Data asset circulation method and device, equipment, storage medium and program product

Abstract

The invention relates to the technical field of block chains, in particular to a data asset circulation method and device, equipment, a storage medium and a program product, and the method comprises the steps: transmitting generated identification information to a supply end; receiving a target data asset identity; binding and storing the target data asset identity and the supply end identity on an internal block chain; receiving demand request information of the data assets; determining a supply end identity according to the request data assets and the block chain; sending the demand request information to a supply end; receiving a second data asset identity; comparing and verifying the second data asset identity with a target data asset identity stored in the block chain to obtain a verification result; and sending the verification result to the supply end. According to the method and the device, the data assets are ensured not to go out of the local supply end before circulation, the server is not touched and effectively certificates in the circulation process, the demand end reliably obtains the data assets and authorization thereof after circulation, and the safety and credibility of data asset circulation are effectively improved.

Description

Technical Field

[0001] The present disclosure relates to the field of blockchain technology, and in particular to a method, device, equipment, storage medium and program product for the circulation of data assets. Background Art

[0002] With the rapid development of information technology, data assets have become a basic resource for the development of digital technology. They are an important production factor for innovative breakthroughs in new-generation information technologies such as artificial intelligence and for empowering social development. They are also a symbol of "wealth" in the digital age, and their value is becoming increasingly prominent.

[0003] In order to achieve the smooth circulation of data assets, blockchain technology, digital watermark technology and encryption authorization technology respectively ensure the transparency of the source and circulation process of data assets, provide methods to verify the authenticity of data assets, and protect the security of data assets during transmission and storage, thereby improving the security and efficiency of the circulation of data assets between the supply side and the demand side through the service side to a certain extent.

[0004] However, by forwarding data assets from the supply side to the demand side through the server, data assets still face the risk of being illegally copied and tampered with by the server during the circulation process. This not only damages the rights and interests of the supply and demand sides of data assets, but also affects the efficiency and security of data asset circulation. Summary of the invention

[0005] In view of this, the present disclosure provides a method, apparatus, device, storage medium and program product for circulating data assets to solve the problem that data assets are at risk of being illegally copied and tampered with by the server during circulation.

[0006] In a first aspect, the present disclosure provides a method for circulating data assets, which is applied to a server and includes: Sending the generated identification information to the supplier, wherein the identification information is information generated according to the data asset format sent by the supplier and used to uniquely characterize the data asset format, and the data asset format is used to characterize the type and form of the data asset provided by the supplier; Receive a target data asset identity, wherein the target data asset identity is used to uniquely characterize the target data asset, the target data asset is a first data asset in which the identification information is successfully embedded and can be successfully read, and the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; Bind the target data asset identity and the supplier identity and store them on the internal blockchain; Receiving a data asset demand request message, wherein the demand request message includes a requested data asset; Determine the identity of the supplier based on the request data asset and blockchain; Send demand request information to the supply side; Receiving a second data asset identity, wherein the second data asset identity is used to uniquely characterize the second data asset, and the second data asset is obtained by the supply side extracting the local data asset according to the demand request information; Compare and verify the second data asset identity with the target data asset identity stored in the blockchain to obtain a verification result; Send the verification results to the supplier.

[0007] In the disclosed embodiment, the service side identifies the data asset format of the supply side, generates identification information, receives the target data asset embedded and successfully read by the supply side, and binds the target data asset identity and the supply side identity to be stored on the blockchain; the service side receives the data asset request sent by the demand side, and the service side forwards the data asset request to the supply side based on the blockchain; the service side receives and verifies the second data asset obtained by the supply side extracting the local data asset according to the data asset request, and sends the verification result to the supply side. This ensures that the service side does not touch the data asset during the circulation of the data asset, thereby preventing tampering, and can effectively store evidence on the blockchain, effectively improving the security and credibility of the circulation of data assets.

[0008] In a second aspect, the present disclosure provides a method for circulating data assets, which is applied to a supply side and includes: Sending a data asset format, wherein the data asset format is used to characterize the type of the data asset; Receiving identification information, wherein the identification information is used to uniquely characterize a data asset format; Embed the identification information into the first data asset, wherein the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; Using the target device to perform an embedding and identifying operation and a reading operation on the first data asset, obtaining a target data asset, wherein the target data asset refers to the first data asset in which the identification information is successfully embedded and can be successfully read, and the target device is a device authorized by the service end to be deployed locally on the supply end; Sending a target data asset identity of the target data asset to the server, wherein the target data asset identity is used to uniquely characterize the target data asset; Receive demand request information, where the demand request information is information sent by the demand side to the server side when obtaining the requested data asset; Extracting the local second data asset according to the demand request information; Sending a second data asset identity of the second data asset to the server according to the target device and the second data asset; Receive the verification result, wherein the verification result is the result of comparing the second data asset identity with the target data asset identity stored in the blockchain within the server; The second data asset is sent to the demand side through a target channel, wherein the target channel is a channel provided by the service side to the demand side for accessing the second data asset.

