Block chain data encryption and decryption method and system

Abstract

The invention discloses a block chain data encryption and decryption method and system, and the encryption method comprises the steps: A1, carrying out the slitting processing of user request data, and obtaining M data packages; a2, performing key encryption processing on the M data packets to obtain M encrypted data packets; a3, performing secondary encryption processing on the M encrypted data packets to obtain a final ciphertext comprising M encrypted data secondary packets and corresponding M hash values; the decryption method comprises the steps that B1, M encrypted data secondary packets in a final ciphertext find corresponding encryption algorithms according to corresponding M hash values, and M encrypted data packets are obtained through inverse operation of the encryption algorithms; b2, performing secret key decryption processing on the M encrypted data packets to obtain M data packets; and B3, merging the M data packets to obtain user request data. According to the invention, data transmission with relatively high security is realized.

Description

Technical Field

[0001] The present invention relates to the field of data encryption technology, and in particular to a blockchain data encryption and decryption method and system. Background Art

[0002] Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, and encryption algorithm. Among them, the consensus mechanism is a mathematical algorithm that enables different nodes in the blockchain system to establish trust and obtain rights and interests. Blockchain is essentially a decentralized database. At the same time, as an underlying technology, it is a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information and generate the next block. Since the data on the blockchain cannot be deleted or tampered with, when users discover that some addresses or transaction information have been leaked, it is too late and no rescue measures can be taken. Therefore, compared with traditional fields, the privacy protection of blockchain is more important.

[0003] Most blockchain environments upload data to the chain in plain text or through hashing. In the case of ciphertext, the entire message is encrypted and then uploaded to the chain.

[0004] Hash chain needs to store plaintext data in other places, which is insecure in data privacy protection and may cause privacy data leakage in data sharing. The granularity of such operation is too large when sharing data, which will lead to some privacy data leakage.

[0005] Encrypting the entire message cannot achieve fine-grained sharing of data, resulting in the leakage of some private data. Moreover, if the secret key is leaked, the entire message data will be deciphered.

[0006] The Chinese invention patent application with application number 201410782683.0: "Data encryption and decryption method, device and communication system", has a specific technical solution: segment the data to be encrypted to generate segmented data; randomly select an encryption algorithm for the data to be encrypted; randomly generate a key corresponding to the encryption algorithm; use the encryption algorithm and key to encrypt the data to be encrypted to obtain encrypted segmented data; pack the encrypted segmented data to obtain encrypted segmented data blocks; combine and pack the encrypted segmented data blocks to obtain the final ciphertext. This solution is applied to the communication field, and only performs simple segmentation processing on the encrypted data, and the security of the data needs to be improved. Summary of the invention

[0007] The present invention aims to solve the technical problem that the data security of blockchain data transmission in the prior art needs to be improved. The present invention provides a blockchain data encryption and decryption method and system. The technical solution adopted by the present invention is:

[0008] The first aspect of the present invention provides a blockchain data encryption method, comprising the following steps:

[0009] A1, splits the user request data into M data packets in sequence;

[0010] A2, performing timestamp marking processing on the M data packets respectively according to the generation time of the M data packets, to obtain M data packets containing timestamps;

[0011] A3, performing key encryption processing on the M data packets containing the timestamps respectively, to obtain M encrypted data packets in sequence;

[0012] A4, performing time stamp marking processing on the M encrypted data packets respectively according to the generation time of the M encrypted data packets, to obtain M encrypted data packets containing time stamps;

[0013] A5, performing secondary encryption processing on the M encrypted data packets containing timestamps respectively to obtain final ciphertext including M encrypted data secondary packets and their corresponding M hash values;

[0014] The user request data includes a model name, a table name, a field name, and a user name; and M is a positive integer.

