User data asset processing method, device and system

Abstract

The processing method for the user data assets comprises the steps of triggering a right confirmation request for the user data assets to be subjected to right confirmation; acquiring right-confirmable user data assets in the right-to-be-confirmed user data assets; generating a first encryption factor; according to the first encryption factor, encrypting the user data assets which can be authenticated to obtain first ciphertext data; acquiring a first user public key of the first user from the data asset processing system server; wherein the first user private key is managed by a first user, and the first user public key and the first user private key generate a first user decentralized identity label in the first block chain; encrypting the first encryption factor according to the first user public key to obtain first encryption factor ciphertext data; uploading the first ciphertext data and the first encryption factor ciphertext data to a data asset processing system server side and storing the first ciphertext data and the first user public key correspondingly; wherein the hash values of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to the block chain and are correspondingly recorded with the first user decentralized identity identifier.

Description

Technical Field

[0001] The present invention relates to the field of blockchain technology, and in particular to a method, device and system for processing user data assets. Background Art

[0002] In today's digital age, the creation of intangible assets such as text, pictures, audio, and video is increasingly prosperous. Creators express their creativity and talents in various ways, bringing rich cultural and artistic works to society. However, how to confirm the ownership of these creative data and how to conduct safe and efficient transactions have become a strong demand of creators. It is necessary to complete the confirmation of digital assets for these digital intangible assets in order to realize subsequent digital asset transactions.

[0003] Generally, data creators or owners will upload their works to an operating platform that can facilitate the release of works, such as audio publishing platforms such as Himalaya. The anchor creator will register as a user on the platform. Before uploading the work, the anchor needs to conduct identity authentication to prove the identity or authorization of the creator; provide copyright proof or authorization agreement; Himalaya platform reviews the work to ensure that there is no infringement or violation of the law, and finally complete the confirmation of rights. In the transaction process: the anchor creator registers an account and uploads the audio work; the platform recommends it based on factors such as the quality of the work; the buyer user contacts the anchor creator or the platform to discuss cooperation; the two parties sign a contract to clarify the right of use, scope of authorization and price; the buyer pays the fee, and the anchor creator grants the right of use. The data owner, the anchor creator, basically entrusts his data completely to the platform for recommendation, operation and promotion based on factors such as the quality of the work. The user's rights to authorize, transfer, and benefit from the data created are all handed over to the Himalaya platform for the convenience of promotion. Therefore, for creator users, the platform needs to make more improvements and upgrades in the protection and use of their data assets so that creators can manage these digital assets more clearly.

[0004] In addition to audio publishing platforms, the operating platforms for intellectual property assets such as text, pictures, and videos in the industry are similar to the above. After content creators upload their content to the platform, the platform needs to make more improvements and upgrades in the protection and use of their data assets so that creators can more clearly participate in and manage the title, transaction flow, and use of these digital assets.

[0005] Similar prior arts found after patent search: Chinese Patent 1: Publication number CN112396523A, patent name "A blockchain-based intangible asset trading system", this invention patent discloses an intangible asset trading system based on blockchain, involving the field of blockchain technology. The system of this invention is a Web system based on B / S architecture, all intangible asset-related data is stored off-chain, and information related to intangible assets will be stored in a decentralized form on the BCOS blockchain; cross-process communication in the form of API is used to perform relevant operations on the BCOS blockchain; the trading system includes five modules: intangible asset publication, intangible asset registration, intangible asset trading, intangible asset authentication, and background management. This invention provides more targeted application development and services to fully meet market demand, and thus plays an important supporting role in strengthening social awareness of intangible assets, the people's demand for original digital content works, and the motivation for high-quality intangible asset creation.

[0006] This solution is to store the information related to intangible assets in a decentralized form on the BCOS blockchain, and trade the intangible assets on the chain through blockchain technology.

[0007] For blockchain users, when using intangible assets on the blockchain, transactions of intangible assets with large data, such as high-definition images, audio files, etc., may have a large amount of data, which will face greater pressure when transmitted and stored in the blockchain network, resulting in slower transaction processing speed. Summary of the invention

[0008] The embodiments of the present invention provide a method, device and system for processing user data assets, so as to realize a title confirmation and transaction system for user data assets to be efficiently uploaded to the chain, which not only ensures the privacy and security of user asset data, but also facilitates creator users to participate in the management of the title confirmation or transaction links of their digital assets.

[0009] In a first aspect, an embodiment of the present invention provides a method for processing user data assets, which runs on a client side and includes: triggering a request for confirmation of a user data asset to be confirmed of a first user of a client application; obtaining a confirmable user data asset among the user data assets to be confirmed; generating a first encryption factor; encrypting the confirmable user data asset according to the first encryption factor to obtain first ciphertext data; obtaining a first user public key for asymmetric encryption processing corresponding to the first user of the client application from a data asset processing system server; wherein the first user private key of the first user is managed by the first user, and the first user public key and the first user private key generate a first user decentralized identity in a first blockchain; encrypting the first encryption factor according to the first user public key to obtain first encryption factor ciphertext data; uploading the first ciphertext data and the first encryption factor ciphertext data to the data asset processing system server and saving them corresponding to the first user public key; wherein the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to blocks in the first blockchain and recorded corresponding to the first user decentralized identity.

[0010] Optionally, the step of obtaining the user data assets that can be confirmed among the user data assets to be confirmed includes: the client application provider server side extracts features of the data asset content for the user data assets to be confirmed requested by the user, performs infringement risk comparison and assessment based on an artificial intelligence model, and provides user data assets that can be confirmed that have no infringement risk; the client application side obtains the user data assets that can be confirmed.

[0011] Optionally, the step of obtaining the user data assets that can be confirmed among the user data assets to be confirmed may also include: the first user sends the user data assets to be confirmed to the data asset processing system server through end-to-end encryption and decryption with a hidden user identifier; extracting features from the content of the user data assets to be confirmed, and performing infringement risk comparison and assessment using an artificial intelligence model to provide user data assets that can be confirmed without infringement risk; deleting the user data assets to be confirmed at the data confirmation transaction system server; and the client application side obtains the user data assets that can be confirmed.

[0012] Optionally, when triggering a request for confirmation of the user data assets to be confirmed by the first user of the client application, the method also includes: determining that it is the first time for the first user of the client application to confirm the user data assets; obtaining the first user public key and the first user private key that can be used for asymmetric encryption and decryption by the first user of the client application; generating a decentralized identity of the first user based on the first user public key and the first user private key; storing and processing the first user private key on the client side; uploading the first user's decentralized identity, the first user public key, and the first user application user ID to the data asset processing system server for corresponding storage; wherein the first user's decentralized identity is recorded in a block on the chain to the first blockchain.

[0013] Optionally, the method further includes: in response to a payment request from a second user on the client application provider server side to complete the purchase of the first user's data, obtaining the first encryption factor ciphertext data of the first user and the second user public key of the second user from the data asset processing system server side; obtaining the first user private key of the first user from the client application side; decrypting the first encryption factor ciphertext data according to the first user private key to obtain the first encryption factor; encrypting the first encryption factor according to the second user public key to obtain the second encryption factor ciphertext data; uploading the second encryption factor ciphertext data to the data asset processing system server side and saving it correspondingly with the second user public key and the first user's first ciphertext data; wherein after the hash values ​​of the first ciphertext data and the second encryption factor ciphertext data are respectively calculated, the on-chain data chain block is recorded in the transaction record data of the first user and the second user.