[0009] In the disclosed embodiment, the supply end receives identification information sent by the service end, and embeds the identification information into the first data asset. Based on the authorization of the server end, the target device arranged locally at the supply end selects the target data asset from the first data asset, and generates the target data asset identity and sends it to the server end; the supply end receives the request information from the demand end sent by the server end, and then obtains the local second data asset, receives the verification result of the second data asset identity of the second data asset by the server end, and then sends the second data asset to the demand end through the target channel provided by the server end. This ensures that the data asset does not leave the local supply end before circulation, and there is no need to know the identity of the demand end during the circulation process. It only needs to complete the circulation of the data asset based on the target channel provided by the server end, which effectively improves the security and credibility of the circulation of data assets, protects the rights and interests of data asset owners, and has important application value.

[0010] In a third aspect, the present disclosure provides a method for circulating data assets, which is applied to the demand side and includes: Send data asset demand request information to the server; A second data asset is received, wherein the second data asset is obtained by the supply side after extracting a local data asset according to the demand request information.

[0011] In the disclosed embodiment, by directly sending demand request information for data assets to the service end, the demand end can receive the second data asset obtained by the supply end after extracting the local data asset based on the demand request information. At this time, the demand end does not need to know the identity of the supply end, ensuring that the demand end can reliably obtain the data asset after the data asset is circulated, effectively improving the security and credibility of the circulation of data assets, protecting the rights and interests of data asset owners, and having important application value.

[0012] In a fourth aspect, the present disclosure provides a device for data asset circulation, the device being a server, and comprising: A first sending module is used to send the generated identification information to the supply end, wherein the identification information is information generated according to the data asset format sent by the supply end and used to uniquely characterize the data asset format, and the data asset format is used to characterize the type form of the data asset provided by the supply end; A first receiving module is used to receive a target data asset identity, wherein the target data asset identity is used to uniquely characterize the target data asset, the target data asset is a first data asset in which the identification information is successfully embedded and can be successfully read, and the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; The binding module is used to bind the target data asset identity and the supplier identity and store them on the internal blockchain; A second receiving module is used to receive demand request information of data assets, wherein the demand request information includes requested data assets; A determination module, used to determine the identity of the supplier based on the request data asset and the blockchain; A second sending module is used to send the demand request information to the supply end; A third receiving module is used to receive a second data asset identity, wherein the second data asset identity is used to uniquely characterize the second data asset, and the second data asset is obtained by the supply side extracting the local data asset according to the demand request information; A verification module, used to compare and verify the second data asset identity with the target data asset identity stored in the blockchain to obtain a verification result; The third sending module is used to send the verification result to the supply end.

[0013] In a fifth aspect, the present disclosure provides a device for circulating data assets, the device being a supply end, and comprising: A fourth sending module, used to send a data asset format, wherein the data asset format is used to characterize the type of the data asset; A fourth receiving module, configured to receive identification information, wherein the identification information is used to uniquely characterize a data asset format; An embedding module, configured to embed the identification information into the first data asset, wherein a data asset format of the first data asset is the same as a data asset format corresponding to the identification information; A first obtaining module is used to perform an embedding identification operation and a reading operation on a first data asset using a target device to obtain a target data asset, wherein the target data asset refers to a first data asset in which identification information is successfully embedded and can be successfully read, and the target device is a device authorized by the service end to be deployed locally on the supply end; A fifth sending module, configured to send a target data asset identity of the target data asset to a server, wherein the target data asset identity is used to uniquely characterize the target data asset; A fifth receiving module, configured to receive demand request information, wherein the demand request information is information sent by the demand end when obtaining a requested data asset from the server end; An extraction module, used to extract the local second data asset according to the demand request information; A sixth sending module, configured to send the second data asset identity of the second data asset to the server according to the target device and the second data asset; A sixth receiving module is used to receive a verification result, wherein the verification result is a result of comparing and verifying the second data asset identity with the target data asset identity that has been stored in the blockchain inside the server; The seventh sending module is used to send the second data asset to the demand side through the target channel, wherein the target channel is a channel provided by the service side to the demand side for accessing the second data asset.

[0014] In a sixth aspect, the present disclosure provides a device for data asset circulation, the device being a demand side, and the device comprising: An eighth sending module, used to send demand request information of data assets to the server; The seventh receiving module is used to receive the second data asset, wherein the second data asset is obtained by the supply side after extracting the local data asset according to the demand request information.

[0015] In the seventh aspect, the present disclosure provides a computer device, comprising: a memory and a processor, the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the data asset circulation method of the first aspect and any corresponding embodiment thereof, or the data asset circulation method of the second aspect and any corresponding embodiment thereof, or the data asset circulation method of the third aspect and any corresponding embodiment thereof, by executing the computer instructions.

[0016] In an eighth aspect, the present disclosure provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the method for data asset circulation of the first aspect and any corresponding embodiment thereof, or the method for data asset circulation of the second aspect and any corresponding embodiment thereof, or the method for data asset circulation of the third aspect and any corresponding embodiment thereof.