[0015] As a preferred solution, in step A1, the method of segmenting the user request data to obtain M data packets includes:

[0016] The user request data is segmented to obtain M=3 data packets, which are respectively recorded as a first data packet, a second data packet, and a third data packet;

[0017] The specific method of segmenting the user request data to obtain the first data packet, the second data packet and the third data packet is as follows:

[0018] Dividing the user request data into N data segments according to a preset sequence;

[0019] Extract X data segments to form a first data packet;

[0020] Extract Y data segments to form a second data packet;

[0021] Extracting Z data segments to form a third data packet;

[0022] Wherein, X, Y and Z are all positive integers, and X+Y+Z=N.

[0023] As a preferred solution, the X data segments of the first data are not adjacent to each other in the user requested data; the Y data segments of the second data are not adjacent to each other in the user requested data; and the Z data segments of the third data are not adjacent to each other in the user requested data.

[0024] As a preferred solution, the specific method of dividing the user request data into N data segments by a preset sequence is:

[0025] The user request data is irregularly and unequally divided into N data segments through a preset sequence, and the number of bytes corresponding to the N data segments are not equal to each other.

[0026] As a preferred solution, in step A3, the method of performing key encryption processing on the M data packets containing timestamps respectively to obtain M encrypted data packets in sequence includes:

[0027] The timestamp of the data packet is combined with the model name, table name, field name and user name through a preset hash function to generate a corresponding key, and finally the data packet is encrypted with the corresponding key to obtain the corresponding encrypted data packet.

[0028] As a preferred solution, in step A5, the method of the secondary encryption processing is specifically as follows:

[0029] A51, uses the timestamp of the encrypted data packet as a random number seed to generate a corresponding 64-Byte random number;

[0030] A52, generates a scheduling factor according to the generated random number, randomly selects 8 bits of the random number and combines them in order to generate an unsigned integer u, and then performs a modulo calculation on the unsigned integer u to obtain a modulo result;

[0031] A53, determining a hash algorithm according to the remainder result, and using the determined hash algorithm to calculate the random number to generate a new 64-byte random number;

[0032] A54, divide the new 64-byte random number into 8 groups, each with 8 bytes; calculate group 1+group 2+group 3+group 4+group 5+group 6+group 7+group 8 through XOR operation to get an 8-byte scheduling factor;

[0033] A55, using the 8-Byte scheduling factor to perform a combination of several encryption algorithms on the corresponding encrypted data packet to obtain a corresponding encrypted data secondary packet and a hash value.

[0034] A second aspect of the present invention provides a blockchain data encryption system, including a first smart contract module, a segmentation processing module, a first marking processing module, a first encryption module, a second marking processing module, a blockchain publishing terminal, and a second encryption module;

[0035] The first smart contract module is used to send the user request data to the segmentation processing module for segmentation processing;

[0036] The splitting processing module is used to split the user request data to obtain M data packets in sequence;

[0037] The first marking processing module is used to perform timestamp marking processing on the M data packets respectively according to the generation time of the M data packets, so as to obtain M data packets containing timestamps;

[0038] The first encryption module is used to perform key encryption processing on the M data packets containing timestamps respectively, to obtain M encrypted data packets in sequence;

[0039] The second marking processing module is used to perform time stamp marking processing on the M encrypted data packets according to the generation time of the M encrypted data packets, so as to obtain M encrypted data packets containing time stamps;

[0040] The blockchain publishing end is used to send the M encrypted data packets containing timestamps to the second encryption module; the second encryption module is deployed on a cloud server;

[0041] The second encryption module is used to perform secondary encryption processing on the M encrypted data packets containing timestamps respectively, to obtain M encrypted data secondary packets and M hash values.

[0042] The third aspect of the present invention also provides a blockchain data decryption method, comprising the following steps:

[0043] B1, the M encrypted data secondary packets in the final ciphertext find the corresponding encryption algorithm according to the corresponding M hash values, and obtain the M encrypted data packets containing timestamps through the inverse operation of the encryption algorithm;

[0044] B2, removing the timestamps corresponding to the M encrypted data packets containing timestamps, to obtain the M encrypted data packets;

[0045] B3, performing key decryption processing on the M encrypted data packets respectively to obtain the M data packets containing timestamps;

[0046] B4, removing the timestamps corresponding to the M data packets containing timestamps, to obtain the M data packets;

[0047] B5, merging the M data packets to obtain the user request data.

