Access record processing method and device, electronic equipment and storage medium

Abstract

The embodiment of the invention provides an access record processing method and device, electronic equipment and a storage medium, and the method comprises the steps: determining an access record of a client for a target file after the client accesses the target file; sending the access record to a block chain network, so that the block chain network maps the access record into corresponding transaction data, and storing the transaction data in the block chain network; obtaining a first auditing report returned by the block chain network, wherein the first auditing report is obtained by auditing the access record corresponding to the transaction data by the block chain network; and sending the first audit report to the client. Therefore, the audit of the access record is carried out based on the block chain network, the non-tampering property of the access record is ensured, and the security and reliability of the data are also improved.

Description

Technical Field

[0001] The present invention relates to the field of computer technology, and in particular to a method for processing access records, a device for processing access records, an electronic device and a computer-readable storage medium. Background Art

[0002] A distributed file system is a file system that stores files in multiple physical locations and connects these locations through a network, allowing users and applications to access these files as if they were local files. The main purpose of a distributed file system is to improve the efficiency, reliability, and scalability of data access. In a distributed file system, access records are usually audited when files are accessed, while traditional audit methods usually rely on centralized logging and management systems, which often have problems such as the risk of data tampering. Summary of the invention

[0003] In view of the above problems, embodiments of the present invention are proposed to provide a method for processing access records, a device for processing access records, an electronic device and a computer-readable storage medium that overcome the above problems or at least partially solve the above problems.

[0004] In order to solve the above problems, in a first aspect, an embodiment of the present invention discloses a method for processing access records, which is applied to a server; the server is connected to a client and a blockchain network, and the method includes:

[0005] After the client accesses the target file, determining the access record of the client to the target file;

[0006] Sending the access record to the blockchain network so that the blockchain network maps the access record to corresponding transaction data and stores the transaction data in the blockchain network;

[0007] Obtaining a first audit report returned by the blockchain network, where the first audit report is obtained by the blockchain network performing an audit process based on the access record corresponding to the transaction data;

[0008] Send the first audit report to the client.

[0009] Optionally, after the client accesses the target file, determining the access record of the client to the target file includes:

[0010] When it is obtained that the client performs an operation on the target file, the operation time of the operation, the file path of the target file, and the identity information of the client are obtained; the operation includes: a read operation, a write operation, and a delete operation; the target file includes a file of a distributed file system protocol;

[0011] The operation, the operation time, the file path and the identity information are encapsulated to obtain an access record of the client to the target file.

[0012] Optionally, the method further comprises:

[0013] Obtaining the query request sent by the client and the identity information of the client;

[0014] Sending the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and the preset permission list, and when the identity information is verified, determining the corresponding target transaction data from the transaction data stored in the blockchain network according to the query request, and performing audit processing according to the access record corresponding to the target transaction data to obtain a second audit report, and sending the second audit report to the server;

[0015] Obtaining the second audit report sent by the blockchain network, and sending the second audit report to the client;

[0016] or,

[0017] Sending the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset authority list, and when the identity information verification fails, sending the verification result to the server;

[0018] Obtain the verification result sent by the blockchain network, and send the verification result to the client.

[0019] Optionally, after the blockchain network maps the access record to corresponding transaction data, the first audit report verifies the transaction data, triggers a preset smart contract after the verification, and audits the access record corresponding to the transaction data according to the preset smart contract and preset rules to generate the first audit report.

[0020] In a second aspect, an embodiment of the present invention provides a method for processing access records, the method being applied to a blockchain network; the blockchain network being connected to a server; the server being connected to a client, the method comprising:

[0021] Acquire the access record sent by the server; the access record is determined by the server after the client accesses the target file; the access record is the access record of the client to the target file;

[0022] Mapping the access record to corresponding transaction data, and storing the transaction data in the blockchain network;

[0023] An audit process is performed on the access record corresponding to the transaction data to obtain a first audit report, and the first audit report is sent to the server so that the server sends the first audit report to the client.

[0024] Optionally, the auditing of the access records corresponding to the transaction data to obtain a first audit report includes:

[0025] Verify the transaction data and trigger the preset smart contract after the verification is passed;

[0026] The access records corresponding to the transaction data are audited according to the preset smart contract and preset rules to obtain a first audit report.

