E-commerce data processing method, device and system

Abstract

The e-commerce data processing method comprises the following steps: selecting an e-commerce product to form first e-commerce order information according to a hidden user identifier allocated to a first user by an e-commerce platform server; generating a first encryption factor; encrypting at least part of the first e-commerce order information according to the first encryption factor to obtain first ciphertext data; acquiring a first user public key corresponding to the first user hidden user identifier from an e-commerce data protection system server; wherein the first user private key is managed by a first user, and the first user public key and the first user private key generate a first user decentralized identity identifier; encrypting the first encryption factor according to the first user public key to obtain first encryption factor ciphertext data; the first ciphertext data and the first encryption factor ciphertext data are uploaded to an e-commerce data protection system server side and are stored corresponding to the first user public key; hash values of the first ciphertext data and the first encryption factor ciphertext data are linked to a block in the block chain, and are correspondingly recorded with the first user decentralized identity identifier.

Description

Technical Field

[0001] The present invention relates to the field of e-commerce technology, and in particular to an e-commerce data processing method, device and system thereof. Background Art

[0002] In today's e-commerce industry, user e-commerce data plays a vital role. The following is an introduction to user data in e-commerce: There are rich types of user data in e-commerce. Basic information can help e-commerce platforms understand the basic characteristics of e-commerce users to locate target users. Shopping behavior data is crucial. Purchase history can reflect consumer preferences and habits, providing a basis for personalized recommendations; browsing history can help understand points of interest and potential needs; shopping cart behavior can help improve conversion rates. Evaluation and feedback data are also critical. User evaluations, ratings, and order sharing can assist other users in making decisions, while complaints and suggestions prompt the platform to improve products and services. User data is of great value. It can achieve personalized recommendations and increase purchase conversion rates; conduct precision marketing and develop personalized strategies for different groups; optimize user experience, from website interface to shopping process and customer service; and can also help inventory management and supply chain optimization, reasonably arrange inventory based on purchase trends and demand forecasts, improve operational efficiency and reduce costs.

[0003] However, in most cases, it is difficult for users to fully exercise their rights to their own data. E-commerce platforms often take user data for themselves through user agreements. In this case, users lack a sense of control over their own data. Although user data is extremely valuable in the e-commerce field, users often have no awareness of it. After obtaining a large amount of user data, the platform may not fully ensure the security of user data and the protection measures are not in place, which brings many risks to user data.

[0004] In the existing public patents, there are many patent technical solutions for protecting the user data of e-commerce platforms, such as China Patent 1: Publication No. CN109583217B, Patent Name: "A Method for Encrypting and Decrypting User Privacy Data of Internet E-commerce Platforms". This invention patent discloses a method for encrypting user privacy data of Internet e-commerce platforms, which is encrypted and stored with a ciphertext key, including the following steps: generating a vector iv according to the original user data passed in; obtaining the encrypted and stored ciphertext key; decrypting the ciphertext key into a plaintext ciphertext key; encrypting the original user data byte stream with the AES256 / CFB8 / NOPADDING algorithm through the plaintext ciphertext key and the vector iv to obtain a first encrypted string; performing base64 encoding on the first encrypted string to obtain a second encrypted string; concatenating E-, iv, and the second encrypted string in sequence to obtain a third encrypted string, and storing the third encrypted string as encrypted data in the database. This invention encrypts user privacy data, which prevents the leakage of user privacy data information in the database system and improves the processing efficiency, but does not provide a solution for e-commerce users to manage and protect their e-commerce data. Summary of the invention

[0005] The embodiments of the present invention provide an e-commerce data processing method, device and system thereof, which are used to implement e-commerce data encryption managed by e-commerce users, forming hidden e-commerce to protect the privacy of e-commerce users.

[0006] In a first aspect, an embodiment of the present invention provides a method for processing e-commerce data, which runs on an e-commerce client side, and includes: selecting e-commerce product information to form first e-commerce order information based on a hidden user identifier assigned to a first user by an e-commerce platform server; generating a first encryption factor; encrypting at least part of the first e-commerce order information based on the first encryption factor to obtain first ciphertext data; obtaining a first user public key for asymmetric encryption processing corresponding to the hidden user identifier of the first user from an e-commerce data protection system server; wherein the first user private key of the first user is managed by the first user, and the first user public key and the first user private key generate a first user decentralized identity (Decentralized Identifier, DID) in a first blockchain; encrypting the first encryption factor based on the first user public key to obtain first encryption factor ciphertext data; uploading the first ciphertext data and the first encryption factor ciphertext data to the e-commerce data protection system server and saving them corresponding to the first user public key; wherein the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to blocks in the first blockchain, and recorded corresponding to the first user decentralized identity.