[0017] In a ninth aspect, the present disclosure provides a computer program product, comprising computer instructions, the computer instructions being used to enable a computer to execute the method for data asset circulation of the first aspect and any corresponding embodiment thereof, or the method for data asset circulation of the second aspect and any corresponding embodiment thereof, or the method for data asset circulation of the third aspect and any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the specific embodiments of the present disclosure or the technical solutions in the prior art, the drawings required for use in the specific embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present disclosure. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0019] Figure 1 is a flowchart of a method for circulating data assets according to an embodiment of the present disclosure; Figure 2 is a flowchart of a method for circulating data assets according to another embodiment of the present disclosure; Figure 3 is a flowchart of a method for circulating data assets according to another embodiment of the present disclosure; Figure 4 is a schematic diagram of the overall system flow of data asset circulation according to an embodiment of the present disclosure; Figure 5 is a structural block diagram of a service end for data asset circulation according to an embodiment of the present disclosure; Figure 6 is a structural block diagram of the supply side of data asset circulation according to an embodiment of the present disclosure; Figure 7 is a structural block diagram of the demand side of data asset circulation according to an embodiment of the present disclosure; Figure 8 It is a schematic diagram of the hardware structure of the computer device of the embodiment of the present disclosure. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solution and advantages of the embodiments of the present disclosure clearer, the technical solution in the embodiments of the present disclosure will be clearly and completely described below in conjunction with the drawings in the embodiments of the present disclosure. Obviously, the described embodiments are part of the embodiments of the present disclosure, rather than all the embodiments. Based on the embodiments in the present disclosure, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present disclosure.

[0021] In the process of implementing data asset flow by relevant technologies, the data assets are forwarded from the supply side to the demand side by the server side. However, the data assets are still faced with the risk of being illegally copied and tampered with by the server side during the circulation process. This not only damages the rights and interests of the supply and demand sides of data assets, but also affects the efficiency and security of data asset circulation.

[0022] In order to solve the above problems, according to an embodiment of the present disclosure, a method embodiment of data asset circulation is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0023] In this embodiment, a method for circulating data assets is provided, such as Figure 1 As shown, Figure 1 The flowchart of the method for data asset circulation according to the embodiment of the present disclosure is as follows. The method can be applied to the server side. The method flow includes the following steps: Step S101, sending the generated identification information to the supplier, wherein the identification information is information generated according to the data asset format sent by the supplier and used to uniquely characterize the data asset format, and the data asset format is used to characterize the type and form of the data asset provided by the supplier; Step S102, receiving a target data asset identity, wherein the target data asset identity is used to uniquely characterize the target data asset, the target data asset is a first data asset in which identification information is successfully embedded and can be successfully read, and the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; Step S103, binding the target data asset identity and the supplier identity and storing them on the internal blockchain; Step S104, receiving data asset demand request information, wherein the demand request information includes the requested data asset; Step S105, determining the identity of the supplier based on the requested data asset and the blockchain; Step S106, sending the demand request information to the supply side; Step S107, receiving a second data asset identity, wherein the second data asset identity is used to uniquely characterize the second data asset, and the second data asset is obtained by the supply side extracting the local data asset according to the demand request information; Step S108, comparing and verifying the second data asset identity with the target data asset identity stored in the blockchain to obtain a verification result; Step S109, sending the verification result to the supply end.

[0024] Optionally, in the disclosed embodiment, the server will first receive the data asset format sent by the supplier, then generate unique identification information based on the data asset format, and then send the identification information to the supplier. It can be understood that the data asset format here is some type of form, such as audio or video, etc. The server only obtains the data asset format of the supplier, but does not read the content of the data asset of the supplier. The purpose of obtaining the data asset format of the supplier is to generate identification information consistent with the data asset format of the supplier, so that the identification information can be effectively embedded in the data asset of the supplier.

[0025] The identification information here can be a dark watermark, or other information that can uniquely characterize the type of data assets, which is not specifically limited in the embodiments of the present disclosure. The subsequent embodiments are described by replacing the identification information with a dark watermark.

[0026] The service end receives the target data asset identity sent by the supply end. The target data asset identity here corresponds to the target data asset and represents the only target data asset. The identity can be an identifier with uniqueness and security characteristics such as a hash value, a distributed digital identity, or a digital object unique identifier. In addition, the target data asset refers to the first data asset in which the identification information is successfully embedded and can be successfully read, and the first data asset refers to a data asset whose data asset format is the same as the data asset format of the identification information, so the target data asset here should be included in the first data asset.

[0027] The server stores the target data asset identity and the supplier identity on the blockchain, and stores data asset information such as name, application, size, quantity, etc.

[0028] It should be understood that the server does not store or read the data assets of the supplier. The data assets are identified through the data asset identity. The binding and storage of the supplier identity and the target data asset identity will make it clear that the data asset rights belong to the supplier.

[0029] Afterwards, the server is responsible for communicating with the demand side, that is, the data asset demand request information of the demand side is first obtained by the server. Based on the requested data asset, the server queries the data asset required by the demand side from the target data asset identity information and the supply side identity information stored in the blockchain, and extracts the supply side identity information corresponding to the required data asset.

[0030] Furthermore, the server will aggregate the supply and demand request information of the data assets, match the supply information according to the demand request information and forward the demand request information of the demand side to the supply side. The server only transmits the demand request information to the supply side without transmitting the identity of the demand side.

[0031] The server will then receive the second data asset identity, where the second data asset identity is a unique identity generated by the second data asset after the supplier extracts the local second data asset according to the demand request information.