[0014] Optionally, the method further includes: authorizing the client application provider to obtain the first user's confirmed user asset data; the client application provider makes a copy of the confirmed user asset data based on at least part of the first user's confirmed user asset data; receiving the copy of the confirmed user asset data transferred to the first user by the client application provider; and authorizing the client application provider to load and display the copy of the confirmed user asset data in the application client.

[0015] Optionally, the method further includes: obtaining similarity quantification indicators and / or similarity analysis data of similar parts given by the artificial intelligence model for user data assets that are at risk in the infringement risk comparison assessment given by the artificial intelligence model; encrypting the similarity quantification indicators and / or similarity analysis data of similar parts according to the first encryption factor to obtain third ciphertext data; uploading the third ciphertext data and the first encryption factor ciphertext data to the data asset processing system server and saving them corresponding to the first user public key; wherein the hash values ​​of the third ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the decentralized identity of the first user.

[0016] In a second aspect, an embodiment of the present invention provides a user data asset processing system server device, including: a system background management module, which is configured to: create and manage users within the management system and user login and access; a decentralized identity user management module, which is configured to: obtain a first user decentralized identity generated by a first user based on a first user private key and a first user public key from a client, and record the first user decentralized identity on a chain through a blockchain node server module; a public key trusteeship module, which is configured to: obtain and manage the first user public key uploaded from the client, which is stored in correspondence with the first user decentralized identity; a data asset right confirmation management module, which is configured to: obtain and manage the first ciphertext data and the first encryption factor ciphertext data of the first user uploaded from the client, and respectively chain the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data to the blocks in the blockchain node server module, and record them in correspondence with the first user decentralized identity; a secret data storage module, which is configured to: correspondingly store the first ciphertext data, the first encryption factor ciphertext data and the first user public key uploaded from the client; a blockchain node server module, which is configured as a node server for deploying and running a blockchain.

[0017] In a third aspect, an embodiment of the present invention provides a client computer device, comprising a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein the processor, when executing the computer program, implements the method steps in the user data asset processing method provided by the embodiment of the present invention in the first aspect above.

[0018] In a fourth aspect, an embodiment of the present invention provides a user data asset processing system, which includes a user data asset processing system server device as provided by the embodiment of the present invention in the second aspect above and at least one client computer device as provided by the embodiment of the present invention in the third aspect above.

[0019] By adopting the present invention, the client application users can confirm the ownership of their user data assets. The user data assets are encrypted using the user public key and encryption factor. The first ciphertext data and the first encryption factor ciphertext data ensure the security and privacy of the user data assets. The data assets can only be unlocked by the user's private key. Even the developer of the client application cannot view the user asset data, thereby allowing the user to better participate in the management of subsequent ownership confirmation or transaction links of their digital assets. In addition, the user's public-private key pair is used to generate the user's decentralized identity, and the decentralized identity is correspondingly linked to the hash value of the first ciphertext data and the first encryption factor ciphertext data in the blockchain, thereby realizing efficient on-chain ownership confirmation and transaction of user data assets. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0021] Figure 1 A flowchart of a method for processing user data assets provided in Embodiment 1 of the present invention; Figure 2 A schematic diagram of a module of a user data asset processing system server device provided in Embodiment 2 of the present invention; Figure 3 A schematic diagram of a user data asset processing system provided in Embodiment 3 of the present invention; Figure 4 This is a schematic diagram of the interaction flow generated for the first time by a new user in the user data asset processing system in the third embodiment of the present invention; Figure 5 This is a schematic diagram of the interactive process of user data asset rights confirmation processing in Embodiment 3 of the present invention; Figure 6 This is a schematic diagram of the interactive process of user data asset transaction processing in Example 3 of the present invention. DETAILED DESCRIPTION

[0022] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0023] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "said" and "the" used in the embodiments of the present invention and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings, and "multiple" generally includes at least two.

[0024] As used herein, the words "if" and "if" may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0025] In addition, the step sequence in the following method embodiments is only an example and not a strict limitation.

[0026] Embodiment 1: Figure 1 A flowchart of a method for processing user data assets provided in the first embodiment of the present invention is provided. In the first embodiment, the method for processing user data assets is run on the client application side of the user and includes the following steps: Step 100: triggering a request for confirmation of the user data asset to be confirmed of the first user of the client application; The user data assets to be confirmed by the first user in the above step 100 can preferably be data files with independent intellectual property rights attributes created by the user or co-created locally on the client side, or can be user personal data with user privacy attributes, which can be read and obtained locally by the client application. For example, the user data assets to be confirmed are: book text, pictures, audio, video, and any type of data in a specified format. The specified format data mentioned here is, for example, user-customizable format data in JSON format, but is not limited to the format of attributes and values ​​of a custom object such as JSON. For example, it can be the user's physical health data, location data, and communication record format data; it can also be the user data of a mobile phone user, including: the mobile phone user's personal information class includes basic information such as name, gender, and contact information, the device information class covers the mobile phone model, operating system, etc., the usage behavior class includes application usage records, browsing history, and location information, and the social information class includes social account information and social relationship related data such as address book and friend list. These user data reflect the characteristics and behaviors of mobile phone users from many aspects, and can be organized into user data assets in a customized format. For example, a lot of user data in a user data information submission page in the application interaction page is customized to at least one user data format for the confirmation of ownership in this example. When the user clicks the submit button, it can be understood that the user has triggered the above user data assets to be processed for the confirmation of ownership in this example. All of the above situations are covered within the scope of the inventive concept of the present invention; a better example is that, for example, the user data asset to be confirmed is: audio data created by the user, which is a song independently created through a tool application such as audio creation. The user can use the song audio data as a user data asset in the application to confirm the ownership through the method in the first embodiment.

[0027] At this step 100, preferably, when triggering a request for confirmation of the user data asset to be confirmed by the first user of the client application, if it is determined that the client application user is confirming the user data asset for the first time, it is necessary to obtain the user's public-private key pair, that is, obtain the first user public key and the first user private key that the client application user can use for asymmetric encryption and decryption; generate the user's decentralized identity based on the first user public key and the first user private key; store the first user private key on the client side; upload the user's decentralized identity, the first user public key, and the user's application user ID to the data asset processing system server for corresponding storage; wherein the user's decentralized identity (DID) is recorded in the block on the blockchain. Because the present invention is combined with blockchain technology, it is necessary to perform on-chain storage operations for the user who confirms the ownership of the user's data assets. Therefore, when confirming the ownership of the user's data assets for the first time, it is necessary to build a corresponding relationship between the user's public key, the user's application user ID, and the user's decentralized identity identifier (DID), and save it on the data asset processing system server side. Preferably, a corresponding data asset processing system platform user ID can also be established for the application user ID in the data asset processing system to achieve the correspondence between the application user and the data asset processing system platform user. In this way, in this embodiment, the user can save his user public key in the data asset processing system to facilitate subsequent requests.

