After the blockchain node transfers 500 digital assets of business object A to business object B, the number of remaining assets in the digital asset display on the front end of business object A will be updated to 500.

[0180] By adopting the method provided in the embodiment of the present application, the permission verification logic of the on-chain digital asset contract is centralized through a unified permission verification interface (i.e., digital asset management interface). In the process of implementing the business logic of the digital asset contract, there is no need to care about the details of the implementation of the digital asset management contract (digital asset manager). It is only necessary to verify the permissions of the object on-chain address through a fixed permission verification interface in the specified steps. This reduces the cost of understanding the permission verification on the digital asset contract side, centralizes the permission management of digital assets on the chain, and is conducive to the digital asset manager to better supervise and control the on-chain permissions of the digital asset issuer.

[0181] See also Figure 6 , Figure 6 1 is a schematic diagram of the structure of a blockchain-based data processing device provided in an embodiment of the present application. The data processing device 1 may be a computer program (including program code) running on a computer device, for example, the data processing device 1 is an application software; the data processing device 1 may be used to execute the corresponding steps in the data processing method provided in an embodiment of the present application. Figure 6 As shown, the data processing device 1 may include: a receiving module 11 , a checking module 12 and a transferring module 13 .

[0182] The receiving module 11 is used to receive a digital asset transfer transaction and call a digital asset contract according to the digital asset transfer transaction; the digital asset contract is deployed on the blockchain through an asset contract deployment transaction initiated by the digital asset issuer;

[0183] Verification module 12 is used to perform asset security verification processing on digital asset transfer transactions in digital asset contracts through the digital asset management interface of the digital asset management contract to obtain asset security verification results; the digital asset management contract is deployed on the blockchain through a management contract deployment transaction initiated by the digital asset manager;

[0184] The transfer module 13 is used to execute the digital asset transfer transaction according to the digital asset contract to obtain the digital asset transfer result if the asset security verification result is a passed result.

[0185] The specific implementation of the receiving module 11, the checking module 12 and the transferring module 13 can be found in the above Figure 3 The description of steps S101-S103 in the corresponding embodiment will not be repeated here.

[0186] The verification module 12 includes: an information acquisition unit 121 , an information transmission unit 122 , a verification unit 123 and a result returning unit 124 .

[0187] The information acquisition unit 121 is used to acquire the digital asset transfer information in the digital asset transfer transaction in the digital asset contract;

[0188] An information transmission unit 122, used to transmit digital asset transfer information to the digital asset management contract through the digital asset management interface of the digital asset management contract;

[0189] Verification unit 123, used to perform asset security verification processing on digital asset transfer information in the digital asset management contract to obtain asset security verification results;

[0190] The result returning unit 124 is used to return the asset security verification result to the digital asset contract through the digital asset management interface.

[0191] The specific implementation of the information acquisition unit 121, the information transmission unit 122, the verification unit 123 and the result return unit 124 can be referred to above. Figure 4 The description of steps S201 to S204 in the corresponding embodiment will not be repeated here.

[0192] The digital asset transfer information includes the target digital asset type;

[0193] The verification unit 123 includes: a first verification subunit 1231 .

[0194] The first verification subunit 1231 is used to obtain an asset security verification rule base in the digital asset management contract; the asset security verification rule base includes one or more asset security verification rules and the digital asset type associated with each asset security verification rule;

[0195] The first verification subunit 1231 is further used to obtain an asset security verification rule associated with the target digital asset type from the asset security verification rule library as the target asset security verification rule;

[0196] The first verification subunit 1231 is further used to perform asset security verification processing on the digital asset transfer information according to the target asset security verification rule to obtain an asset security verification result.

[0197] The specific implementation of the first check subunit 1231 can refer to the above Figure 4 The description of step S203 in the corresponding embodiment will not be repeated here.

[0198] The digital asset transfer information includes the address of the asset transfer-out object and the address of the asset transfer-in object;

[0199] The verification unit 123 includes: a second verification subunit 1232 .