[0027] Optionally, the method further comprises:

[0028] Acquire the query request sent by the server and the identity information of the client; the query request and the identity information of the client are sent by the client to the server;

[0029] Verifying the identity information according to the identity information and the preset authority list;

[0030] When the identity information verification is passed, determining corresponding target transaction data from the transaction data stored in the blockchain network according to the query request;

[0031] Auditing the access records corresponding to the target transaction data to obtain a second audit report;

[0032] sending the second audit report to the server, so that the server sends the second audit report to the client;

[0033] When the identity information verification fails, the verification result is sent to the server, so that the server sends the verification result to the client.

[0034] Optionally, the access record is obtained by the server after obtaining the operation of the target file by the client, obtaining the operation time, the file path of the target file, and the identity information of the client, and encapsulating the operation, the operation time, the file path and the identity information to obtain the access record of the client for the target file; the operation includes: read operation, write operation, delete operation; the target file includes a file of the distributed file system protocol.

[0035] In a third aspect, an embodiment of the present invention discloses a device for processing access records, the device being applied to a server; the server being connected to a client and a blockchain network, the device comprising:

[0036] A first determination module, configured to determine an access record of the client to the target file after the client accesses the target file;

[0037] A first sending module, configured to send the access record to the blockchain network, so that the blockchain network maps the access record to corresponding transaction data and stores the transaction data in the blockchain network;

[0038] A first acquisition module is used to acquire a first audit report returned by the blockchain network, where the first audit report is obtained by the blockchain network through audit processing based on the access record corresponding to the transaction data;

[0039] The second sending module is used to send the first audit report to the client.

[0040] Optionally, the first determining module includes:

[0041] The acquisition submodule is used to acquire the operation time, the file path of the target file, and the identity information of the client when the client performs an operation on the target file; the operation includes: a read operation, a write operation, and a delete operation; the target file includes a file of a distributed file system protocol;

[0042] The encapsulation submodule is used to encapsulate the operation, the operation time, the file path and the identity information to obtain the access record of the client to the target file.

[0043] Optionally, the device further comprises:

[0044] A second acquisition module, used to acquire the query request sent by the client and the identity information of the client;

[0045] A second sending module is used to send the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset permission list, and when the identity information is verified, the corresponding target transaction data is determined from the transaction data stored in the blockchain network according to the query request, and an audit process is performed according to the access record corresponding to the target transaction data to obtain a second audit report, and the second audit report is sent to the server;

[0046] A third acquisition module is used to acquire the second audit report sent by the blockchain network and send the second audit report to the client;

[0047] or,

[0048] A third sending module is used to send the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset authority list, and sends a verification result to the server when the identity information verification fails;

[0049] The fourth sending module is used to obtain the verification result sent by the blockchain network and send the verification result to the client.

[0050] Optionally, after the blockchain network maps the access record to corresponding transaction data, the first audit report verifies the transaction data, triggers a preset smart contract after the verification, and audits the access record corresponding to the transaction data according to the preset smart contract and preset rules to generate the first audit report.

[0051] In a fourth aspect, an embodiment of the present invention discloses a device for processing access records, the device being applied to a blockchain network; the blockchain network being connected to a server; the server being connected to a client, the method comprising:

[0052] A fourth acquisition module is used to acquire the access record sent by the server; the access record is determined by the server after the client accesses the target file; the access record is the access record of the client to the target file;

[0053] A mapping module, used to map the access record into corresponding transaction data, and store the transaction data in the blockchain network;

[0054] The first processing module is used to perform audit processing on the access records corresponding to the transaction data to obtain a first audit report, and send the first audit report to the server so that the server sends the first audit report to the client.

[0055] Optionally, the first processing module includes:

[0056] A verification submodule is used to verify the transaction data and trigger a preset smart contract after the verification is passed;

[0057] The first processing submodule is used to audit the access records corresponding to the transaction data according to the preset smart contract and preset rules to obtain a first audit report.

[0058] Optionally, the device further comprises:

[0059] A fifth acquisition module, used to acquire the query request sent by the server and the identity information of the client; the query request and the identity information of the client are sent by the client to the server;

[0060] A verification module, used to verify the identity information according to the identity information and a preset authority list;

[0061] A second determination module is used to determine corresponding target transaction data from the transaction data stored in the blockchain network according to the query request when the identity information verification is passed;

[0062] A second processing module, configured to perform audit processing on the access records corresponding to the target transaction data to obtain a second audit report;

[0063] a fifth sending module, configured to send the second audit report to the server, so that the server sends the second audit report to the client;

[0064] The sixth sending module is used to send the verification result to the server when the identity information verification fails, so that the server sends the verification result to the client.

[0065] Optionally, the access record is obtained by the server after obtaining the operation of the target file by the client, obtaining the operation time, the file path of the target file, and the identity information of the client, and encapsulating the operation, the operation time, the file path and the identity information to obtain the access record of the client for the target file; the operation includes: read operation, write operation, delete operation; the target file includes a file of the distributed file system protocol.