[0028] Step 101: Acquire the user data assets that can be confirmed among the user data assets to be confirmed; For user-generated data assets, there is a risk of infringing prior intellectual property rights, such as some publicly released copyrighted works, songs, videos, etc. In order to avoid the risk of infringement of digital assets in subsequent rights confirmation and transactions, in this first embodiment, it is necessary to pre-screen the user data assets to be confirmed and select the user data assets that can be confirmed.

[0029] This step can be processed by a professional infringement determination service program in the terminal device on the application side (such as similar service programs provided in Huawei and Xiaomi mobile phones), and user data assets that can be confirmed can be provided; or the application developer's server can determine the infringement of user data assets and provide selected user data assets that can be confirmed. Preferably, an embodiment is given here for illustration, and the client application provider server extracts the features of the data asset content for the user data assets to be confirmed requested by the user, such as photos. The extractable features include but are not limited to the following aspects: a. Color features: Analyze the main color distribution, color contrast, etc. of photos. For example, a picture with blue as the main color can extract the characteristic values ​​of blue hue, saturation, and brightness.

[0030] b. Texture features: Identify texture patterns in images, such as rough, smooth, granular, etc. For example, a picture of wood grain can extract texture features such as the direction and periodicity of the wood grain.

[0031] c. Shape features: Determine the shape of the object in the image, such as circle, square, triangle, etc., as well as the size ratio of the object. For example, a circular object can extract its radius, center position and other features.

[0032] d. Content theme: Use image recognition technology to determine the theme of the picture, such as landscape, people, animals, etc. For example, a landscape picture can extract theme elements such as mountains, rivers, and trees.

[0033] Then, based on these extracted features, an infringement risk comparison assessment based on an artificial intelligence model is performed to provide user data assets that are free of infringement risk and can be confirmed. Preferably, for example, the technical steps are as follows: 1. Establish an infringement risk assessment model 1.1 Collect a large number of known infringing and non-infringing image samples, extract features from these samples, and use them as training data.

[0034] 1.2 Use deep learning algorithms, such as Convolutional Neural Network (CNN), to train the infringement risk assessment model. The model can learn the relationship between different feature combinations and infringement risks.

[0035] 2. Comparison and evaluation technical details 2.1 For the images to be confirmed, extract their features and input them into the infringement risk assessment model.

[0036] 2.2 The model will output an infringement risk probability value, which is usually between 0 and 1. The closer the probability value is to 0, the less infringement risk there is; the closer it is to 1, the higher the infringement risk.

[0037] 2.3 Set a threshold of 0.8. When the output probability value is lower than the threshold, it is considered that the image has no infringement risk; when it is higher than the threshold, there may be an infringement risk.

[0038] From the above technical details, it can be seen that the infringement risk comparison and assessment based on the artificial intelligence model can more accurately judge the infringement risk of image data assets and provide client application providers with reliable and verifiable user data assets.

[0039] Preferably, the processing of step 101 can also be performed on the server side of the data asset processing system of the present invention, and after determining the infringement of the user data assets, the screened user data assets that can be confirmed are provided; a preferred practical example is provided here to reveal the details of the implementation scheme: Step 1011: Setting the client application user ID to a hidden user ID; Step 1012: Use the anonymous user identifier to send the user data asset to be confirmed to the data asset processing system server through end-to-end encryption and decryption; complete the end-to-end encryption and decryption transmission at the device level between the client device and the data asset processing system server device, and train and identify the user data asset to be confirmed in the artificial intelligence model of the data asset processing system server after the user's authorization; Step 1013: extract features from the content of the user data asset to be confirmed, and conduct infringement risk comparison and assessment of the artificial intelligence model to provide user data assets that can be confirmed without infringement risk; the details of the technical implementation here can preferably refer to the technical implementation of feature extraction of data asset content and infringement risk comparison and assessment of artificial intelligence model, which will not be repeated here; Step 1014: Delete the user data asset to be confirmed at the data confirmation transaction system server; in order to ensure the uniqueness of the user data asset confirmation and the privacy of the user data, no user data will be retained in the data confirmation transaction system server after the identification and screening is completed; Step 1015: The client application side obtains the information of the user data assets that can be confirmed.

[0040] In the above embodiment, if the infringement risk comparison and assessment of the artificial intelligence model in step 1013 gives the infringement risk information of the user data asset, this information can also be encrypted and confirmed. Therefore, preferably, the embodiment of the present invention also includes the following steps: for the user data asset to be confirmed that has risks in the infringement risk comparison and assessment given by the artificial intelligence model, obtain the similarity quantification index and / or the similarity analysis data of the similar part given by the artificial intelligence model; encrypt the similarity quantification index and / or the similarity analysis data of the similar part according to the first encryption factor to obtain the third ciphertext data; upload the third ciphertext data and the first encryption factor ciphertext data to the data asset processing system server and save them corresponding to the first user public key; wherein the hash values ​​of the third ciphertext data and the first encryption factor ciphertext data are respectively chained to the blocks in the first blockchain and recorded corresponding to the first user decentralized identity. In this embodiment, since the infringement risk data is chained and saved, it is convenient to obtain infringement information, facilitate the analysis of infringement risks in the future, and facilitate users to view the situation of similar data assets, and provide reasons to prove why the user data asset cannot be confirmed.

[0041] Step 102: Generate a first encryption factor; The encryption factor in the first embodiment of the present invention can be a randomly generated key for symmetric encryption. Other encryption keys using symmetric encryption algorithms can all be used as encryption factors in the first embodiment of the present invention. For example, the 128-bit encryption key in the national secret SM4 algorithm can all be covered in the scope of the present invention. Preferably, the present invention can use the AES (Advanced Encryption Standard) algorithm to generate a string of random binary sequences as a key through a secure random number generator, and the key length is 128 bits, 192 bits or 256 bits; the secure random number generator in this embodiment will ensure that the generated key has sufficient randomness based on complex algorithms and hardware entropy sources (such as thermal noise, clock jitter, etc.). Preferably, the first encryption factor is only used in the current batch of encrypted data, and the user data of other batches after the specified time, or the user data of other batches in the specified user interface, can be regenerated. The second encryption factor, the third encryption factor, etc., can be used in subsequent encryption processing to enhance the security level of user data encryption.

[0042] Step 103: Encrypt the user data asset that can be authenticated according to the first encryption factor to obtain first ciphertext data; In this embodiment, preferably, the user data assets that can be authenticated are classified and processed according to the data type; according to the different data types, the encryption factors are used to perform different encryption processing flows on the user data assets that can be authenticated to obtain encrypted data.

[0043] This step uses symmetric encryption technology. In this embodiment, a combination of symmetric encryption and asymmetric encryption is used to encrypt and confirm the user data, so that the encryption speed is fast and the security is guaranteed, achieving a balance between efficiency and convenience.