[0200] The second verification subunit 1232 is used to generate an authentication query request for the asset transfer-out object address and the asset transfer-in object address in the digital asset management contract;

[0201] The second verification subunit 1232 is further used to determine the identity authentication status corresponding to the asset transfer-out object address and the asset transfer-in object address respectively according to the authentication query request;

[0202] The second verification subunit 1232 is further used to determine that the asset security verification result is a passed asset security verification result if the identity authentication statuses corresponding to the asset transfer-out object address and the asset transfer-in object respectively are both legal identity authentication statuses.

[0203] The specific implementation of the second check subunit 1232 can refer to the above Figure 4 The description of step S203 in the corresponding embodiment will not be repeated here.

[0204] Among them, digital asset transfer information includes the amount of transferred assets;

[0205] The verification unit 123 includes: a third verification subunit 1233 .

[0206] The third check subunit 1233 is used to obtain the maximum transfer asset threshold in the digital asset management contract;

[0207] The third verification subunit 1233 is further used to determine that the asset security verification result is an asset security verification pass result if the amount of transferred assets is less than or equal to the maximum transferred assets threshold;

[0208] The third verification subunit 1233 is further used to determine that the asset security verification result is a failure result if the amount of transferred assets is greater than the maximum transfer asset threshold.

[0209] The specific implementation of the third check subunit 1233 can refer to the above Figure 4 The description of step S203 in the corresponding embodiment will not be repeated here.

[0210] Wherein, the above-mentioned data processing device 1 further includes: a signature verification module 14.

[0211] The signature verification module 14 is used to receive the transaction signature data corresponding to the digital asset transfer transaction; the transaction signature data is obtained by signing the digital asset transfer transaction with the private key corresponding to the asset transfer object; the asset transfer object is the object that initiates the digital asset transfer transaction;

[0212] The signature verification module 14 is also used to obtain the public key corresponding to the asset transfer object, verify the transaction signature data through the public key, and obtain the signature verification result;

[0213] The signature verification module 14 is also used to execute the step of calling the digital asset contract according to the digital asset transfer transaction if the signature verification result is a successful signature verification result.

[0214] The specific implementation of the signature verification module 14 can be found in the above Figure 3 The optional description of step S101 in the corresponding embodiment will not be repeated here.

[0215] Wherein, the above-mentioned data processing device 1 also includes: a deployment module 15.

[0216] The deployment module 15 is used to receive a management contract deployment transaction initiated by a digital asset manager; the management contract deployment transaction includes a management contract code;

[0217] The deployment module 15 is also used to deploy the digital asset management contract by executing the management contract code if the management contract deployment transaction consensus is passed;

[0218] The deployment module 15 is also used to send the management contract address corresponding to the digital asset management contract to the digital asset manager if the management contract deployment transaction is successfully deployed.

[0219] The specific implementation of the deployment module 15 can be found in the above Figure 3 The optional description of step S102 in the corresponding embodiment will not be repeated here.

[0220] Wherein, the above-mentioned data processing device 1 further includes: an authority verification module 16.

[0221] The authority verification module 16 is used to obtain the management object address corresponding to the digital asset manager;

[0222] The authority verification module 16 is also used to send an authority error prompt message to the digital asset manager if it is determined that the management object address does not have the authority to manage contract deployment;

[0223] The authority verification module 16 is also used to initiate a consensus request for the management contract deployment transaction to the consensus network if it is determined that the management object address has the management contract deployment authority, so that the consensus network can perform consensus processing on the management contract deployment transaction and obtain a consensus result;

[0224] The authority verification module 16 is also used to determine that the management contract deployment transaction consensus has passed if the consensus result is a consensus passing result.

[0225] The specific implementation of the authority verification module 16 can be found in the above Figure 3 The optional description of step S102 in the corresponding embodiment will not be repeated here.

[0226] Wherein, the above-mentioned data processing device 1 further includes: a configuration module 17.

[0227] Configuration module 17, used to receive the verification rule configuration transaction initiated by the digital asset manager; the verification rule configuration transaction includes the management contract address, the digital asset management interface and the asset security verification rules corresponding to the digital asset management interface; the digital asset management interface is used to call the asset security verification rules;

[0228] Configuration module 17 is also used to obtain the digital asset management contract according to the management contract address if the management contract update transaction consensus is passed, and configure the digital asset management interface and asset security verification rules in the digital asset management contract; the asset security verification rules are used to instruct the asset security verification processing of the digital asset transfer transaction.