[0032] The server compares and verifies the identity of the second data asset with the identity of the target data asset stored in the blockchain. If the identity of the second data asset is the same as the identity of the target data asset stored in the blockchain, the second data asset is considered to be a data asset identified by the server and stored by the server, ensuring that the data asset on the supply side can be authenticated and stored by the server during circulation, and then the verification result is transmitted to the supply side.

[0033] In the disclosed embodiment, the service side identifies the data asset format of the supply side, generates identification information, receives the target data asset embedded and successfully read by the supply side, and binds the target data asset identity and the supply side identity to be stored on the blockchain; the service side receives the data asset request sent by the demand side, and the service side forwards the data asset request to the supply side based on the blockchain; the service side receives and verifies the second data asset obtained by the supply side extracting the local data asset according to the data asset request, and sends the verification result to the supply side. This ensures that the service side does not touch the data asset during the circulation of the data asset, thereby preventing tampering, and can effectively store evidence on the blockchain, effectively improving the security and credibility of the circulation of data assets.

[0034] In some optional embodiments, the method further comprises: Send the decryption algorithm to the demand side; When receiving the completed delivery instruction, the identity of the demand side is stored in the blockchain.

[0035] Optionally, in the disclosed embodiment, the server will provide an encryption method for the local data assets of the supply side, and will also send the decryption algorithm to the demand side, so that the demand side can implement decryption authorization for the second data assets fed back by the supply side based on the decryption algorithm.

[0036] In addition, when the supply side flows the second data resource to the demand side, since it does not know the identity of the demand side, in order to achieve the smooth flow of data resources, the service side provides a target channel, which is a channel provided by the service side to the demand side to access the second data asset.

[0037] After the server receives the completed delivery instruction sent by the demand side, the identity of the demand side can be stored in the blockchain to prove that the data asset right (i.e., the second data asset right) currently belongs to the demand side.

[0038] In the disclosed embodiment, the server provides encryption methods, target channels, and sets the identity of the demand side on the blockchain to protect the security of the supply side data assets to the greatest extent, effectively store the ownership and transfer of data assets, and clearly verify that the demand side has obtained authorized encrypted data assets, providing reliable support for the circulation of data assets.

[0039] In some optional implementations, the identity of the demand side is stored in the blockchain, including: Get the first place where the supplier's identity is stored on the blockchain; The second location for storing the identity of the demand side is determined based on the first location, wherein the second location is used to represent that the ownership of the second data asset has been circulated from the supply side to the demand side.

[0040] Optionally, in order to clearly know the changes in the ownership of the second data asset before and after, the demand-side identity can be continued on the basis of the evidence that the data asset identity and the supply-side identity are bound together.

[0041] Furthermore, the supply-side identity can be obtained first at the first position where it is stored in the blockchain, and then the demand-side identity can be placed after the first position. Here, the demand-side identity is placed after the demand-side identity is stored in the second position in the blockchain.

[0042] In the disclosed embodiments, blockchain evidence is stored when the ownership of data assets changes, which effectively stores the ownership and transfer of data assets, and clearly verifies the data assets obtained by the demand side, providing reliable support for the circulation of data assets.

[0043] In this embodiment, a method for circulating data assets is also provided. Figure 2 As shown, the method is applied to the supply side, and the method includes: Step S201, sending a data asset format, wherein the data asset format is used to characterize the type of the data asset; Step S202, receiving identification information, wherein the identification information is used to uniquely characterize the format of the data asset; Step S203, embedding the identification information into the first data asset, wherein the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; Step S204, using the target device to perform an embedding identification operation and a reading operation on the first data asset to obtain a target data asset, wherein the target data asset refers to the first data asset whose identification information is successfully embedded and can be successfully read, and the target device is a device authorized by the server to be deployed locally on the supply side; Step S205, sending the target data asset identity of the target data asset to the server, wherein the target data asset identity is used to uniquely characterize the target data asset; Step S206, receiving demand request information, wherein the demand request information is information sent by the demand side when obtaining the requested data asset from the server side; Step S207, extracting the local second data asset according to the demand request information; Step S208, sending the second data asset identity of the second data asset to the server according to the target device and the second data asset; Step S209, receiving the verification result, wherein the verification result is the result of comparing the second data asset identity with the target data asset identity stored in the blockchain inside the server; Step S210: Send the second data asset to the demand side through a target channel, wherein the target channel is a channel provided by the service side to the demand side for accessing the second data asset.

[0044] Optionally, the data asset format of the supplier is read locally on the supplier, and the reading process will be completed by the target device configured on the supplier by the server, and the obtained data asset format type will be transmitted to the server. Then, the identification information sent by the server is received, where the identification information is used to uniquely characterize the data asset format. The introduction based on the identification information can be found in the above embodiment, which will not be repeated here. The dark watermark can be used instead in the following text.