[0066] In a fifth aspect, the present invention shows an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the steps of the above-mentioned method for processing access records when executing the computer program.

[0067] In a sixth aspect, the present invention shows a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the steps of the above-mentioned method for processing access records are implemented.

[0068] The embodiments of the present invention include the following advantages:

[0069] In an embodiment of the present invention, after the client accesses the target file, the server first determines the client's access record to the target file, and then sends the access record to the blockchain network, so that the blockchain network maps the access record to the corresponding transaction data, and stores the transaction data in the blockchain network. The server then obtains the first audit report returned by the blockchain network, wherein the first audit report is obtained by the blockchain network through audit processing based on the access record corresponding to the transaction data. Finally, the first audit report is sent to the client, thereby performing an audit of the access record based on the blockchain network, ensuring the non-tamperability of the access record, and improving the security and reliability of the data. BRIEF DESCRIPTION OF THE DRAWINGS

[0070] Figure 1 is a flowchart of a method for processing access records provided by an embodiment of the present invention;

[0071] Figure 2 This is a schematic diagram of a device connection provided by an embodiment of the present invention;

[0072] Figure 3 is a flowchart of another method for processing access records provided by an embodiment of the present invention;

[0073] Figure 4 is a flowchart of another method for processing access records provided by an embodiment of the present invention;

[0074] Figure 5 is a structural block diagram of an access record processing device provided by an embodiment of the present invention;

[0075] Figure 6 is a structural block diagram of another access record processing device provided by an embodiment of the present invention;

[0076] Figure 7 is a structural block diagram of an electronic device provided by an embodiment of the present invention;

[0077] Figure 8 It is a structural block diagram of a computer-readable storage medium provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0078] In order to make the above-mentioned objects, features and advantages of the present invention more obvious and easy to understand, the present invention is further described in detail below with reference to the accompanying drawings and specific embodiments.

[0079] When auditing access records in related technologies, it usually relies on centralized log records and management systems, which often have problems such as data tampering risks. In order to solve the above technical problems, the present invention provides a method for processing access records. After the client accesses the target file, the server first determines the client's access record for the target file, and then sends the access record to the blockchain network, so that the blockchain network maps the access record to the corresponding transaction data, and stores the transaction data in the blockchain network. Then, the server obtains the first audit report returned by the blockchain network, wherein the first audit report is obtained by the blockchain network based on the audit processing of the access record corresponding to the transaction data, and finally sends the first audit report to the client, thereby auditing the access record based on the blockchain network, ensuring the non-tamperability of the access record, and improving the security and reliability of the data.

[0080] Reference Figure 1 , shows a flowchart of a method for processing access records provided by an embodiment of the present invention, the method is applied to a server; the server is connected to a client and a blockchain network, and the method specifically includes the following steps:

[0081] Step 101: after the client accesses the target file, determine the access record of the client to the target file.

[0082] In the embodiment of the present invention, the client is connected to the server, and the server is also connected to the blockchain network. Figure 2 The client can receive instructions or operations input by the user, and when the user accesses the target file through the client, the server can determine the access record of the client to the target file.

[0083] In one embodiment, after the client accesses the target file, the access record of the client to the target file is determined, including: when the client operates the target file, the operation time of the operation, the file path of the target file, and the identity information of the client are obtained; the operation includes: a read operation, a write operation, and a delete operation; the target file includes a file of a distributed file system protocol; the operation, operation time, file path and identity information are encapsulated to obtain the access record of the client to the target file.

[0084] Specifically, the server can monitor the behavioral data of the client. When the user performs a read operation on the target file through the client, the server can obtain the read operation performed by the user and the operation time corresponding to the read operation, and the file path of the corresponding target file, as well as the identity information of the client, which may be the identity information of the user. The server can then encapsulate the obtained data to obtain the user's access record to the target file through the client, thereby making the access record data in the present invention more comprehensive.

[0085] It should be noted that the target file in the present invention may include a file of a distributed system protocol or a file of other protocols. The specific target file can be set according to actual needs, and the present invention does not make any specific limitation here.

[0086] Step 102: Send the access record to the blockchain network so that the blockchain network maps the access record to corresponding transaction data and stores the transaction data in the blockchain network.

[0087] In an embodiment of the present invention, after determining the access record, the server can send the access record to the blockchain network. After receiving the access record, the blockchain network can map the access record to corresponding transaction data and store the transaction data in the blockchain network.