[0229] The specific implementation of the configuration module 17 can be found in the above Figure 3 The optional description of step S102 in the corresponding embodiment will not be repeated here.

[0230] The data processing device 1 further includes a registration module 18 and an update module 19 .

[0231] The registration module 18 is used to receive an object address registration transaction sent by the digital asset server; the object address registration transaction is generated by the digital asset server when receiving an object address registration request associated with the first object; the object address registration request includes object identity information corresponding to the first object;

[0232] The registration module 18 is further used to call the digital asset contract according to the object address registration transaction, and in the digital asset contract, perform object address registration processing according to the object identity information to obtain the first object address;

[0233] The registration module 18 is further used to send the first object address to the digital asset server, so that when the digital asset server detects abnormal behavior information of the first object address, it sends the abnormal behavior information and the first object address to the digital asset manager;

[0234] An updating module 19, configured to receive an asset restriction object update transaction initiated by the digital asset manager upon receiving the abnormal behavior information and the first object address;

[0235] The updating module 19 is also used to call the digital asset management contract according to the restricted object update transaction. In the digital asset management contract, the first object address is set as the asset restricted object address; the asset security verification result of the digital asset transfer transaction associated with the asset restricted object address is the asset security verification failure result.

[0236] The specific implementation of the registration module 18 and the update module 19 can be found in the above Figure 3 The optional description of step S103 in the corresponding embodiment will not be repeated here.

[0237] The data processing device 1 further includes a prompt module 110 .

[0238] The prompt module 110 is used to generate a verification failure prompt message according to the verification failure result type corresponding to the asset security verification failure result if the asset security verification result is an asset security verification failure result; the verification failure prompt message is used to indicate the retry processing method corresponding to the verification failure result type.

[0239] The specific implementation of the prompt module 110 can refer to the above Figure 3 The optional description of step S103 in the corresponding embodiment will not be repeated here.

[0240] See also Figure 7 , Figure 7 Schematic diagram of the structure of a computer device provided in an embodiment of the present application. Figure 7 As shown above Figure 6 The data processing device 1 in the corresponding embodiment can be applied to a computer device 1000, and the computer device 1000 may include: a processor 1001, a network interface 1004 and a memory 1005. In addition, the above-mentioned computer device 1000 may also include: a user interface 1003, and at least one communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between these components. Among them, the user interface 1003 may include a display screen (Display), a keyboard (Keyboard), and the user interface 1003 may optionally include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or it may be a non-volatile memory (non-volatile memory), such as at least one disk storage. The memory 1005 may optionally also be at least one storage device located away from the aforementioned processor 1001. As Figure 7 As shown, the memory 1005 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and a device control application program.

[0241] In such Figure 7In the computer device 1000 shown, the network interface 1004 can provide a network communication network element; the user interface 1003 is mainly used to provide an input interface for the user; and the processor 1001 can be used to call the device control application stored in the memory 1005 to achieve:

[0242] Receive digital asset transfer transactions and call digital asset contracts based on digital asset transfer transactions; digital asset contracts are deployed on the blockchain through asset contract deployment transactions initiated by digital asset issuers;

[0243] In the digital asset contract, the digital asset transfer transaction is processed for asset security verification through the digital asset management interface of the digital asset management contract to obtain the asset security verification result; the digital asset management contract is deployed on the blockchain through the management contract deployment transaction initiated by the digital asset manager;

[0244] If the asset security verification result is a passed result, the digital asset transfer transaction is executed according to the digital asset contract to obtain the digital asset transfer result.

[0245] It should be understood that the computer device 1000 described in the embodiment of the present application can execute the above Figure 3 , Figure 4 The description of the data processing method in any corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of adopting the same method will not be repeated here.

[0246] In addition, it should be pointed out here that: the embodiment of the present application also provides a computer-readable storage medium, and the computer-readable storage medium stores a computer program executed by the data processing device 1 mentioned above, and the computer program includes program instructions. When the processor executes the program instructions, the computer program can execute the above-mentioned data processing device 1. Figure 3 , Figure 4 The description of the above data processing method in any corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the computer-readable storage medium embodiment involved in this application, please refer to the description of the method embodiment of this application.