[0045] The embedding of the dark watermark is realized by the target device authorized by the server and deployed locally on the supplier side. After the dark watermark is embedded in the local data asset of the supplier side, the data asset embedded with the dark watermark is obtained in the local database of the supplier side. Furthermore, the target device arranged locally at the supply end detects whether the dark watermark is embedded successfully, and detects whether the dark watermark that is embedded successfully can be read; the first data asset in which the dark watermark is embedded successfully and can be successfully read is identified as the target data asset, and the target device is used to extract the identity of the target data asset to obtain the target data asset identity, and the target data asset identity is sent to the server.

[0046] The supply side receives the demand request information sent by the demand side to the server side, and extracts the corresponding second data asset locally based on the demand request information. If the target device cannot recognize the dark watermark during extraction, the target device sends an instruction to the supply side to re-extract the second data asset; if the dark watermark can be recognized, the target device confirms that the supply side has extracted the data asset marked with the dark watermark by the server side.

[0047] The asset identity of the second data asset embedded with the dark watermark is extracted and transmitted to the server. The server compares and verifies the second data asset identity with the target data asset identity stored in the blockchain inside the server, and sends the verification result to the supply end.

[0048] After receiving the verification result, if the verification result shows that the identity of the second data asset is consistent with the identity of the target data asset in the blockchain, the second data asset is sent to the demand side through the target channel. It can be understood that this target channel is a channel provided by the service side to the demand side to access the second data asset.

[0049] In the disclosed embodiment, the supply end receives identification information sent by the service end, and embeds the identification information into the first data asset. Based on the authorization of the server end, the target device arranged locally at the supply end selects the target data asset from the first data asset, and generates the target data asset identity and sends it to the server end; the supply end receives the request information from the demand end sent by the server end, and then obtains the local second data asset, receives the verification result of the second data asset identity of the second data asset by the server end, and then sends the second data asset to the demand end through the target channel provided by the server end. This ensures that the data asset does not leave the local supply end before circulation, and there is no need to know the identity of the demand end during the circulation process. It only needs to complete the circulation of the data asset based on the target channel provided by the server end, which effectively improves the security and credibility of the circulation of data assets, protects the rights and interests of data asset owners, and has important application value.

[0050] In some optional implementations, sending the second data asset to the demand end through the target channel includes: encrypting the second data asset using the target device to obtain an encrypted data asset; Send the encrypted data assets to the demand side through the target channel.

[0051] Optionally, the target device arranged at the supply end encrypts the second data asset stored locally at the supply end, so that the second data asset embedded with the dark watermark can be accessed only after authorization. The encryption technology used can be in-application encryption, database encryption gateway, TDE (Transparent Data Encryption), FDE (Full-Disk Encryption) and other encryption technologies.

[0052] The encrypted data assets are then sent to the demand side through the target channel.

[0053] In the embodiments of the present disclosure, encryption technology is used to protect the security of data assets and prevent tampering of data assets during circulation.

[0054] In this embodiment, a method for circulating data assets is also provided. Figure 3 As shown, the method is applied to the demand side, and the method includes: Step S301, sending data asset demand request information to the server; Step S302, receiving a second data asset, wherein the second data asset is obtained by the supply side after extracting a local data asset according to the demand request information.

[0055] Optionally, in an embodiment of the present disclosure, the demand side obtains demand request information initiated by a user, and then receives a second data asset from the supply side, wherein the second data asset is obtained by the supply side after extracting local data assets according to the demand request information.

[0056] In addition, the demand side is a second data asset received through a target channel provided by the service side.

[0057] In the disclosed embodiment, by directly sending demand request information for data assets to the service end, the demand end can receive the second data asset obtained by the supply end after extracting the local data asset based on the demand request information. At this time, the demand end does not need to know the identity of the supply end, ensuring that the demand end can reliably obtain the data asset after the data asset is circulated, effectively improving the security and credibility of the circulation of data assets, and protecting the rights and interests of data asset owners.

[0058] In some optional embodiments, the method further comprises: Receiving a decryption algorithm sent by the server and an encrypted data asset sent by the supplier, wherein the encrypted data asset is a data asset obtained by encrypting the second data asset by the target device, and the target device is a device authorized by the server to be deployed locally on the supplier; Decrypt encrypted data assets based on the decryption algorithm.

[0059] Optionally, the second data asset received by the business end may be an encrypted data asset, referred to as an encrypted data asset. When decrypting the encrypted data asset, it may be executed based on the decryption algorithm sent by the server, and after the execution is completed, the authorized data asset may be obtained, and then a delivery completion instruction is sent to the server, and then the authorized data asset is transmitted externally.

[0060] In the disclosed embodiment, the decryption application method of the encrypted data assets is delivered to the demand side, and an authorization result file is generated for external transmission to provide support for the delivery of data assets. The security of data assets is protected through encryption and decryption technology. At the same time, the authorized data assets generated are used as proof materials to support blockchain evidence storage for the transfer of data asset ownership.

[0061] In some optional embodiments, such as Figure 4 , Figure 4 is a schematic diagram of the overall system flow of data asset circulation according to an embodiment of the present disclosure, Figure 4 The system consists of three execution entities, namely the service side, the demand side and the supply side.

[0062] Among them, the server has a total of three process processing modules. Module one mainly executes format recognition, watermark provision, and watermark verification. Module two mainly executes identity evidence storage and identity verification. Module three mainly executes the provision of encryption technology.