[0088] In an embodiment of the present invention, after the blockchain network maps the access record to the corresponding transaction data, the nodes in the blockchain network can verify the compliance of the transaction data. After the transaction data verification is passed, the transaction data can be stored in the blockchain network. When the compliance verification of the transaction data fails, the corresponding verification result can be sent to the server, and the server can send the verification result to the client, so that the user can clearly know through the client that there is a certain risk in the transaction data, thereby reminding the user.

[0089] Step 103: Obtain a first audit report returned by the blockchain network, where the first audit report is obtained by the blockchain network through auditing the access records corresponding to the transaction data.

[0090] In an embodiment of the present invention, after mapping the access record to the corresponding transaction data, the blockchain network can audit the access record corresponding to the transaction data to obtain a first audit report, and then the blockchain network sends the audit report to the processor.

[0091] In an embodiment of the present invention, the first audit report is generated by mapping the access records to corresponding transaction data through the blockchain network, and then verifying the transaction data. After the verification is passed, the preset smart contract is triggered, and the access records corresponding to the transaction data are audited according to the preset smart contract and preset rules to generate the first audit report.

[0092] Specifically, after mapping the access records to the corresponding transaction data, the blockchain network can verify the compliance of the transaction data. When the compliance of the transaction data is verified, the preset smart contract can be triggered, and then the access records corresponding to the transaction data are audited according to the preset smart contract and preset rules. The use of the preset smart contract can automatically audit the access records, thereby improving the efficiency of the audit process. After the audit, the blockchain network can obtain a first audit report, and then send the first audit report to the server.

[0093] In an embodiment of the present invention, during the process of auditing access records corresponding to transaction data according to preset smart contracts and preset rules, anomaly detection can be performed. When abnormal behavior is detected, the detection result can be sent to the server. The server generates warning information based on the detection result and sends the warning information to the client, so that the user can quickly make corresponding processing based on the warning information.

[0094] Step 104: Send the first audit report to the client.

[0095] In an embodiment of the present invention, after receiving the first audit report generated by the blockchain network, the server may send the first audit report to the client, so that the user can view the first audit report on the client.

[0096] In an embodiment of the present invention, the method for processing access records also includes: obtaining a query request sent by a client and identity information of the client; sending the query request and identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset permission list, and when the identity information verification passes, determining the corresponding target transaction data from the transaction data stored in the blockchain network according to the query request, and performing audit processing according to the access record corresponding to the target transaction data to obtain a second audit report, and sending the second audit report to the server; obtaining the second audit report sent by the blockchain network, and sending the second audit report to the client; or, sending the query request and identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset permission list, and when the identity information verification fails, sending the verification result to the server; obtaining the verification result sent by the blockchain network, and sending the verification result to the client.

[0097] Specifically, when a user needs to query an audit report of an access record, a query request can be sent to a server through a client, wherein the query request can include an audit report of an access record for a time period. The server can obtain the query request sent by the client, and can also obtain the identity information of the client, and then send the query request and identity information to the blockchain network. At this time, the blockchain network will first verify the identity information to verify whether the corresponding identity information has the authority to query, thereby ensuring the security of the data. When the identity information verification is passed, the blockchain network will retrieve the relevant target transaction data from the stored transaction data according to the query request, and then audit the access record corresponding to the target transaction data to obtain a second audit report, and then send the second audit report to the server. After receiving the second audit report sent by the blockchain, the server can send the second audit report to the client, so that the user can query the required audit report of the access record according to the client, and the audit report is generated based on the blockchain network to ensure the immutability and security of the data.

[0098] In an embodiment of the present invention, after the client accesses the target file, the client's access record for the target file is determined; the access record is sent to the blockchain network so that the blockchain network maps the access record to the corresponding transaction data and stores the transaction data in the blockchain network; the first audit report returned by the blockchain network is obtained, and the first audit report is obtained by the blockchain network based on the audit processing of the access record corresponding to the transaction data; and the first audit report is sent to the client. Thus, the audit of the access record based on the blockchain network ensures the non-tamperability of the access record and improves the security and reliability of the data.

[0099] like Figure 3 As shown, a flowchart of another method for processing access records provided by an embodiment of the present invention is shown, wherein the method is applied to a blockchain network; the blockchain network is connected to a server; the server is connected to a client, and the method specifically comprises the following steps:

[0100] Step 301, obtaining the access record sent by the server; the access record is determined by the server after the client accesses the target file; the access record is the access record of the client to the target file.