[0044] Step 104: Obtaining, from the data asset processing system server, a first user public key for asymmetric encryption processing corresponding to the first user of the client application; wherein the first user private key of the first user is managed by the first user himself, and the first user public key and the first user private key generate a decentralized identity of the first user in the first blockchain; In this step, the user public key is the public key in the public-private key pair used in the asymmetric encryption algorithm, and the private key will be safely stored and used by the user himself. The asymmetric encryption algorithm here is preferably the RSA (Rivest-Shamir-Adleman) algorithm. In the present invention, the public-private key pairs of other asymmetric encryption algorithms other than the RSA algorithm, such as the national secret SM2 algorithm, can be used as the user public key and user private key in the first embodiment of the present invention, and can be included in the scope of the present invention. In the present invention, the first user public key and the first user private key obtained by the user are used to generate the user's decentralized identity, and the decentralized identity (Decentralized Identifier, DID) is chained in the block to realize the confirmation of the user's encrypted data, which is an important technical innovation of the present invention. On the one hand, the first user public key and the first user private key can encrypt the user's data assets to ensure that only the user can view their data assets, and at the same time, the DID is generated based on the first user public key and the first user private key to perform chain operations in the blockchain block, thereby obtaining the advantages of blockchain technology in improving data credibility and transparency.

[0045] Step 105: Encrypt the first encryption factor according to the first user public key to obtain the first encryption factor ciphertext data; The process of encrypting data using an asymmetric public key in this step is a general process of encrypting data using a public key such as in an RSA algorithm. Asymmetric encryption algorithms well known to those skilled in the art can be used here and will not be described in detail here.

[0046] Step 106: Upload the first ciphertext data and the first encryption factor ciphertext data to the data asset processing system server and save them corresponding to the first user public key; wherein the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the first user decentralized identity.

[0047] In this step, it is ensured that the first ciphertext data, the first encryption factor ciphertext data, and the user's public key are stored on the server side of the data asset processing system, so that the privacy protection encrypted storage of the user's data assets is realized. Only the user can use the private key to decrypt the user's ciphertext data, and it is also convenient to retrieve the user's encrypted data based on the user's public key, user ID, and user DID, creating conditions for subsequent users to use private keys for decryption. At the same time, the hash values ​​of the user's ciphertext data and the encryption factor ciphertext data are also calculated, and then chained to the blocks in the blockchain, and recorded correspondingly with the first user's decentralized identity (DID). In this way, the hash values ​​of the user's ciphertext data and the encryption factor ciphertext data can be obtained through the DID, and data integrity verification can be performed. After the verification is correct, the corresponding ciphertext data and encryption factor ciphertext data can be found on the server side of the data asset processing system, thereby completing the confirmation of the user's data assets, combining the advantages of blockchain technology.

[0048] In the above-mentioned embodiment 1, preferably, the embodiment can further perform the step of trading the data assets that have been confirmed. Specifically, the preferred embodiment includes the following processing steps for data asset transactions: in response to the payment request of the purchaser user (i.e., the second user) on the client application provider server side for the purchase of the data assets of the confirmed asset user (i.e., the first user), the first encryption factor ciphertext data of the first user and the second user public key of the second user are obtained from the data asset processing system server; the first user private key of the first user is obtained from the client application side; the first encryption factor ciphertext data is decrypted according to the first user private key to obtain the first encryption factor; the first encryption factor is encrypted according to the second user public key to obtain the second encryption factor ciphertext data; the second encryption factor ciphertext data is uploaded to the data asset processing system server side and stored correspondingly with the second user public key and the first user's first ciphertext data; after the hash values ​​of the first ciphertext data and the second encryption factor ciphertext data are calculated respectively, the uplink data chain block is recorded in the transaction record data of the first user and the second user.

[0049] In the preferred embodiment of the asset transaction described above, the server side of the client application provider maintains the order purchase process between users (purchaser users, data asset owner users), such as order generation, order processing, payment processing, order delivery and order completion process. These are all the contents of ordinary e-commerce websites. These e-commerce products are intellectual property products such as music, pictures, texts, etc., which can be authorized to view, order to purchase authorized versions and authorized use, and transfer of ownership can be completed. These are all existing e-commerce technologies and will not be elaborated here. What needs to be revealed is how the user completes the transaction and transfers the encrypted and confirmed data assets to the purchasing user after the purchaser completes the payment. For the technical details of the specific transaction flow, please refer to the steps in the above embodiment. It is supplemented here that: the second encryption factor ciphertext data is uploaded to the data asset processing system server and saved corresponding to the second user's public key and the first user's first ciphertext data; this ensures that the purchaser user's first ciphertext data authorized for the transaction can be viewed under the data asset processing system user ID, and the hash values ​​of the first ciphertext data and the second encryption factor ciphertext data are calculated respectively and then recorded in the transaction record data of the first user and the second user in the chain data chain block, which also ensures that the transaction is recorded on the chain and corresponds to the hash value that can verify the integrity of the transaction data, so that the specific content of the transaction can be traced back, and the specific content is also confidential data, which can only be decrypted and viewed by the data owner user and the authorized user.

[0050] Preferably, in the above-mentioned embodiment, the embodiment can further realize the upload and confirmation of the transaction data in the client application provider server after the transaction is completed, so as to fully realize the encryption and confirmation of the transaction data. Specifically, the preferred embodiment further includes the following processing steps: obtaining the purchase payment related transaction data of the data owner user in the client application provider server; encrypting the purchase payment related transaction data according to the first encryption factor to obtain the second ciphertext data; uploading the second ciphertext data and the first encryption factor ciphertext data to the data asset processing system server and saving them corresponding to the first user's public key; wherein the hash values ​​of the second ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the first user's decentralized identity.

[0051] In the preferred embodiment of the encryption and authentication of the above-mentioned purchase payment related transaction data, the scope of the user authentication data is further increased, and the user's transaction data in the client application provider server can also be encrypted and authenticated through the processing scheme in the present invention, so that the client application provider cannot obtain the user's transaction data. If such transaction data needs to be used, the user's authorization processing is required.

[0052] In the above-mentioned embodiment 1, preferably, the embodiment can further authorize the client application provider to produce content for commercial release, and decrypt and then encrypt the content for upload, transfer, and authorization operations to realize commercial promotion of the confirmed data assets. Specifically, the preferred embodiment includes the following processing steps: authorizing the client application provider to obtain the user's confirmed user asset data; the client application provider produces a copy of the confirmed user asset data based on at least part of the user's confirmed user asset data; receiving the copy of the confirmed user asset data transferred to the user by the client application provider; authorizing the client application provider to load and display the copy of the confirmed user asset data in the application client.

[0053] In the above-mentioned preferred embodiment of authorizing the client application provider to produce and use content for commercial release, the client application provider can act as a purchaser user of the data asset processing system and normally obtain the confirmed data assets of the user authorized by the data asset owner user, such as a ten-chapter novel text work. In this way, the client application provider, as a purchaser user, can use at least part of the confirmed data assets to produce a copy of the confirmed user asset data for commercial release. For example, the first chapter of the ten-chapter novel text work can be made public for free trial reading by the user of the client application. In this preferred embodiment, the ownership of the copy of the confirmed user asset data is also to be transferred to the user data owner, because the ownership of all data should belong to the user, even the copy of the confirmed user asset data authorized by the user. Finally, the client application provider is authorized to load and display the copy of the confirmed user asset data in its application client, so as to carry out commercial publicity and release.

[0054] Embodiment 2: In order to more clearly reveal the working details of the user data asset processing system of the present invention, Figure 2 A module diagram of a user data asset processing system server device provided in Embodiment 2 of the present invention is shown in FIG.