[0063] The supply side mainly performs watermark embedding, identity generation, and asset encryption and delivery based on encryption technology.

[0064] The demand side mainly sends demand requests, receives data assets sent by the supply side based on the target channel provided by the server, decrypts the data assets, and finally realizes authorized delivery from the supply side to the demand side based on the server.

[0065] Figure 4 The interaction process between the service side, demand side and supply side is as follows: The supplier provides the data asset format and sends the data asset format to the server; The server recognizes the data asset format and generates a dark watermark; The server sends the dark watermark to the supplier, and the supplier embeds the dark watermark into the data asset to generate a dark watermark data asset. Using the device provided by the server to detect the dark watermark data asset, determine whether the dark watermark data asset can identify the dark watermark; If the dark watermark can be identified, the asset identity is generated (i.e., identity generation); Put the asset identity into the server-side blockchain for evidence storage; The demand side sends a demand request to the server side; The server sends the demand request to the supplier; The supply side obtains local data assets based on demand requests and sends the local data assets to the service side; Using the device provided by the server to detect the local data asset, determine whether the local data asset can identify the dark watermark; If the dark watermark can be identified, the asset identity is extracted from the local data asset and the local asset identity is transmitted to the server; The server compares and verifies the local data assets with the data asset identities stored in the blockchain, and transmits the verification results to the device deployed on the supply side; The server provides encryption technology to the supplier; The supply side encrypts local data assets based on encryption technology and transmits them to the demand side through the channel provided by the server.

[0066] The demand side decrypts the encrypted local data assets according to the decryption algorithm provided by the server side to obtain the authorized assets; Since the ownership of local data assets has shifted from the supply side to the demand side, the transfer of data assets is recorded on the blockchain.

[0067] The disclosed embodiment identifies the data asset format of the supply side through the service side, forms a dark watermark and embeds the data asset on the supply side, and after further generating the data asset identity, the supply side transmits the identity to the service side; the service side stores the data asset identity and the supply side identity on the blockchain; the demand side sends an asset request to the service side, and the service side forwards the request to the supply side; the supply side extracts the data asset, and the service side verifies the dark watermark and encrypts the data asset after verifying the data asset identity on the blockchain; in addition, the service side provides encryption technology for the supply side and decryption algorithm for the demand side, and at the same time provides a channel for the supply side to transmit data assets or the demand side to access the data assets of the supply side, and continues to write the demand side identity on the blockchain of the server side. The above technical solution generates, verifies and encrypts the data asset identity locally on the supply side, processes the data asset supply and demand information on the service side, stores the data asset identity and the data asset ownership end identity, uploads the data asset demand request on the demand side, and issues the data asset authorization application method, which ensures that the data asset does not leave the local supply side before circulation, the service side does not touch and effectively stores the evidence during the circulation process, and the demand side reliably obtains the data asset and its authorization after circulation.

[0068] In this embodiment, a device for data asset circulation is also provided, which is used to implement the above-mentioned embodiments and preferred implementation modes, and will not be repeated hereafter. As used below, the term "module" can be a combination of software and / or hardware that implements a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0069] This embodiment provides a device for data asset circulation, which is a server, such as Figure 5 , the device comprises: The first sending module 501 is used to send the generated identification information to the supplier, wherein the identification information is information generated according to the data asset format sent by the supplier and used to uniquely represent the data asset format, and the data asset format is used to represent the type of the data asset provided by the supplier; A first receiving module 502 is used to receive a target data asset identity, wherein the target data asset identity is used to uniquely characterize the target data asset, the target data asset is a first data asset in which the identification information is successfully embedded and can be successfully read, and the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; Binding module 503, used to bind the target data asset identity and the supplier identity and store them on the internal blockchain; The second receiving module 504 is used to receive demand request information of data assets, wherein the demand request information includes the requested data assets; A determination module 505, for determining the identity of the supplier based on the request data asset and the blockchain; The second sending module 506 is used to send the demand request information to the supply end; The third receiving module 507 is used to receive a second data asset identity, wherein the second data asset identity is used to uniquely represent the second data asset, and the second data asset is obtained by the supply side extracting the local data asset according to the demand request information; Verification module 508, used to compare and verify the second data asset identity with the target data asset identity stored in the blockchain to obtain a verification result; The third sending module 509 is used to send the verification result to the supply end.

[0070] In some optional embodiments, the device is also used to send the decryption algorithm to the demand side; upon receiving the instruction that the delivery has been completed, the identity of the demand side is stored in the blockchain.

[0071] In some optional embodiments, the device is also used to obtain a first location where the supply-side identity is stored in the blockchain; determine a second location where the demand-side identity is stored based on the first location, wherein the second location is used to characterize that the ownership of the second data asset has been circulated from the supply side to the demand side.