[0048] As a preferred solution, in step B3, the key decryption processing method is specifically as follows:

[0049] B31, calculate a value p using the user public key and decryption private key corresponding to the encrypted data packet;

[0050] B32, using the value p and the timestamp, model name, table name, field name, and user name corresponding to the encrypted data packet to perform hashing to calculate a decryption key;

[0051] B33, use the decryption key to decrypt the corresponding encrypted data packet to obtain the corresponding data packet.

[0052] The fourth aspect of the present invention also provides a blockchain data decryption system, including a blockchain receiving end, a first decryption module, a first tag removal module, a second smart contract module, a second decryption module, a second tag removal module and a merging processing module;

[0053] The blockchain receiving end is used to receive the final ciphertext and send the final ciphertext to the first decryption module;

[0054] The first decryption module is used to find the corresponding encryption algorithm for the M encrypted data secondary packets in the final ciphertext according to the corresponding M hash values, and obtain M encrypted data packets containing timestamps through the inverse operation of the encryption algorithm;

[0055] The first mark removal module is used to remove the timestamps corresponding to the M encrypted data packets containing timestamps to obtain M encrypted data packets.

[0056] The second smart contract module is used to send the M encrypted data packets to the second decryption module for key decryption processing;

[0057] The second decryption module is used to perform key decryption processing on the M encrypted data packets respectively to obtain M data packets containing timestamps;

[0058] The second tag removal module is used to remove the timestamps corresponding to the M data packets containing timestamps to obtain the M data packets.

[0059] The merging processing module is used to merge the M data packets to obtain user request data.

[0060] Compared with the prior art, the technical solution of the present invention has the following beneficial effects:

[0061] The present invention provides a blockchain data encryption and decryption method and system, which uses blockchain to call smart contracts to send user request data to a segmentation processing module for segmentation processing. The segmentation module first segments the data to be transmitted into a first data packet, a second data packet, and a third data packet, and uses the three data to perform time stamp marking and double encryption processing, thereby improving the encryption strength and greatly improving the security of data privacy protection. The risk of privacy data leakage in data sharing is greatly reduced. In this way, even if part of the data is leaked during data sharing, it will not cause the complete privacy data to be leaked.

[0062] The encryption and decryption algorithm provided by the present invention utilizes a complex plurality of hash algorithms to achieve a significant improvement in encryption strength. The hash algorithm is difficult to crack using current software, thereby greatly improving data transmission security. BRIEF DESCRIPTION OF THE DRAWINGS

[0063] Figure 1 A flowchart of a blockchain data encryption method provided by an embodiment of the present invention;

[0064] Figure 2 A flowchart of a blockchain data decryption method provided in an embodiment of the present invention. DETAILED DESCRIPTION

[0065] The accompanying drawings are only used for illustrative purposes and are not to be construed as limiting the present invention;

[0066] It should be clear that the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the embodiments of the present application.

[0067] The terms used in the embodiments of the present application are only for the purpose of describing specific embodiments, and are not intended to limit the embodiments of the present application. The singular forms of "a", "said" and "the" used in the embodiments of the present application and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used herein refers to and includes any or all possible combinations of one or more associated listed items.

[0068] When the following description refers to the drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. On the contrary, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the attached claims. In the description of the present application, it should be understood that the terms "first", "second", "third", etc. are only used to distinguish similar objects, and do not have to be used to describe a specific order or sequence, nor can they be understood as indicating or implying relative importance. For those of ordinary skill in the art, the specific meanings of the above terms in the present application can be understood according to the specific circumstances.

[0069] In addition, in the description of this application, unless otherwise specified, "multiple" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships may exist. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. The character " / " generally indicates that the previous and next associated objects are in an "or" relationship. The present invention is further described below in conjunction with the accompanying drawings and embodiments.