[0055] In the second embodiment of the present invention, a user data asset processing system server device 200 is provided, which includes the following six modules: a decentralized identity (DID) user management module 201, a public key escrow module 202, a data asset confirmation management module 203, a system background management module 204, a secret data storage module 205 and a blockchain node server module 206. As a server-side device of the user data asset processing system, the user data asset processing system server device 200 can be at least one working server (to realize specific work logic processing) and a database server and a blockchain node server for secret data storage, so as to realize the functions of each module in the embodiment and complete the background functions of the user data asset processing system.

[0056] In the second embodiment of the present invention, the system background management module 204 is configured to: create users and user login and access within the management system; the user data asset processing system in the background server can preferably set at least administrator users, operator users, developer users, and terminal users, wherein the administrator user has the highest authority and can add, delete, modify, and manage the parameters and permissions of all other users; the operator user is an administrator-like user who can operate specific content in the system, and can manage the access of applications and application users, query / release applications, and query application users, view the details of applications and application users, and can determine whether applications and application users can access the user data asset processing system, and the operator user can also query and view the data records hosted and stored in the user data asset processing system, but cannot decrypt and view these data. According to the records; the developer user is configured for the application development management personnel of the application developer, who can manage the access of the application and the application user, query, modify, reset, add, enable, disable, view details and other operations on the application put on the user data asset processing system, manage the access of the application, and can query the application user, and view the details. In addition, the developer user can also query and view the user data records stored in the user data asset processing system, but cannot decrypt and view these data records; the terminal user is configured for each application user, and the SDK development kit of the data processing of the present invention is built in the client. This type of user can be connected to the user data asset processing system, and upload and save the public key of the custodian user, and can query, upload, download, encrypt and decrypt the data records encrypted and uploaded by the user. Preferably, in this embodiment, the terminal user can also define the user role and authority from the perspective of asset confirmation and transaction, such as: data asset right holder, data asset buyer, intermediary service user; and the above-mentioned developer user can also define the user role and authority from the perspective of asset confirmation and transaction, such as: data asset buyer, intermediary service user.

[0057] Therefore, in a preferred embodiment, the system background management module 204 may further include: a system user activation management module, which is configured to: set at least one of the data asset rights holder, data asset buyer, and intermediary service user for the client application user, and perform rights authentication and / or asset transaction flow for the user data assets of different users; wherein the user public key, the system user ID, the application user ID, and the user's decentralized identity are stored in a corresponding and consistent manner. The system user ID here refers to the corresponding user ID generated by the application user in the user data asset processing system.

[0058] In the second embodiment of the present invention, the decentralized identity user management module 201 is configured to: obtain the first user's decentralized identity generated by the first user based on the first user's private key and the first user's public key from the client, and record the first user's decentralized identity on the chain through the blockchain node server module; it can be seen that in the embodiment of the present invention, it is necessary to specifically generate the first user's decentralized identity based on the first user's private key and the first user's public key, which is used for the user's data on the blockchain to confirm the right to the chain, and the first user's private key and the first user's public key are also used in the encryption processing of data assets, so that only the user can decrypt its user data assets.

[0059] In the second embodiment of the present invention, the public key escrow module 202 is configured to: obtain and manage the first user public key uploaded from the client, which is stored corresponding to the first user decentralized identity; In the second embodiment of the present invention, the data asset right confirmation management module 203 is configured to: obtain and manage the first ciphertext data and the first encryption factor ciphertext data of the first user uploaded from the client, and link the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data to the blocks in the blockchain node server module respectively, and record them corresponding to the decentralized identity of the first user; it can be seen that the right confirmation in this embodiment is reflected in two aspects. On the one hand, the first ciphertext data and the first encryption factor ciphertext data are in the secret data storage module 205, and on the other hand, the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are to be linked to the records corresponding to the user's decentralized identity.

[0060] In the second embodiment of the present invention, the secret data storage module 205 is configured to: correspondingly store the first ciphertext data, the first encryption factor ciphertext data and the first user public key uploaded from the client; the blockchain node server module 206 is configured to be a node server for deploying and running a blockchain. Preferably, the blockchain node server module 206 is configured to be a blockchain node server for deploying and running a consortium chain.

[0061] In a preferred embodiment, the ciphertext data information table of the ciphertext data information record stored in the secret data storage module 205 is shown in Table 1 below, which is the ciphertext data information table in this embodiment, and the description of the fields it contains. The ciphertext data information table of this embodiment includes: owner_factor_HASH, oss_HASH, owner_DID, distributors_DID, and receiver_DID. In the ciphertext data information record table, the hash value of the encryption factor encrypted by the public key of the data owner and the hash value of the ciphertext data are recorded. The hash value calculation here can preferably be generated using the SHA-256 algorithm; and the DID of the data owner is added, as well as the DID of the distributor and the receiver after subsequent data distribution, authorization, and transfer, which can be recorded separately. These DID fields, which mark the DID tag corresponding to the application user, correspond to the DID in the block record in the blockchain, and can query the hash value of the ciphertext data of the user data asset that has been confirmed and the hash value of the corresponding encryption factor encrypted by the user's public key.

[0062] Field Name Field Description Remark id Primary Key ID The mark of each ciphertext data information item app_primary_id The primary key ID of the business system where the data is located app_id Data belongs to application ID cipher_type Ciphertext data type cipher_size Ciphertext data size owner_factor_sha256 Client encryption factor SHA256 value owner_factor The encryption factor after the data owner's public key is encrypted owner_factor_HASH Hash value of the encryption factor encrypted with the data owner's public key oss_name Ciphertext data storage name oss_url Ciphertext data storage address oss_HASH Ciphertext data hash value owner_id Data owner user ID The ID of the application user who owns the data owner_DID Data owner user DID The DID of the application user who owns the data distributors_id Distributor ID distributors_DID Distributor DID receiver_id Data Recipient ID receiver_DID Data recipient DID status Data distribution status 1: Owned 2: Authorized 3: Transferred first_create_date First creation date create_time Creation time update_time Update time is_delete Delete 0: Not deleted 1: Deleted Table 1 In addition, an application user information table is also maintained for application user information. The following Table 2 is the application user information table in this embodiment, and the description of the fields it contains. The application user information table of this embodiment has an application user DID field, which marks the DID tag corresponding to the application user. Corresponding to the DID in the block record in the blockchain, the hash value of the ciphertext of the user data asset that has been confirmed and the hash value of the encryption factor encrypted by the corresponding user public key can be queried; there is also the user's pubkey public key string field: Field Name Field Description Remark id Primary Key ID Per-app user information tag app_name Application Name app_id App ID app_creator_id App creator ID app_creator App creator name app_user_id Application User ID app_user_DID Application User DID pubkey_type Public key algorithm type 1: RSA algorithm 2: SM2 algorithm pubkey Public key string Specific algorithm generation create_time Creation time is_delete Delete 0: not deleted; 1: deleted Table 2 In this embodiment, preferably, in order to realize the transaction flow operation of the confirmed data assets, a data asset transaction management module (not shown) can be further added. The data asset transaction management module in this embodiment can respond to the payment request of the second user on the client application provider server side for the purchase of the first user's data, send the first encryption factor ciphertext data of the first user and the second user public key of the second user to the client application side; on the client application side, according to the first user's first user private key; decrypt the first encryption factor ciphertext data according to the first user private key to obtain the first encryption factor; encrypt the first encryption factor according to the second user public key to obtain the second encryption factor ciphertext data; receive the uploaded second encryption factor ciphertext data, and save it corresponding to the second user public key and the first user's first ciphertext data; wherein after the hash values ​​of the first ciphertext data and the second encryption factor ciphertext data are calculated respectively, the uplink data chain block is recorded in the transaction record data of the first user and the second user.