[0247] The computer-readable storage medium may be the data processing device provided in any of the aforementioned embodiments or the internal storage unit of the computer device, such as the hard disk or memory of the computer device. The computer-readable storage medium may also be an external storage device of the computer device, such as a plug-in hard disk, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. equipped on the computer device. Further, the computer-readable storage medium may also include both the internal storage unit of the computer device and an external storage device. The computer-readable storage medium is used to store the computer program and other programs and data required by the computer device. The computer-readable storage medium may also be used to temporarily store data that has been output or is to be output.

[0248] In addition, it should be noted that: the embodiment of the present application also provides a computer program product or a computer program, the computer program product or the computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device executes the above Figure 3 , Figure 4 Any method provided by the corresponding embodiment.

[0249] The terms "first", "second", etc. in the description, claims, and drawings of the embodiments of the present application are used to distinguish different objects, rather than to describe a specific order. In addition, the term "comprising" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, device, product, or equipment that includes a series of steps or units is not limited to the listed steps or modules, but optionally includes steps or modules that are not listed, or optionally includes other step units inherent to these processes, methods, devices, products, or equipment.

[0250] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of network elements in the above description. Whether these network elements are executed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described network elements for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0251] The above disclosure is only the preferred embodiment of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims

1. A data processing method based on blockchain, characterized in that: include: Receive a digital asset transfer transaction, and call a digital asset contract according to the digital asset transfer transaction; The digital asset contract is deployed on the blockchain through an asset contract deployment transaction initiated by the digital asset issuer; In the digital asset contract, the digital asset transfer transaction is subjected to asset security verification processing through the digital asset management interface of the digital asset management contract to obtain an asset security verification result; The digital asset management contract is deployed on the blockchain through a management contract deployment transaction initiated by the digital asset manager; If the asset security verification result is a passed asset security verification result, the digital asset transfer transaction is executed according to the digital asset contract to obtain a digital asset transfer result.

2. The method according to claim 1, characterized in that: In the digital asset contract, the digital asset transfer transaction is subjected to asset security verification processing through the digital asset management interface of the digital asset management contract to obtain an asset security verification result, including: In the digital asset contract, obtaining digital asset transfer information in the digital asset transfer transaction; The digital asset transfer information is transmitted to the digital asset management contract through the digital asset management interface of the digital asset management contract; In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing to obtain an asset security verification result; The asset security verification result is returned to the digital asset contract through the digital asset management interface.

3. The method according to claim 2, characterized in that The digital asset transfer information includes the target digital asset type; In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing to obtain an asset security verification result, including: In the digital asset management contract, an asset security verification rule base is obtained; the asset security verification rule base includes one or more asset security verification rules and a digital asset type associated with each asset security verification rule; In the asset security verification rule library, obtaining an asset security verification rule associated with the target digital asset type as the target asset security verification rule; The digital asset transfer information is subjected to asset security verification processing according to the target asset security verification rule to obtain an asset security verification result.

4. The method according to claim 2, characterized in that: The digital asset transfer information includes the address of the asset transfer-out object and the address of the asset transfer-in object; In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing to obtain an asset security verification result, including: In the digital asset management contract, an authentication query request is generated for the asset transfer-out object address and the asset transfer-in object address; Determine the identity authentication status corresponding to the asset transfer-out object address and the asset transfer-in object address respectively according to the authentication query request; If the identity authentication statuses corresponding to the asset transfer-out object address and the asset transfer-in object are both legal identity authentication statuses, then the asset security verification result is determined to be an asset security verification pass result.

5. The method according to claim 2, characterized in that: The digital asset transfer information includes the amount of transferred assets; In the digital asset management contract, the digital asset transfer information is subjected to asset security verification processing to obtain an asset security verification result, including: In the digital asset management contract, obtain the maximum transfer asset threshold; If the amount of transferred assets is less than or equal to the maximum transferred assets threshold, determining that the asset security verification result is an asset security verification pass result; If the amount of transferred assets is greater than the maximum transferred assets threshold, the asset security verification result is determined to be a failure result of the asset security verification.