[0072] This embodiment provides a device for data asset circulation, which is a supply end, such as Figure 6 , the device comprises: The fourth sending module 601 is used to send a data asset format, wherein the data asset format is used to characterize the type of the data asset; A fourth receiving module 602 is used to receive identification information, wherein the identification information is used to uniquely represent the format of the data asset; An embedding module 603, configured to embed the identification information into the first data asset, wherein the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; A first obtaining module 604 is used to perform an embedding identification operation and a reading operation on the first data asset using a target device to obtain a target data asset, wherein the target data asset refers to the first data asset in which the identification information is successfully embedded and can be successfully read, and the target device is a device authorized by the service end to be deployed locally on the supply end; A fifth sending module 605 is used to send the target data asset identity of the target data asset to the server, wherein the target data asset identity is used to uniquely characterize the target data asset; The fifth receiving module 606 is used to receive demand request information, wherein the demand request information is information sent by the demand end when obtaining the requested data asset from the server end; An extraction module 607 is used to extract a local second data asset according to the demand request information; A sixth sending module 608, configured to send the second data asset identity of the second data asset to the server according to the target device and the second data asset; A sixth receiving module 609 is used to receive a verification result, wherein the verification result is a result of comparing and verifying the second data asset identity with the target data asset identity that has been stored in the blockchain inside the server; The seventh sending module 610 is used to send the second data asset to the demand side through the target channel, wherein the target channel is a channel provided by the service side to the demand side for accessing the second data asset.

[0073] In some optional implementations, the device is also used to encrypt the second data asset using the target device to obtain an encrypted data asset; and send the encrypted data asset to the demand end through the target channel.

[0074] This embodiment provides a device for data asset circulation, which is a demand side, such as Figure 7 , the device comprises: An eighth sending module 701 is used to send data asset demand request information to the server; The seventh receiving module 702 is used to receive a second data asset, wherein the second data asset is obtained by the supply side after extracting a local data asset according to the demand request information.

[0075] In some optional embodiments, the device is also used to receive a decryption algorithm sent by the server and an encrypted data asset sent by the supplier, wherein the encrypted data asset is a data asset obtained by encrypting a second data asset by a target device, and the target device is a device authorized by the server to be deployed locally on the supplier; and the encrypted data asset is decrypted based on the decryption algorithm.

[0076] In some optional implementations, the device is also used to obtain the authorized data asset based on the decryption result; and send a delivery completion instruction to the server.

[0077] The further functional description of each of the above modules is the same as that of the above corresponding embodiments and will not be repeated here.

[0078] The device for data asset circulation in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0079] The present disclosure also provides a computer device having the above Figure 5 or Figure 6 or Figure 7 The device through which the data assets are circulated is shown.

[0080] See also Figure 8 , Figure 8 is a schematic diagram of a computer device provided by an optional embodiment of the present disclosure, such as Figure 8 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 8 A processor 10 is taken as an example.

[0081] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0082] The memory 20 stores instructions executable by at least one processor 10, so that at least one processor 10 executes the method shown in the above embodiment.

[0083] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0084] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0085] The computer device further comprises a communication interface 30 for the computer device to communicate with other devices or a communication network.

[0086] The embodiments of the present disclosure also provide a computer-readable storage medium. The above-mentioned method according to the embodiments of the present disclosure can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium and downloaded through a network, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state drive, etc.; further, the storage medium can also include a combination of the above-mentioned types of memory. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0087] A part of the present disclosure may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present disclosure through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes, but is not limited to, source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium accessible to the computer.

[0088] Although the embodiments of the present disclosure have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present disclosure, and such modifications and variations are all within the scope defined by the appended claims.

Claims

1. A method for circulating data assets, characterized in that: The method is applied to the server, and the method includes: Sending the generated identification information to the supplier, wherein the identification information is information generated according to the data asset format sent by the supplier and used to uniquely characterize the data asset format, and the data asset format is used to characterize the type and form of the data asset provided by the supplier; Receive a target data asset identity, wherein the target data asset identity is used to uniquely characterize the target data asset, the target data asset is a first data asset in which the identification information is successfully embedded and can be successfully read, and the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; Bind the target data asset identity and the supplier identity and store them on the internal blockchain; Receiving a data asset demand request message, wherein the demand request message includes a requested data asset; Determining the supplier identity based on the request data asset and the blockchain; Sending the demand request information to the supply end; Receive a second data asset identity, wherein the second data asset identity is used to uniquely characterize the second data asset, and the second data asset is obtained by extracting a local data asset from the supply end according to the demand request information; Compare and verify the second data asset identity with the target data asset identity stored in the blockchain to obtain a verification result; The verification result is sent to the supply end.

2. The method according to claim 1, characterized in that The method further comprises: Send the decryption algorithm to the demand side; When a delivery instruction is received, the identity of the demand side is stored in the blockchain.

3. The method according to claim 2, characterized in that The storing the demand side identity in the blockchain includes: Obtain the first location where the identity of the supplier is stored in the blockchain; A second location for storing the identity of the demand side is determined based on the first location, wherein the second location is used to represent that the ownership of the second data asset has been circulated from the supply side to the demand side.