[0101] In an embodiment of the present invention, after a user accesses a target file through a client, the server can determine an access record, which may be an access record of the client to the target file. The server then sends the access record to the blockchain network, so that the blockchain network can obtain the access record.

[0102] In one embodiment, after obtaining the access record of the client's operation on the target file, the server obtains the operation time, the file path of the target file, and the client's identity information, and encapsulates the operation, operation time, file path and identity information to obtain the client's access record for the target file; the operation includes: read operation, write operation, delete operation; the target file includes a file of the distributed file system protocol.

[0103] Specifically, the server can monitor the behavioral data of the client. When the user performs a read operation on the target file through the client, the server can obtain the read operation performed by the user and the operation time corresponding to the read operation, and the file path of the corresponding target file, as well as the identity information of the client, which may be the identity information of the user. The server can then encapsulate the obtained data to obtain the user's access record to the target file through the client, thereby making the access record data in the present invention more comprehensive.

[0104] Step 302: Map the access record to corresponding transaction data, and store the transaction data in the blockchain network.

[0105] In an embodiment of the present invention, after obtaining the access record sent by the server, the blockchain network can map the access record to the corresponding transaction data, and the nodes in the blockchain network can verify the compliance of the transaction data. After the transaction data verification is passed, the transaction data can be stored in the blockchain network. When the compliance verification of the transaction data fails, the corresponding verification result can be sent to the server, and the server can send the verification result to the client, so that the user can clearly know through the client that there is a certain risk in the transaction data, thereby reminding the user.

[0106] Step 303: audit the access records corresponding to the transaction data to obtain a first audit report, and send the first audit report to the server so that the server sends the first audit report to the client.

[0107] In an embodiment of the present invention, after mapping the access record to the corresponding transaction data, the blockchain network can audit the access record corresponding to the transaction data to obtain a first audit report, and then the blockchain network sends the first audit report to the server, and the server can send the first audit report to the client, so that the user can view the first audit report through the client.

[0108] In one embodiment, the access records corresponding to the transaction data are audited to obtain a first audit report, including: verifying the transaction data and triggering a preset smart contract after the verification is passed; and auditing the access records corresponding to the transaction data according to the preset smart contract and preset rules to obtain a first audit report.

[0109] Specifically, after mapping the access records to the corresponding transaction data, the blockchain network can verify the compliance of the transaction data. When the compliance of the transaction data is verified, the preset smart contract can be triggered, and then the access records corresponding to the transaction data are audited according to the preset smart contract and preset rules. The use of the preset smart contract can automatically audit the access records, thereby improving the efficiency of the audit process. After the audit, the blockchain network can obtain a first audit report, and then send the first audit report to the server.

[0110] In an embodiment of the present invention, the method for processing access records may further include: obtaining a query request sent by a server and identity information of a client; the query request and identity information of the client are sent by the client to the server; the identity information is verified according to the identity information and a preset permission list; when the identity information verification passes, the corresponding target transaction data is determined from the transaction data stored in the blockchain network according to the query request; the access record corresponding to the target transaction data is audited to obtain a second audit report; the second audit report is sent to the server so that the server sends the second audit report to the client; when the identity information verification fails, the verification result is sent to the server so that the server sends the verification result to the client.

[0111] Specifically, when a user needs to query an audit report of an access record, a query request can be sent to a server through a client, wherein the query request can include an audit report of an access record for a time period. The server can obtain the query request sent by the client, and can also obtain the identity information of the client, and then send the query request and identity information to the blockchain network. At this time, the blockchain network will first verify the identity information to verify whether the corresponding identity information has the authority to query, thereby ensuring the security of the data. When the identity information verification is passed, the blockchain network will retrieve the relevant target transaction data from the stored transaction data according to the query request, and then audit the access record corresponding to the target transaction data to obtain a second audit report, and then send the second audit report to the server. After receiving the second audit report sent by the blockchain, the server can send the second audit report to the client, so that the user can query the required audit report of the access record according to the client, and the audit report is generated based on the blockchain network to ensure the immutability and security of the data.

[0112] like Figure 4As shown, a flowchart of another method for processing access records provided by an embodiment of the present invention is shown. The specific steps of the method are as follows: the client can access the target file, or send a query request to the server. After the client accesses the target file, the server can determine the client's access record for the target file, and then send the access record to the blockchain network. After the client sends a query request to the server, the server can obtain the query request and the identity information of the client, and send the query request and the identity information of the client to the blockchain network. After receiving the access record sent by the server, the blockchain network can map the access record to the corresponding transaction data, save the transaction data to the blockchain network, and perform an automated audit operation on the access record of the transaction data to obtain a first audit report, send the first audit report to the server, and the server sends the first audit report to the client. After receiving the query request and identity information sent by the server, the blockchain network verifies the identity information. After the verification is passed, the target transaction data is determined according to the query request, and the access record corresponding to the target transaction data is audited to obtain a second audit report, and the second audit report is sent to the server, and the server sends the second audit report to the client.