[0007] Optionally, the anonymous user identifier of the first user is generated and valid by being allocated corresponding to the user identifier of the first user during the order session.

[0008] Optionally, the e-commerce data processing method of the embodiment of the present invention further includes: when it is determined that the first user is an e-commerce user who registers for the first time with a hidden user identifier; obtaining the first user's public key and the first user's private key that can be used for asymmetric encryption and decryption processing; generating a decentralized identity of the first user based on the first user's public key and the first user's private key; storing the first user's private key on the client side; uploading the first user's decentralized identity, the first user's public key, and the first user's application user ID to the e-commerce data protection system server for corresponding storage; wherein the first user's decentralized identity is recorded in a block that is chained to the first blockchain.

[0009] Optionally, the e-commerce data processing method of the embodiment of the present invention further includes: the e-commerce platform server initiates an authorization request for the price payment information in the order information; encrypts the price payment information in the first e-commerce order information according to the first encryption factor to obtain second ciphertext data; authorizes the e-commerce platform server to obtain the second encryption factor ciphertext data and the second ciphertext data; wherein the second encryption factor ciphertext data is obtained by encrypting the first encryption factor according to the public key of the e-commerce platform server; the e-commerce platform server uses the e-commerce platform server private key to decrypt the second encryption factor ciphertext data to obtain the first encryption factor; decrypts the second ciphertext data according to the first encryption factor to obtain the price payment information in the first e-commerce order information, and generates corresponding payment link information; after performing a third-party payment process according to the payment link information, obtains third-party payment confirmation information.

[0010] Optionally, the e-commerce data processing method of the embodiment of the present invention further includes: the e-commerce logistics server initiates an authorization request for the address-type logistics information in the order information; encrypts the address-type logistics information in the first e-commerce order information based on the first encryption factor to obtain third ciphertext data; authorizes the e-commerce logistics server user to obtain the third encryption factor ciphertext data and the third ciphertext data; wherein the third encryption factor ciphertext data is obtained by encrypting the first encryption factor based on the public key of the e-commerce logistics server user; uses the e-commerce logistics server user private key to decrypt the third encryption factor ciphertext data to obtain the first encryption factor; decrypts the third ciphertext data based on the first encryption factor to obtain the address-type logistics information in the first e-commerce order information, and performs logistics delivery.

[0011] Optionally, the e-commerce data processing method of the embodiment of the present invention further includes: after registering as an e-commerce user with a hidden user identifier, triggering the submission of user e-commerce data on the e-commerce client side, wherein the user e-commerce data includes at least one of user description information, browsing history information, shopping cart behavior information, user evaluation feedback information, and user e-commerce social information; generating a second encryption factor; encrypting the user e-commerce data according to the second encryption factor to obtain fourth ciphertext data; obtaining the user public key of the e-commerce user from the e-commerce data protection system server; encrypting the second encryption factor according to the user public key to obtain fourth encryption factor ciphertext data; uploading the fourth ciphertext data and the fourth encryption factor ciphertext data to the e-commerce data protection system server and saving them corresponding to the user public key; wherein the hash values ​​of the fourth ciphertext data and the fourth encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the user decentralized identity of the e-commerce user.

[0012] Optionally, the step of selecting e-commerce product information to form the first e-commerce order information based on the anonymous user identifier assigned to the first user by the e-commerce platform server includes: responding to the authorization request of the recommendation data AI big model of the e-commerce platform server for the user e-commerce data of the first user; authorizing the user e-commerce data corresponding to the anonymous user identifier of the first user and encrypted and stored on the server side of the e-commerce data protection system to be decrypted and given to the recommendation data AI big model of the e-commerce platform server as input data; the recommendation data AI big model outputs the first recommended product information; on the e-commerce platform server side, deleting the user e-commerce data authorized to be decrypted to the e-commerce platform server; sending the first recommended product information as recommendation data to the e-commerce client side corresponding to the first user; receiving the e-commerce product information selected by the first user from the first recommended product information; and forming the first e-commerce order information based on the selected e-commerce product information.