4. A method for circulating data assets, characterized in that: The method is applied to the supply side, and the method comprises: Sending a data asset format, wherein the data asset format is used to characterize the type of the data asset; Receiving identification information, wherein the identification information is used to uniquely characterize a data asset format; Embed the identification information into a first data asset, wherein a data asset format of the first data asset is the same as a data asset format corresponding to the identification information; Using a target device to perform an embedding and identifying operation and a reading operation on the first data asset, to obtain a target data asset, wherein the target data asset refers to the first data asset in which the identification information is successfully embedded and can be successfully read, and the target device is a device authorized by the service end to be deployed locally on the supply end; Sending the target data asset identity of the target data asset to the server, wherein the target data asset identity is used to uniquely characterize the target data asset; Receiving demand request information, wherein the demand request information is information sent by the demand end when obtaining the requested data asset from the service end; Extracting a local second data asset according to the demand request information; sending a second data asset identity of the second data asset to a server according to the target device and the second data asset; Receiving a verification result, wherein the verification result is a result of comparing and verifying the second data asset identity with the target data asset identity that has been stored in the blockchain within the server; The second data asset is sent to the demand side through a target channel, wherein the target channel is a channel provided by the service side to the demand side for accessing the second data asset.

5. The method according to claim 4, characterized in that The sending the second data asset to the demand end through the target channel includes: encrypting the second data asset using the target device to obtain an encrypted data asset; The encrypted data asset is sent to the demand end through the target channel.

6. A method for circulating data assets, characterized in that: The method is applied to the demand side, and the method includes: Send data asset demand request information to the server; A second data asset is received, wherein the second data asset is obtained by the supply end after extracting a local data asset according to the demand request information.

7. The method according to claim 6, characterized in that The method further comprises: Receiving a decryption algorithm sent by the service end and an encrypted data asset sent by the supply end, wherein the encrypted data asset is a data asset obtained by encrypting the second data asset by a target device, and the target device is a device authorized by the service end to be deployed locally on the supply end; The encrypted data asset is decrypted based on the decryption algorithm.

8. The method according to claim 7, characterized in that After decrypting the encrypted data asset based on the decryption algorithm, the method further includes: Obtaining authorized data assets based on the decryption result; Sending a delivery completed instruction to the server.

9. A device for circulating data assets, characterized in that: The device is a server, and the device includes: A first sending module, configured to send the generated identification information to the supply end, wherein the identification information is information generated according to the data asset format sent by the supply end and used to uniquely characterize the data asset format, and the data asset format is used to characterize the type and form of the data asset provided by the supply end; A first receiving module is used to receive a target data asset identity, wherein the target data asset identity is used to uniquely characterize the target data asset, the target data asset is a first data asset in which the identification information is successfully embedded and can be successfully read, and the data asset format of the first data asset is the same as the data asset format corresponding to the identification information; A binding module, used to bind the target data asset identity and the supplier identity and store them on the internal blockchain; A second receiving module is used to receive demand request information of data assets, wherein the demand request information includes requested data assets; A determination module, configured to determine the identity of the supplier according to the request data asset and the blockchain; A second sending module, used for sending the demand request information to the supply end; A third receiving module is used to receive a second data asset identity, wherein the second data asset identity is used to uniquely represent the second data asset, and the second data asset is obtained by the supply side extracting the local data asset according to the demand request information; A verification module, used to compare and verify the second data asset identity with the target data asset identity stored in the blockchain to obtain a verification result; The third sending module is used to send the verification result to the supply end.

10. A device for circulating data assets, characterized in that: The device is a supply end, and the device comprises: A fourth sending module, used to send a data asset format, wherein the data asset format is used to characterize the type of the data asset; A fourth receiving module, configured to receive identification information, wherein the identification information is used to uniquely characterize a data asset format; An embedding module, configured to embed the identification information into a first data asset, wherein a data asset format of the first data asset is the same as a data asset format corresponding to the identification information; A first obtaining module is used to perform an embedding identification operation and a reading operation on the first data asset using a target device to obtain a target data asset, wherein the target data asset refers to the first data asset in which the identification information is successfully embedded and can be successfully read, and the target device is a device authorized by the service end to be deployed locally on the supply end; A fifth sending module, configured to send the target data asset identity of the target data asset to the server, wherein the target data asset identity is used to uniquely characterize the target data asset; A fifth receiving module, configured to receive demand request information, wherein the demand request information is information sent by the demand end when obtaining the requested data asset from the service end; An extraction module, used for extracting a local second data asset according to the demand request information; a sixth sending module, configured to send the second data asset identity of the second data asset to a server according to the target device and the second data asset; A sixth receiving module, configured to receive a verification result, wherein the verification result is a result of comparing and verifying the second data asset identity with the target data asset identity that has been stored in the blockchain within the server; A seventh sending module is used to send the second data asset to the demand side through a target channel, wherein the target channel is a channel provided by the service side to the demand side for accessing the second data asset.

11. A device for circulating data assets, characterized in that: The device is a demand side, and the device includes: An eighth sending module, used to send demand request information of data assets to the server; The seventh receiving module is used to receive a second data asset, wherein the second data asset is obtained by the supply side after extracting a local data asset according to the demand request information.

12. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method for circulation of data assets described in any one of claims 1 to 3 or 4 to 5 or 6 to 8 by executing the computer instructions.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method for circulating data assets described in any one of claims 1 to 3, 4 to 5, or 6 to 8.

14. A computer program product, characterized in that The method comprises computer instructions for causing a computer to execute the method for circulating data assets as described in any one of claims 1 to 3, 4 to 5, or 6 to 8.

Images