[0063] In this embodiment, preferably, in order to achieve pre-screening of data assets to be confirmed to determine user data assets that can be confirmed, and reduce improper confirmation and transaction flow of risky data assets by the user data asset processing system, a data asset pre-confirmation screening module can be further added, which is configured as follows: receiving user data assets to be confirmed sent by the first user with an anonymous user identifier through end-to-end encryption and decryption; performing feature extraction on the content of the user data assets to be confirmed, and performing infringement risk comparison and evaluation of the artificial intelligence model, and sending user data assets that can be confirmed but have no infringement risk to the client application side; deleting the received user data assets to be confirmed.

[0064] In this embodiment, preferably, in order to provide a proof of similarity evidence for the user data assets that are screened out as risky, a data asset authentication module can be further added, which is configured as follows: for the risky user data assets to be confirmed in the infringement risk comparison assessment given by the artificial intelligence model, obtain the similarity quantification index and / or similarity analysis data of the similar part given by the artificial intelligence model; encrypt the similarity quantification index and / or similarity analysis data of the similar part according to the first encryption factor to obtain the second ciphertext data; save the second ciphertext data and the first encryption factor ciphertext data corresponding to the first user public key; wherein the hash values ​​of the second ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the first user decentralized identity. It can be seen that in this embodiment, an artificial intelligence model can be trained in the user data asset processing system, which can give the infringement risk comparison assessment results, complete the similarity evidence preservation, and be linked to the block record in the blockchain.

[0065] In this embodiment, preferably, in order to facilitate the commercial release and promotion of user's confirmed user asset data, it is necessary to produce content that can be used for commercial release through the client application provider side, and a commercial release module can be further added, which is configured as follows: authorizing the client application provider user to obtain the confirmed user asset data of the first user; wherein the client application provider produces a copy of the confirmed user asset data based on at least part of the first user's confirmed user asset data; receiving the copy of the confirmed user asset data transferred by the client application provider user to the first user; authorizing the client application provider user to load and display the copy of the confirmed user asset data in the application client.

[0066] Embodiment three: To explain the overall picture of the user data asset processing system of the present invention more clearly, Figure 3 , which illustrates a third embodiment of the present invention, and provides a schematic diagram of the framework of a user data asset processing system. The third embodiment of the present invention provides a user data asset processing system, which includes a user terminal device 301, a user terminal device 302, an application 1 developer server 303, a user data asset processing system server device 304, and the Internet 305.

[0067] Among them, application 1 is installed in each user terminal device, and data confirmation and transaction SDK data package is integrated in application 1 to interact with application 1 developer server 303 and user data asset processing system server device 304 for data, so as to realize confirmation and transaction processing of user data assets; application 1 is, for example, a platform application for confirming and trading common data intangible assets such as text, pictures, videos, and audios. The user data assets that can be confirmed and traded supported by it are not limited to the types in the embodiment. As long as it is a data asset in a data format that is in demand in the market and is customized by the user, the user data asset processing system in the embodiment of the present invention can be used for confirmation and transaction. In addition, the SDK here is not limited to this form. It can also be a web script program in a browser, in which similar operation logic in the SDK can be run, which is all within the scope of the present invention. That is to say, the application here is a browser, in which the Web application of the platform for confirming and trading common data intangible assets can be loaded. These examples are all within the scope of the conception of the present invention and do not constitute a limitation on the scope of the present invention.

[0068] In the embodiment of the present invention, there is an application 1 developer server 303, which includes an application background support server 3032 and a data asset pre-confirmation screening module 3031; the data asset pre-confirmation screening module 3031 here is a preferred solution (shown by a dotted line), and the module can also be preferably set in the user data asset processing system server 304, that is, the data asset pre-confirmation screening module 3043 in the figure, and the user data asset processing system server device 304 side performs the pre-confirmation screening operation of the data asset. The working principle details of the data asset pre-confirmation screening module 3043 can be found in the preferred embodiment of the second embodiment, which pre-screens the data assets to be confirmed and determines the implementation details of the user data assets that can be confirmed. It will not be repeated here. The application background support server 3032 is an application server in the prior art field, which supports the client program to complete the creation and release of music, novels, pictures, and videos. Similar applications include Himalaya APP and its server.

[0069] In this embodiment, the user data asset processing system server device 304 includes: a DID user management module 3041, a public key escrow module 3042, a data asset pre-confirmation screening module 3043, a data asset confirmation management module 3044, a commercial release module 3045, a system background management module 3046, a data asset authentication module 3047, a data asset transaction management module 3048, a secret data storage module 3049 and a consortium chain node server module 30410. The DID user management module 3041, the public key escrow module 3042, the data asset confirmation management module 3044, the system background management module 3046, and the secret data storage module 3049 are similar to the decentralized identity (DID) user management module 201, the public key escrow module 202, the data asset confirmation management module 203, the system background management module 204, and the secret data storage module 205 in the second embodiment, and will not be repeated here. The commercial publishing module 3045, the data asset authentication module 3047, the data asset transaction management module 3048 and the alliance chain node server module 30410 are the same as the commercial publishing module, the data asset authentication module, the data asset transaction management module and the alliance chain node server module given in the preferred embodiment of the second embodiment, and will not be repeated here. The technical disclosure in the second embodiment can be referenced in this embodiment. Among them, the alliance chain node server module 30410 can also be other types of blockchains in blockchain technology, as long as it can meet the blockchain product and service of the present invention for recording the hash value of the confidential data and the DID user tag. In the embodiment of the present invention, there is also an Internet 305, which is the network where other blockchain node servers are located, and prepares for the blockchain to provide distributed node servers.

[0070] The user data asset processing system in the third embodiment of the present invention is only a preferred solution of the embodiment of the present invention, wherein for example the user terminal device, the application 1 developer server 303, the data asset pre-confirmation screening module 3043, the commercial publishing module 3045, the data asset authentication module 3047, the data asset transaction management module 3048 and the alliance chain node server module 30410 can all be combined into various preferred solutions according to the needs of the technical solution to form various new embodiments. These combination scheme embodiments are all within the scope of the present invention. For example, a preferred solution may not have the data asset authentication module 3047 and the data asset pre-confirmation screening module 3043. These functions can be implemented by the server of a third-party professional organization without being integrated into the user data asset processing system of the present invention.

[0071] The following Figure 4 , Figure 5 and Figure 6 , the following specific disclosure is given with respect to the information flow interaction example in the user data asset processing system in the third embodiment of the present invention. Figure 4 , Figure 5 and Figure 6 APP client corresponding to Figure 3 Application 1 in the data rights transaction SDK package; the APP provider server corresponds to Figure 3 The application 1 developer server 303 in the data asset processing system server corresponds to Figure 3 The user data asset processing system server device 304 in the following Figure 4 , Figure 5 and Figure 6 In the description of , it will not be repeated. Figure 4 , Figure 5 , Figure 6 User A in the example has authentication data A (or authenticatable data A), user B, encryption factor a1, ciphertext data A1, encryption factor ciphertext data B1, and encryption factor ciphertext data B2. These can all be explained in a unified manner in the examples in these figures.