6. The method according to claim 1, characterized in that Also includes: Receiving transaction signature data corresponding to the digital asset transfer transaction; the transaction signature data is obtained by signing the digital asset transfer transaction with a private key corresponding to the asset transfer-out object; the asset transfer-out object is the object that initiates the digital asset transfer transaction; Obtain the public key corresponding to the asset transfer object, verify the transaction signature data using the public key, and obtain the verification result; If the signature verification result is a successful signature verification result, the step of calling the digital asset contract according to the digital asset transfer transaction is executed.

7. The method according to claim 1, characterized in that Also includes: Receiving a management contract deployment transaction initiated by a digital asset manager; the management contract deployment transaction includes a management contract code; If the management contract deployment transaction consensus is passed, the digital asset management contract is deployed by executing the management contract code; If the management contract deployment transaction is successfully deployed, the management contract address corresponding to the digital asset management contract is sent to the digital asset manager.

8. The method according to claim 7, characterized in that Also includes: Obtain the management object address corresponding to the digital asset manager; If it is determined that the management object address does not have the authority to manage contract deployment, a permission error prompt message is sent to the digital asset manager; If it is determined that the management object address has the management contract deployment authority, a consensus request for the management contract deployment transaction is initiated to the consensus network, so that the consensus network performs consensus processing on the management contract deployment transaction and obtains a consensus result; If the consensus result is a consensus passing result, it is determined that the management contract deployment transaction consensus has passed.

9. The method according to claim 7, characterized in that: Also includes: Receive a verification rule configuration transaction initiated by the digital asset manager; the verification rule configuration transaction includes the management contract address, the digital asset management interface, and the asset security verification rule corresponding to the digital asset management interface; the digital asset management interface is used to call the asset security verification rule; If the management contract update transaction consensus is passed, the digital asset management contract is obtained according to the management contract address, and the digital asset management interface and the asset security verification rules are configured in the digital asset management contract; the asset security verification rules are used to instruct the asset security verification processing of the digital asset transfer transaction.

10. The method according to claim 1, characterized in that Also includes: receiving an object address registration transaction sent by a digital asset server; the object address registration transaction is generated by the digital asset server when receiving an object address registration request associated with a first object; the object address registration request includes object identity information corresponding to the first object; The digital asset contract is called according to the object address registration transaction, and in the digital asset contract, an object address registration process is performed according to the object identity information to obtain a first object address; Sending the first object address to the digital asset server, so that when the digital asset server detects abnormal behavior information of the first object address, the abnormal behavior information and the first object address are sent to the digital asset manager; Receiving an asset restriction object update transaction initiated by the digital asset manager upon receiving the abnormal behavior information and the first object address; The digital asset management contract is called according to the restricted object update transaction. In the digital asset management contract, the first object address is set as the asset restricted object address; and the asset security verification result of the digital asset transfer transaction associated with the asset restricted object address is the asset security verification failure result.

11. The method according to claim 1, characterized in that: Also includes: If the asset security verification result is an asset security verification failure result, then generating a verification failure prompt message according to the verification failure result type corresponding to the asset security verification failure result; The verification failure prompt information is used to indicate the retry processing method corresponding to the verification failure result type.

12. A data processing device based on blockchain, characterized in that: include: A receiving module, used to receive a digital asset transfer transaction and call a digital asset contract according to the digital asset transfer transaction; The digital asset contract is deployed on the blockchain through an asset contract deployment transaction initiated by the digital asset issuer; A verification module is used to perform asset security verification processing on the digital asset transfer transaction in the digital asset contract through the digital asset management interface of the digital asset management contract to obtain an asset security verification result; The digital asset management contract is deployed on the blockchain through a management contract deployment transaction initiated by the digital asset manager; The transfer module is used to execute the digital asset transfer transaction according to the digital asset contract to obtain the digital asset transfer result if the asset security verification result is a passed asset security verification result.

13. A computer device, characterized in that: include: Processor, memory, and network interface; The processor is connected to the memory and the network interface, wherein the network interface is used to provide a data communication function, the memory is used to store program code, and the processor is used to call the program code to execute the method described in any one of claims 1-11.

14. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is suitable for being loaded by a processor and executing the method according to any one of claims 1 to 11.

15. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by a processor, the method according to any one of claims 1 to 11 can be performed.

Images