[0113] In an embodiment of the present invention, after the client accesses the target file, the client's access record for the target file is determined; the access record is sent to the blockchain network so that the blockchain network maps the access record to the corresponding transaction data and stores the transaction data in the blockchain network; the first audit report returned by the blockchain network is obtained, and the first audit report is obtained by the blockchain network based on the audit processing of the access record corresponding to the transaction data; and the first audit report is sent to the client. Thus, the audit of the access record based on the blockchain network ensures the non-tamperability of the access record and improves the security and reliability of the data.

[0114] It should be noted that, for the sake of simplicity, the method embodiments are described as a series of action combinations, but those skilled in the art should be aware that the embodiments of the present invention are not limited by the order of the actions described, because according to the embodiments of the present invention, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions involved are not necessarily required by the embodiments of the present invention.

[0115] Reference Figure 5 , shows a structural block diagram of an access record processing device provided by an embodiment of the present invention, the device is applied to a server; the server is connected to a client and a blockchain network, and the device may specifically include the following modules:

[0116] A first determining module 501 is used to determine the access record of the client to the target file after the client accesses the target file;

[0117] A first sending module 502, configured to send the access record to the blockchain network, so that the blockchain network maps the access record to corresponding transaction data and stores the transaction data in the blockchain network;

[0118] A first acquisition module 503 is used to acquire a first audit report returned by the blockchain network, where the first audit report is obtained by the blockchain network through audit processing based on the access record corresponding to the transaction data;

[0119] The second sending module 504 is used to send the first audit report to the client.

[0120] In one embodiment, the first determining module 501 includes:

[0121] The acquisition submodule is used to acquire the operation time, the file path of the target file, and the identity information of the client when the client performs an operation on the target file; the operation includes: a read operation, a write operation, and a delete operation; the target file includes a file of a distributed file system protocol;

[0122] The encapsulation submodule is used to encapsulate the operation, the operation time, the file path and the identity information to obtain the access record of the client to the target file.

[0123] In one embodiment, the device further comprises:

[0124] A second acquisition module, used to acquire the query request sent by the client and the identity information of the client;

[0125] A second sending module is used to send the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset permission list, and when the identity information is verified, the corresponding target transaction data is determined from the transaction data stored in the blockchain network according to the query request, and an audit process is performed according to the access record corresponding to the target transaction data to obtain a second audit report, and the second audit report is sent to the server;

[0126] A third acquisition module is used to acquire the second audit report sent by the blockchain network and send the second audit report to the client;

[0127] or,

[0128] A third sending module is used to send the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset authority list, and sends a verification result to the server when the identity information verification fails;

[0129] The fourth sending module is used to obtain the verification result sent by the blockchain network and send the verification result to the client.

[0130] In one embodiment, the first audit report is generated by the blockchain network after mapping the access record to the corresponding transaction data, verifying the transaction data, triggering a preset smart contract after the verification, and auditing the access record corresponding to the transaction data according to the preset smart contract and preset rules to generate the first audit report.

[0131] In an embodiment of the present invention, the first determination module is used to determine the client's access record to the target file after the client accesses the target file; the first sending module is used to send the access record to the blockchain network, so that the blockchain network maps the access record to the corresponding transaction data and stores the transaction data in the blockchain network; the first acquisition module is used to obtain the first audit report returned by the blockchain network, and the first audit report is obtained by the blockchain network based on the access record corresponding to the transaction data. The second sending module is used to send the first audit report to the client. Therefore, the audit of access records based on the blockchain network ensures the non-tamperability of the access records and improves the security and reliability of the data.

[0132] Reference Figure 6 , shows a structural block diagram of another access record processing device provided by an embodiment of the present invention, the device is applied to a blockchain network; the blockchain network is connected to a server; the server is connected to a client, and the device may specifically include the following modules:

[0133] A fourth acquisition module 601 is used to acquire an access record sent by the server; the access record is determined by the server after the client accesses the target file; the access record is an access record of the client to the target file;

[0134] A mapping module 602, used to map the access record into corresponding transaction data, and store the transaction data in the blockchain network;

[0135] The first processing module 603 is used to perform audit processing on the access records corresponding to the transaction data to obtain a first audit report, and send the first audit report to the server so that the server sends the first audit report to the client.