[0070] The present invention is further described below in conjunction with the accompanying drawings and embodiments.

[0071] Example 1

[0072] Please refer to Figure 1 , a blockchain data encryption method, comprising the following steps:

[0073] A1, splits the user request data into M data packets in sequence;

[0074] In a specific embodiment, in step A1, the method of segmenting the user request data to obtain M data packets includes:

[0075] The user request data is segmented to obtain M=3 data packets, which are respectively recorded as a first data packet, a second data packet, and a third data packet;

[0076] The specific method of segmenting the user request data to obtain the first data packet, the second data packet and the third data packet is as follows:

[0077] Dividing the user request data into N data segments according to a preset sequence;

[0078] Extract X data segments to form a first data packet;

[0079] Extract Y data segments to form a second data packet;

[0080] Extracting Z data segments to form a third data packet;

[0081] Wherein, X, Y and Z are all positive integers, and X+Y+Z=N.

[0082] In a specific embodiment, the X data segments of the first data are not adjacent to each other in the user request data; the Y data segments of the second data are not adjacent to each other in the user request data; and the Z data segments of the third data are not adjacent to each other in the user request data.

[0083] In a specific embodiment, the specific method of dividing the user request data into N data segments according to a preset sequence is:

[0084] The user request data is irregularly and unequally divided into N data segments through a preset sequence, and the number of bytes corresponding to the N data segments are not equal to each other.

[0085] Specifically, the preset sequence can divide the user request data into discontinuous segments, for example, extracting 0-2, 7-11, 52-77..112-117 bytes of the complete data and dividing them into the first data packet, so that the first data packet is an irregular unequal sequence, and even if the first data packet or other data packets are leaked, they cannot constitute complete data.

[0086] Through the above improvements, even if part of the data is leaked during data sharing, the complete privacy data will not be leaked.

[0087] A2, performing timestamp marking processing on the M data packets respectively according to the generation time of the M data packets, to obtain M data packets containing timestamps;

[0088] A3, performing key encryption processing on the M data packets containing the timestamps respectively, to obtain M encrypted data packets in sequence;

[0089] In a specific embodiment, in step A3, the method of performing key encryption processing on the M data packets containing timestamps respectively to obtain M encrypted data packets in sequence includes:

[0090] The timestamp of the data packet is combined with the model name, table name, field name and user name through a preset hash function to generate a corresponding key, and finally the data packet is encrypted with the corresponding key to obtain a corresponding encrypted data packet.

[0091] In a specific embodiment, in step A5, the method of the secondary encryption processing is specifically:

[0092] A51, uses the timestamp of the encrypted data packet as a random number seed to generate a corresponding 64-Byte random number;

[0093] A52, generates a scheduling factor according to the generated random number, randomly selects 8 bits of the random number and combines them in order to generate an unsigned integer u, and then performs a modulo calculation on the unsigned integer u to obtain a modulo result;

[0094] A53, determining a hash algorithm according to the remainder result, and using the determined hash algorithm to calculate the random number to generate a new 64-byte random number;

[0095] A54, divide the new 64-byte random number into 8 groups, each with 8 bytes; calculate group 1+group 2+group 3+group 4+group 5+group 6+group 7+group 8 through XOR operation to obtain an 8-byte scheduling factor;

[0096] It should be noted that the SM2 hash algorithm generates a hash value after padding and iterative compression, and the hash value length is 256 bits; the SHA-224 hash algorithm protects data from being intercepted or tampered with by converting data such as messages and files into a fixed-length 256-bit, indistinguishable string.

[0097] A55, using the 8-Byte scheduling factor to perform a combination of several encryption algorithms on the corresponding encrypted data packet to obtain a corresponding encrypted data secondary packet and a hash value.