[0072] in, Figure 4 This is a schematic diagram of the interaction flow generated for the first time by a new user in the user data asset processing system in the third embodiment of the present invention. Figure 4 In the embodiment 3 of the present invention, the APP client SDK corresponds to the data rights confirmation transaction SDK integrated in the application 1 of the user terminal device 301 and the user terminal device 302, the APP provider server corresponds to the application 1 developer server 303, and the data asset processing system server corresponds to the user data asset processing system server device 304. Figure 4As shown in , when user A of application 1 accesses the APP client, i.e., application 1, the SDK software package that comes with it will determine by itself whether user A is using the rights confirmation function for the first time. The judgment here is triggered when the user submits the selected files such as pictures, audio, and video files for user data confirmation. One of the innovative points of the embodiment of the present invention is that while providing data asset confirmation and transaction, it also completes the encryption protection of user data. Only the user himself can view his confirmed data assets, and only the user himself can decrypt or trade the confirmed data, realizing the efficient integration of rights confirmation transactions and encryption protection. If it is determined that it is the first time to initiate the user data asset confirmation, the user ID of the application user is uploaded to the data asset processing system server side. This upload process is preferably forwarded through the APP provider server in this embodiment. In the present invention, it can also be sent directly to the data asset processing system server side without being forwarded through the APP provider server. The data asset processing system server notifies the client-side user to obtain the user's public-private key pair and upload the user's public key. The user can obtain the public-private key pair from a credible third-party public-private key pair provider, or can generate it from the public-private key pair generation algorithm in the APP client SDK. In the APP client SDK, the DID generator is used to generate the decentralized identity (DID) of the application user based on the public-private key pair obtained by the user, and the user saves the obtained private key in a secure storage device. The storage security here can be guaranteed by the hardware provided by the user's device, or by the secure storage service in the device-side operating system to ensure that the private key is stored in a secure storage, or it can be stored in a secure storage area set by the APP client SDK. At the same time, the user public key and the user's decentralized identity (DID) will be uploaded to the data asset processing system server, and then the uploaded user public key of user A, the user's DID and the user's application user ID in the application will be saved in the data asset processing system server in the confidential data storage module 3049. The user DID established based on the DID can be recorded on the chain in the block of the alliance chain node server module 30410, so that the block can record the hash value of the user data asset corresponding to the user DID, as well as subsequent information such as transaction records, and other information recorded on the chain. Through this process, a new user ID can be established for the user of the application in the data asset processing system server, and the user DID can be chained in the alliance chain to prepare for the subsequent user data asset confirmation. Preferably, the data asset processing system server can also generate a data asset processing system user ID corresponding to the application user ID (see Figure 4In the dotted step "Generate a data asset processing system platform user"), this can establish a correspondence between the application user ID and the user ID of the data asset processing system platform, making it easier to query and manage users in the data asset processing system.

[0073] in, Figure 5 It is a schematic diagram of the interactive process of user data asset rights confirmation processing in Example 3 of the present invention. Figure 5 In the embodiment 3 of the present invention, the APP client SDK corresponds to the data rights confirmation transaction SDK integrated in the application 1 of the user terminal device 301 and the user terminal device 302, the APP provider server corresponds to the application 1 developer server 303, and the data asset processing system server corresponds to the user data asset processing system server device 304. Figure 5As shown in , user A accesses the APP client and initiates an encrypted confirmation request for his user data through the APP client SDK. In this embodiment, the APP provider server provides the user data to be confirmed to the data asset processing system server, and the data asset pre-confirmation screening module 3043 on the data asset processing system server side completes the screening of the user data to be confirmed, and screens out the confirmable data A that can be used for data asset confirmation. The screening process here can refer to the pre-confirmation screening process in Example 2 and Example 3, which will not be repeated here. After the confirmable data A is forwarded to the APP client SDK side, the APP client SDK generates an encryption factor a1, and uses the encryption factor a1 to symmetrically encrypt the confirmable data A to obtain the ciphertext data A1, and requests the data asset processing system server to obtain the user public key of user A. The public key was uploaded and stored in the data asset processing system server when user A first performed the confirmation function. The data asset processing system server queries the user ID of user A to obtain the user public key of user A, and returns the user public key to the APP client SDK side, so that the obtained user public key of user A can be used in the SDK to encrypt the encryption factor a1 to obtain the encryption factor ciphertext data B1, and then the ciphertext data A1 and the encryption factor ciphertext data B1 can be uploaded to the data asset processing system server. This upload can preferably be forwarded by the APP provider server. On the data asset processing system server side, the ciphertext data A1 and the encryption factor ciphertext data B1 of user A are stored in the secret data storage module 3049 corresponding to the user public key of user A. In addition, after hash calculation is performed on the ciphertext data A1 and the encryption factor ciphertext data B1, their hash values ​​are uploaded to the block corresponding to the user DID of user A in the alliance chain node server module 30410 for record and preservation. In this way, based on the confirmed user data asset information stored in the block on the above chain, an asset confirmation certificate for the confirmed user data asset can be generated for user A to use and distribute, and then verified and authenticated through the alliance chain in the data asset processing system server.

[0074] in, Figure 6 It is a schematic diagram of the interactive process of user data asset transaction processing in the third embodiment of the present invention. Figure 6 In the embodiment 3 of the present invention, the APP client SDK corresponds to the data rights confirmation transaction SDK integrated in the application 1 of the user terminal device 301 and the user terminal device 302, the APP provider server corresponds to the application 1 developer server 303, and the data asset processing system server corresponds to the user data asset processing system server device 304. Figure 6As shown in , user A already has user data assets, namely, the confirmation data A. Under the authorization of user A, the data asset processing system server sends the data assets that can be provided for commercial display to the APP provider server. The commercial display data assets are part of the confirmation data A. After user B views the commercial display data assets, he initiates a purchase order for the confirmation data A and completes the corresponding payment process. These e-commerce services can be provided on the Web site of the APP provider server. In its APP client, user A receives the payment completed by user B on the SDK side. The purchase transaction of the confirmation user data A needs to be confirmed by user A in order to complete the subsequent transaction process. User A completes the confirmation of the order transaction in the APP client SDK, and initiates a request to the data asset processing system server to obtain the user public key of user B and the encryption factor ciphertext data B1 corresponding to the confirmation data A of user A. The request is forwarded to the data asset processing system server side through the APP provider server. The data asset processing system server queries the information of user B and user A, obtains the user public key of user B and the encryption factor ciphertext data B1 corresponding to the confirmation data A of user A, and then forwards it back to the APP client SDK side through the APP provider server. By reading the user private key of user A stored locally on the APP client SDK side, the user private key can be used to decrypt the encryption factor ciphertext data B1 to obtain the encryption factor a1, and the encryption factor a1 can be encrypted again using the user public key of user B to obtain the encryption factor ciphertext data B2, and then the encryption factor ciphertext data B2 is forwarded to the data asset processing system server side through the APP provider server. The data asset processing system server side will save the ciphertext data A1 and encryption factor ciphertext data B2 of the user A corresponding to the user public key of user B through the secret data storage module 3049. In addition, after calculating the hash values ​​of the ciphertext data A1 and the encryption factor ciphertext data B2 respectively, they are chained and recorded in the block of the transaction information between user A and user B. In this way, user B has the ciphertext data A1 transferred to it by user A, and can use its private key to decrypt the ciphertext data A1, thereby completing the purchase and use of the ciphertext data A1. Finally, for user B, based on the information in the block of his DID information and the information of the transaction between user A and user B recorded in the block of the above chain to purchase the ciphertext data A1, an asset confirmation certificate can be generated in the name of user B, which contains the purchase transaction from user A to user data asset A, so that user B can reuse or redistribute user data asset A. The asset confirmation certificate in the name of user B is verified and authenticated through the alliance chain in the data asset processing system server.