[0136] In one embodiment, the first processing module 603 includes:

[0137] A verification submodule is used to verify the transaction data and trigger a preset smart contract after the verification is passed;

[0138] The first processing submodule is used to audit the access records corresponding to the transaction data according to the preset smart contract and preset rules to obtain a first audit report.

[0139] In one embodiment, the device further comprises:

[0140] A fifth acquisition module, used to acquire the query request sent by the server and the identity information of the client; the query request and the identity information of the client are sent by the client to the server;

[0141] A verification module, used to verify the identity information according to the identity information and a preset authority list;

[0142] A second determination module is used to determine corresponding target transaction data from the transaction data stored in the blockchain network according to the query request when the identity information verification is passed;

[0143] A second processing module, configured to perform audit processing on the access records corresponding to the target transaction data to obtain a second audit report;

[0144] a fifth sending module, configured to send the second audit report to the server, so that the server sends the second audit report to the client;

[0145] The sixth sending module is used to send the verification result to the server when the identity information verification fails, so that the server sends the verification result to the client.

[0146] In one embodiment, the access record is obtained by the server after the client performs an operation on the target file, obtaining the operation time, the file path of the target file, and the identity information of the client, and encapsulating the operation, the operation time, the file path and the identity information to obtain the client's access record for the target file; the operation includes: read operation, write operation, delete operation; the target file includes a file of the distributed file system protocol.

[0147] In an embodiment of the present invention, the first determination module is used to determine the client's access record to the target file after the client accesses the target file; the first sending module is used to send the access record to the blockchain network, so that the blockchain network maps the access record to the corresponding transaction data and stores the transaction data in the blockchain network; the first acquisition module is used to obtain the first audit report returned by the blockchain network, and the first audit report is obtained by the blockchain network based on the access record corresponding to the transaction data. The second sending module is used to send the first audit report to the client. Therefore, the audit of access records based on the blockchain network ensures the non-tamperability of the access records and improves the security and reliability of the data.

[0148] As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0149] like Figure 7 , showing a structural block diagram of an electronic device provided in an embodiment of the present invention, including:

[0150] It includes a processor, a memory, and a computer program stored in the memory and capable of running on the processor. When the computer program is executed by the processor, the various processes of the above-mentioned access record processing method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0151] like Figure 8 , showing that an embodiment of the present invention also provides a structural block diagram of a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the various processes of the above-mentioned access record processing method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0152] The various embodiments in this specification are described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the various embodiments can be referenced to each other.

[0153] It will be appreciated by those skilled in the art that the embodiments of the present invention may be provided as methods, devices, or computer program products. Therefore, the embodiments of the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the embodiments of the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

[0154] The embodiments of the present invention are described with reference to the flowcharts and / or block diagrams of the methods, terminal devices (systems), and computer program products according to the embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of the processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing terminal device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing terminal device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0155] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing terminal device to operate in a specific manner, so that the instructions stored in the computer readable memory produce a manufactured product including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0156] These computer program instructions can also be loaded onto a computer or other programmable data processing terminal device so that a series of operating steps are executed on the computer or other programmable terminal device to produce a computer-implemented process, thereby providing instructions for executing on the computer or other programmable terminal device to implement the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0157] Although the preferred embodiments of the present invention have been described, those skilled in the art may make additional changes and modifications to these embodiments once they have learned the basic creative concept. Therefore, the appended claims are intended to be interpreted as including the preferred embodiments and all changes and modifications that fall within the scope of the embodiments of the present invention.

[0158] Finally, it should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or terminal device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or terminal device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or terminal device including the elements.

[0159] The above is a detailed introduction to an access record processing method, an access record processing device, an electronic device and a computer-readable storage medium provided by the present invention. Specific examples are used in this article to illustrate the principles and implementation methods of the present invention. The description of the above embodiments is only used to help understand the method of the present invention and its core idea; at the same time, for a person skilled in the art, according to the idea of ​​the present invention, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present invention.

Claims

1. A method for processing access records, characterized in that: The method is applied to a server; the server is connected to a client and a blockchain network, and the method includes: After the client accesses the target file, determining the access record of the client to the target file; Sending the access record to the blockchain network so that the blockchain network maps the access record to corresponding transaction data and stores the transaction data in the blockchain network; Obtaining a first audit report returned by the blockchain network, where the first audit report is obtained by the blockchain network performing an audit process based on the access record corresponding to the transaction data; Send the first audit report to the client.