[0098] Specifically, the 8-Byte scheduling factor is used to perform combined encryption of multiple encryption algorithms; the 0-255 values ​​corresponding to each Byte are pre-divided into 8 intervals, including: [0-31], [32-63], [64-95], [96-127], [128-159], [160-191], [192-223], [224-255], each interval corresponds to a preset encryption algorithm, for example: these 8 intervals correspond to AES128, AES256, 3DES, ECC256, RSA1024, RSA2048, SM3, SM4 algorithms respectively; the encryption algorithm corresponding to the interval where the value of the first Byte of the scheduling factor is located is used. The transmission data is encrypted by the encryption algorithm to obtain result 1. For example, the value of the first Byte is 10, which corresponds to the interval [0-31]. The corresponding encryption algorithm is AES128, so the plaintext is encrypted by the AES128 algorithm to obtain result 1; then the result 1 is encrypted by the encryption algorithm corresponding to the interval where the value of the second Byte of the scheduling factor is located, and result 2 is obtained. For example, the value of the second Byte is 240, which corresponds to the interval [224-255]. The corresponding encryption algorithm is SM4, so the result 1 is encrypted by the SM4 algorithm to obtain result 2; the result 8 is encrypted by the encryption algorithm corresponding to the interval where the value of the eighth Byte of the scheduling factor is located to obtain the final ciphertext.

[0099] It should be noted that the user request data includes a model name, a table name, a field name and a user name; M is a positive integer.

[0100] Example 2

[0101] A blockchain data encryption system, comprising a first smart contract module, a segmentation processing module, a first marking processing module, a first encryption module, a second marking processing module, a blockchain publishing terminal and a second encryption module;

[0102] The first smart contract module is used to send the user request data to the segmentation processing module for segmentation processing;

[0103] The splitting processing module is used to split the user request data to obtain M data packets in sequence;

[0104] The first marking processing module is used to perform timestamp marking processing on the M data packets respectively according to the generation time of the M data packets, so as to obtain M data packets containing timestamps;

[0105] The first encryption module is used to perform key encryption processing on the M data packets containing timestamps respectively, to obtain M encrypted data packets in sequence;

[0106] The second marking processing module is used to perform time stamp marking processing on the M encrypted data packets according to the generation time of the M encrypted data packets, so as to obtain M encrypted data packets containing time stamps;

[0107] The blockchain publishing end is used to send the M encrypted data packets containing timestamps to the second encryption module; the second encryption module is deployed on a cloud server;

[0108] The second encryption module is used to perform secondary encryption processing on the M encrypted data packets containing timestamps respectively, to obtain M encrypted data secondary packets and M hash values.

[0109] Example 3

[0110] Please refer to Figure 2 A blockchain data decryption method based on the blockchain data encryption method described in Example 1 comprises the following steps:

[0111] B1, the M encrypted data secondary packets in the final ciphertext find the corresponding encryption algorithm according to the corresponding M hash values, and obtain the M encrypted data packets containing timestamps through the inverse operation of the encryption algorithm;

[0112] B2, removing the timestamps corresponding to the M encrypted data packets containing timestamps, to obtain the M encrypted data packets;

[0113] B3, performing key decryption processing on the M encrypted data packets respectively to obtain the M data packets containing timestamps;

[0114] B4, removing the timestamps corresponding to the M data packets containing timestamps, to obtain the M data packets;

[0115] B5, merging the M data packets to obtain the user request data.

[0116] In a specific embodiment,

[0117] In step B3, the key decryption processing method is specifically as follows:

[0118] B31, calculate a value p using the user public key and decryption private key corresponding to the encrypted data packet;

[0119] B32, using the value p and the timestamp, model name, table name, field name, and user name corresponding to the encrypted data packet to perform hashing to calculate a decryption key;

[0120] B33, use the decryption key to decrypt the corresponding encrypted data packet to obtain the corresponding data packet.