[0075] Embodiment 4: In the fourth embodiment of the present invention, a client computer device is disclosed, which includes a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor. When the processor executes the computer program, the solution consisting of all possible steps and methods disclosed in the first embodiment above can be implemented, and the specific software solution implementation will not be repeated here.

[0076] Embodiment five: In the fifth embodiment of the present invention, a user data asset processing system is disclosed, which is similar to the user data asset processing system in the third embodiment, but the user data asset processing system in the fifth embodiment includes all the solutions of the user data asset processing system server device provided in the second embodiment and at least one client computer device as described in the fourth embodiment. Further, the various preferred embodiments of the user data asset processing system server device provided in the second embodiment can be used as the user data asset processing system server device in the fifth embodiment; in addition, all the embodiments of the client computer device disclosed in the fourth embodiment can be used as the client computer device in the user data asset processing system in the fifth embodiment.

[0077] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. Those of ordinary skill in the art may understand and implement the present invention without creative effort.

[0078] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for processing user data assets, running on the client side, comprising: Triggering a request for confirmation of the user data assets to be confirmed for the first user of the client application; Obtain the user data assets that can be confirmed among the user data assets to be confirmed; generating a first encryption factor; Encrypting the user data asset with verifiable rights according to a first encryption factor to obtain first ciphertext data; Obtaining, from the data asset processing system server, a first user public key for asymmetric encryption processing corresponding to a first user of the client application; wherein a first user private key of the first user is managed by the first user, and the first user public key and the first user private key generate a decentralized identity of the first user in the first blockchain; Encrypting the first encryption factor according to the first user public key to obtain first encryption factor ciphertext data; The first ciphertext data and the first encryption factor ciphertext data are uploaded to the data asset processing system server and saved correspondingly with the first user public key; wherein the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded correspondingly with the first user's decentralized identity.

2. The method according to claim 1, characterized in that The step of obtaining the user data assets that can be confirmed among the user data assets to be confirmed includes: The client application provider server extracts the characteristics of the user data assets to be confirmed requested by the user, conducts infringement risk comparison and assessment based on the artificial intelligence model, and provides user data assets that can be confirmed without infringement risks; The client application side obtains the user data asset that can be confirmed.

3. The method according to claim 1, characterized in that The step of obtaining the user data assets that can be confirmed among the user data assets to be confirmed includes: The first user sends the user data asset to be confirmed to the data asset processing system server by end-to-end encryption and decryption with a concealed user identity; Extract features from the content of user data assets to be confirmed, and conduct infringement risk comparison assessment using artificial intelligence models to provide user data assets that can be confirmed without infringement risks; Deleting the user data assets to be confirmed at the data rights confirmation transaction system server; The client application side obtains the user data asset that can be confirmed.

4. The method according to claim 1, characterized in that When triggering a request for confirmation of the user data asset to be confirmed of the first user of the client application, the method further includes: Determine that the first user of the client application is confirming the ownership of user data assets for the first time; Obtain a first user public key and a first user private key that can be used by a first user of a client application to perform asymmetric encryption and decryption processing; Generate a decentralized identity of the first user based on the first user's public key and the first user's private key; Storing the first user's private key on the client side; The decentralized identity of the first user, the public key of the first user, and the application user ID of the first user are uploaded to the server of the data asset processing system for corresponding storage; wherein the decentralized identity of the first user is recorded in the block on the first blockchain.

5. The method according to claim 1, characterized in that The method further comprises: In response to a payment request from a second user on the client application provider server side for completing the purchase of the first user's data, obtaining the first encryption factor ciphertext data of the first user and the second user public key of the second user from the data asset processing system server side; Obtaining a first user private key of a first user from a client application side; Decrypting the first encryption factor ciphertext data according to the first user private key to obtain the first encryption factor; Encrypting the first encryption factor according to the second user public key to obtain ciphertext data of the second encryption factor; The second encryption factor ciphertext data is uploaded to the data asset processing system server and saved correspondingly with the second user's public key and the first user's first ciphertext data; wherein after the hash values ​​of the first ciphertext data and the second encryption factor ciphertext data are calculated respectively, the on-chain data chain block is recorded in the transaction record data of the first user and the second user.

6. The method according to claim 1, characterized in that The method further comprises: Authorize the client application provider to obtain the first user's confirmed user asset data; The client application provider makes a copy of the confirmed user asset data based on at least part of the confirmed user asset data of the first user; Receiving a copy of the confirmed user asset data transferred to the first user by the client application provider; The authorized client application provider loads and displays the copy data of the confirmed user asset data in the application client.

7. The method according to claim 3, characterized in that The method further comprises: For the user data assets with risks to be confirmed in the infringement risk comparison assessment given by the artificial intelligence model, obtain the similarity quantitative indicators and / or similarity analysis data of the similar parts given by the artificial intelligence model; Encrypting the similarity quantification indicator and / or the similarity analysis data of the similar part according to the first encryption factor to obtain third ciphertext data; Uploading the third ciphertext data and the first encryption factor ciphertext data to the data asset processing system server and storing them in correspondence with the first user public key; Among them, the hash values ​​of the third ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and are recorded corresponding to the decentralized identity of the first user.

8. A user data asset processing system server device, comprising: The system backend management module is configured to: create users within the management system and manage user login and access; The decentralized identity user management module is configured to: obtain the first user's decentralized identity generated by the first user according to the first user's private key and the first user's public key from the client, and record the first user's decentralized identity on the blockchain through the blockchain node server module; A public key hosting module, configured to: obtain and manage the first user's public key uploaded from the client, which is stored in correspondence with the first user's decentralized identity; A data asset rights confirmation management module, configured to: obtain and manage the first ciphertext data and the first encryption factor ciphertext data of the first user uploaded from the client, and upload the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data to the blocks in the blockchain node server module, and record them in correspondence with the first user's decentralized identity; A secret data storage module, which is configured to: correspondingly store the first ciphertext data, the first encryption factor ciphertext data and the first user public key uploaded from the client; The blockchain node server module is configured as a node server for deploying and running blockchain.

9. A client computer device, comprising a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 7 is implemented. 10 . A user data asset processing system, comprising the user data asset processing system server device according to claim 8 and at least one client computer device according to claim 9 .

Images