2. The access record processing method according to claim 1, characterized in that: After the client accesses the target file, determining the access record of the client to the target file, include: When the client performs an operation on the target file, the operation time of the operation is obtained. The file path of the target file and the identity information of the client; the operation includes: Read operation, write operation, delete operation; the target file includes a file of distributed file system protocol; The operation, the operation time, the file path and the identity information are encapsulated to obtain an access record of the client to the target file.

3. The access record processing method according to claim 1, characterized in that: The method further comprises: Obtaining the query request sent by the client and the identity information of the client; Sending the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and the preset permission list, and when the identity information is verified, determining the corresponding target transaction data from the transaction data stored in the blockchain network according to the query request, and performing audit processing according to the access record corresponding to the target transaction data to obtain a second audit report, and sending the second audit report to the server; Obtaining the second audit report sent by the blockchain network, and sending the second audit report to the client; or, Sending the query request and the identity information to the blockchain network, so that the blockchain network verifies the identity information according to the identity information and a preset authority list, and when the identity information verification fails, sending the verification result to the server; Obtain the verification result sent by the blockchain network, and send the verification result to the client.

4. The method for processing access records according to claim 1, characterized in that: The first audit report is generated by the blockchain network after mapping the access record to the corresponding transaction data, verifying the transaction data, triggering a preset smart contract after the verification, and auditing the access record corresponding to the transaction data according to the preset smart contract and preset rules. The audit report is generated by performing the audit process.

5. A method for processing access records, characterized in that: The method is applied to a blockchain network; The blockchain network is connected to a server; The server is connected to the client, and the method includes: Acquire the access record sent by the server; the access record is determined by the server after the client accesses the target file; the access record is the access record of the client to the target file; Mapping the access record to corresponding transaction data, and storing the transaction data in the blockchain network; An audit process is performed on the access record corresponding to the transaction data to obtain a first audit report, and the first audit report is sent to the server so that the server sends the first audit report to the client.

6. The method for processing access records according to claim 5, characterized in that: The auditing of the access records corresponding to the transaction data to obtain a first audit report includes: Verify the transaction data and trigger the preset smart contract after the verification is passed; The access records corresponding to the transaction data are audited according to the preset smart contract and preset rules to obtain a first audit report.

7. The method for processing access records according to claim 5, characterized in that: The method further comprises: Acquire the query request sent by the server and the identity information of the client; the query request and the identity information of the client are sent by the client to the server; Verifying the identity information according to the identity information and the preset authority list; When the identity information verification is passed, determining corresponding target transaction data from the transaction data stored in the blockchain network according to the query request; Auditing the access records corresponding to the target transaction data to obtain a second audit report; sending the second audit report to the server, so that the server sends the second audit report to the client; When the identity information verification fails, the verification result is sent to the server, so that the server sends the verification result to the client.

8. The method for processing access records according to claim 5, characterized in that: The access record is obtained by the server after the client operates the target file. Obtaining the operation time of the operation, the file path of the target file, and the identity information of the client, encapsulating the operation, the operation time, the file path, and the identity information to obtain the access record of the client to the target file; the operation includes: Read operation, write operation, delete operation; the target file includes a file of a distributed file system protocol.

9. A device for processing access records, characterized in that: The device is applied to a server; The server is connected to the client and the blockchain network, and the device includes: A first determination module, configured to determine an access record of the client to the target file after the client accesses the target file; A first sending module, configured to send the access record to the blockchain network, so that the blockchain network maps the access record to corresponding transaction data and stores the transaction data in the blockchain network; A first acquisition module is used to acquire a first audit report returned by the blockchain network, where the first audit report is obtained by the blockchain network performing an audit process based on the access record corresponding to the transaction data; The second sending module is used to send the first audit report to the client.

10. A device for processing access records, characterized in that: The device is applied to a blockchain network; The blockchain network is connected to a server; The server is connected to the client, and the method includes: A fourth acquisition module is used to acquire the access record sent by the server; the access record is determined by the server after the client accesses the target file; the access record is the access record of the client to the target file; A mapping module, used to map the access record into corresponding transaction data, and store the transaction data in the blockchain network; The first processing module is used to audit the access records corresponding to the transaction data to obtain a first audit report, and send the first audit report to the server so that the server sends the first audit report to the client.

11. An electronic device, characterized in that: include: A processor, a memory, and a computer program stored in the memory and capable of running on the processor, wherein when the computer program is executed by the processor, the steps of the method for processing access records as described in any one of claims 1-4 or 5-8 are implemented.

12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method for processing access records as described in any one of claims 1-4 or 5-8 are implemented.

Images