[0121] Example 4

[0122] A blockchain data decryption system, comprising a blockchain receiving end, a first decryption module, a first tag removal module, a second smart contract module, a second decryption module, a second tag removal module and a merging processing module;

[0123] The blockchain receiving end is used to receive the final ciphertext and send the final ciphertext to the first decryption module;

[0124] The first decryption module is used to find the corresponding encryption algorithm for the M encrypted data secondary packets in the final ciphertext according to the corresponding M hash values, and obtain M encrypted data packets containing timestamps through the inverse operation of the encryption algorithm;

[0125] The first mark removal module is used to remove the timestamps corresponding to the M encrypted data packets containing timestamps to obtain M encrypted data packets.

[0126] The second smart contract module is used to send the M encrypted data packets to the second decryption module for key decryption processing;

[0127] The second decryption module is used to perform key decryption processing on the M encrypted data packets respectively to obtain M data packets containing timestamps;

[0128] The second tag removal module is used to remove the timestamps corresponding to the M data packets containing timestamps to obtain the M data packets.

[0129] The merging processing module is used to merge the M data packets to obtain user request data.

[0130] Obviously, the above embodiments of the present invention are merely examples for clearly illustrating the present invention, and are not intended to limit the embodiments of the present invention. For those skilled in the art, other different forms of changes or modifications can be made based on the above description. It is not necessary and impossible to list all the embodiments here. Any modifications, equivalent substitutions and improvements made within the spirit and principles of the present invention should be included in the protection scope of the claims of the present invention.

Claims

1. A blockchain data encryption method, characterized in that: The following steps are involved: A1, splits the user request data into M data packets in sequence; A2, performing timestamp marking processing on the M data packets respectively according to the generation time of the M data packets, to obtain M data packets containing timestamps; A3, performing key encryption processing on the M data packets containing the timestamps respectively, to obtain M encrypted data packets in sequence; A4, performing time stamp marking processing on the M encrypted data packets respectively according to the generation time of the M encrypted data packets, to obtain M encrypted data packets containing time stamps; A5, performing secondary encryption processing on the M encrypted data packets containing timestamps respectively to obtain final ciphertext including M encrypted data secondary packets and their corresponding M hash values; The user request data includes a model name, a table name, a field name, and a user name; and M is a positive integer.

2. A blockchain data encryption method according to claim 1, characterized in that: In step A1, the method of segmenting the user request data to obtain M data packets includes: The user request data is segmented and processed to obtain M=3 data packets, which are respectively recorded as a first data packet, a second data packet, and a third data packet; The specific method of segmenting the user request data to obtain the first data packet, the second data packet and the third data packet is as follows: Dividing the user request data into N data segments according to a preset sequence; Extract X data segments to form a first data packet; Extract Y data segments to form a second data packet; Extracting Z data segments to form a third data packet; Wherein, X, Y and Z are all positive integers, and X+Y+Z=N.

3. A blockchain data encryption method according to claim 2, characterized in that: The X data segments of the first data are not adjacent to each other in the user requested data; the Y data segments of the second data are not adjacent to each other in the user requested data; and the Z data segments of the third data are not adjacent to each other in the user requested data.

4. A blockchain data encryption method according to claim 2, characterized in that: The specific method of dividing the user request data into N data segments by a preset sequence is: The user request data is irregularly and unequally divided into N data segments through a preset sequence, and the number of bytes corresponding to the N data segments are not equal to each other.

5. A blockchain data encryption method according to claim 1, characterized in that: In step A3, the method of performing key encryption processing on the M data packets containing timestamps respectively to obtain M encrypted data packets in sequence includes: The timestamp of the data packet is combined with the model name, table name, field name and user name through a preset hash function to generate a corresponding key, and finally the data packet is encrypted with the corresponding key to obtain a corresponding encrypted data packet.

6. A blockchain data encryption method according to claim 1, characterized in that: In step A5, the method of the secondary encryption processing is specifically as follows: A51, uses the timestamp of the encrypted data packet as a random number seed to generate a corresponding 64-Byte random number; A52, generates a scheduling factor according to the generated random number, randomly selects 8 bits of the random number and combines them in order to generate an unsigned integer u, and then performs a modulo calculation on the unsigned integer u to obtain a modulo result; A53, determining a hash algorithm according to the remainder result, and using the determined hash algorithm to calculate the random number to generate a new 64-byte random number; A54, divide the new 64-byte random number into 8 groups, each with 8 bytes; calculate group 1+group 2+group 3+group 4+group 5+group 6+group 7+group 8 through XOR operation to obtain an 8-byte scheduling factor; A55, using the 8-Byte scheduling factor to perform a combination of several encryption algorithms on the corresponding encrypted data packet to obtain a corresponding encrypted data secondary packet and a hash value.

7. A blockchain data encryption system, characterized in that: It includes a first smart contract module, a segmentation processing module, a first marking processing module, a first encryption module, a second marking processing module, a blockchain publishing terminal and a second encryption module; The first smart contract module is used to send the user request data to the segmentation processing module for segmentation processing; The splitting processing module is used to split the user request data to obtain M data packets in sequence; The first marking processing module is used to perform timestamp marking processing on the M data packets respectively according to the generation time of the M data packets, so as to obtain M data packets containing timestamps; The first encryption module is used to perform key encryption processing on the M data packets containing timestamps respectively, to obtain M encrypted data packets in sequence; The second marking processing module is used to perform time stamp marking processing on the M encrypted data packets according to the generation time of the M encrypted data packets, so as to obtain M encrypted data packets containing time stamps; The blockchain publishing end is used to send the M encrypted data packets containing timestamps to the second encryption module; the second encryption module is deployed on a cloud server; The second encryption module is used to perform secondary encryption processing on the M encrypted data packets containing timestamps respectively, to obtain M encrypted data secondary packets and M hash values.

8. A blockchain data decryption method based on a blockchain data encryption method according to any one of claims 1 to 6, characterized in that: The following steps are involved: B1, the M encrypted data secondary packets in the final ciphertext find the corresponding encryption algorithm according to the corresponding M hash values, and obtain the M encrypted data packets containing timestamps through the inverse operation of the encryption algorithm; B2, removing the timestamps corresponding to the M encrypted data packets containing timestamps, to obtain the M encrypted data packets; B3, performing key decryption processing on the M encrypted data packets respectively to obtain the M data packets containing timestamps; B4, removing the timestamps corresponding to the M data packets containing timestamps, to obtain the M data packets; B5, merging the M data packets to obtain the user request data.

9. A blockchain data decryption method according to claim 8, characterized in that: In step B3, the key decryption processing method is specifically as follows: B31, calculate a value p using the user public key and decryption private key corresponding to the encrypted data packet; B32, using the value p and the timestamp, model name, table name, field name, and user name corresponding to the encrypted data packet to perform hashing to calculate a decryption key; B33, use the decryption key to decrypt the corresponding encrypted data packet to obtain the corresponding data packet.

10. A blockchain data decryption system, characterized in that: It includes a blockchain receiving end, a first decryption module, a first tag removal module, a second smart contract module, a second decryption module, a second tag removal module and a merging processing module; The blockchain receiving end is used to receive the final ciphertext and send the final ciphertext to the first decryption module; The first decryption module is used to find the corresponding encryption algorithm for the M encrypted data secondary packets in the final ciphertext according to the corresponding M hash values, and obtain M encrypted data packets containing timestamps through the inverse operation of the encryption algorithm; The first mark removal module is used to remove the timestamps corresponding to the M encrypted data packets containing timestamps to obtain M encrypted data packets. The second smart contract module is used to send the M encrypted data packets to the second decryption module for key decryption processing; The second decryption module is used to perform key decryption processing on the M encrypted data packets respectively to obtain M data packets containing timestamps; The second tag removal module is used to remove the timestamps corresponding to the M data packets containing timestamps to obtain the M data packets. The merging processing module is used to merge the M data packets to obtain user request data.

Images