[0013] In a second aspect, an embodiment of the present invention provides an e-commerce data protection system server device, including: a system background management module, which is configured to: create and manage users and user logins and access within the management system, and set a system user ID for the user; a decentralized identity user management module, which is configured to: obtain a first user decentralized identity generated by a first user based on a first user private key and a first user public key from an e-commerce program client, and record the first user decentralized identity on the chain through a blockchain node server module, and the user's decentralized identity corresponds to the user's system user ID; a public key hosting module, which is configured to: obtain, manage, and provide to the outside the first user public key uploaded from the e-commerce program client, and the first user public key is stored corresponding to the first user decentralized identity; a user e-commerce data management module, which is configured to: obtain and manage the first ciphertext of the first user uploaded from the e-commerce program client The first ciphertext data and the first encryption factor ciphertext data are encrypted, and the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively chained to the blocks in the blockchain node server module, and recorded correspondingly with the first user decentralized identity; wherein, the first encryption factor ciphertext data is obtained by encrypting the first encryption factor generated on the e-commerce program client side according to the first user public key; the first ciphertext data is obtained by encrypting at least part of the first e-commerce order information of the e-commerce user according to the first encryption factor; a secret data storage module, which is configured to: correspondingly save the first ciphertext data, the first encryption factor ciphertext data and the first user public key uploaded from the e-commerce program client; a data transceiver module, which is configured to: receive and send data related to the user e-commerce information between the e-commerce program client and / or the e-commerce server; a blockchain node server module, which is configured to be a node server for deploying and running blockchain.

[0014] In a third aspect, an embodiment of the present invention provides a client computer device, comprising a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, wherein when the processor executes the computer program, the method steps in the method for processing e-commerce data provided by the embodiment of the present invention in the first aspect above are implemented.

[0015] In a fourth aspect, an embodiment of the present invention provides an e-commerce data processing system, which includes an e-commerce data protection system server device as provided by the embodiment of the present invention in the second aspect above and at least one client computer device as provided by the embodiment of the present invention in the third aspect above and an e-commerce platform server respectively connected to the client computer device and the e-commerce data protection system server device.

[0016] By adopting the e-commerce data processing method of the present invention, the e-commerce user uses the hidden user identifier to complete the generation of e-commerce order information, and can encrypt the e-commerce order according to the encryption factor to obtain the ciphertext data, and encrypt the encryption factor with the public key of the e-commerce user to obtain the encryption factor ciphertext data, and upload the ciphertext data and the encryption factor ciphertext data to the background for corresponding storage with the user's public key, and chain its hash value to the block and record it corresponding to the user DID generated by the user's public and private keys, wherein the user's private key is managed by the user himself, and the user's public key is uploaded to the background for storage. Through the above technical means, the user's e-commerce data can be concealed from other parties. For example, in the case of unauthorized e-commerce platforms and logistics parties, the user's e-commerce data is in ciphertext state, which can be concealed. Even if the e-commerce platform is attacked by hackers, the user's e-commerce data is safe; and the user's e-commerce data in the present invention is marked with DID and the user's e-commerce data is stored on the chain, which further ensures the encryption and non-tamperability of the user's e-commerce data, and guarantees the anonymity of the user's e-commerce data and the data access authorized by the e-commerce user. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work.

[0018] Figure 1 A schematic diagram of a process of processing e-commerce data provided in the first embodiment of the present invention; Figure 2 A schematic diagram of a module of a server device of an e-commerce data protection system provided in Embodiment 2 of the present invention; Figure 3 A schematic diagram of the framework of an e-commerce data processing system provided in Embodiment 3 of the present invention; Figure 4 This is a schematic diagram of the interaction process when a user registers in an e-commerce data processing system in Embodiment 3 of the present invention; Figure 5 This is a schematic diagram of an interactive process for encrypting user e-commerce data when it is uploaded from an e-commerce client in Embodiment 3 of the present invention; Figure 6 This is a schematic diagram of the interactive process of an order payment transaction of an e-commerce user in Embodiment 3 of the present invention; Figure 7 The diagram is a schematic diagram of the interactive process of logistics delivery information processing for e-commerce users in the third embodiment of the present invention. DETAILED DESCRIPTION

[0019] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0020] The terms used in the embodiments of the present invention are only for the purpose of describing specific embodiments, and are not intended to limit the present invention. The singular forms "a", "said" and "the" used in the embodiments of the present invention and the appended claims are also intended to include plural forms, unless the context clearly indicates other meanings, and "multiple" generally includes at least two.

[0021] As used herein, the words "if" and "if" may be interpreted as "at the time of" or "when" or "in response to determining" or "in response to detecting", depending on the context. Similarly, the phrases "if it is determined" or "if (stated condition or event) is detected" may be interpreted as "when it is determined" or "in response to determining" or "when detecting (stated condition or event)" or "in response to detecting (stated condition or event)", depending on the context.

[0022] In addition, the step sequence in the following method embodiments is only an example and not a strict limitation.

[0023] Embodiment 1: Figure 1 A flowchart of a method for processing e-commerce data provided in Embodiment 1 of the present invention is provided. In Embodiment 1, the method for processing e-commerce data is run on the e-commerce program client side of the e-commerce user, and includes the following steps: Step 100: Selecting e-commerce product information to form first e-commerce order information according to the hidden user identifier assigned to the first user by the e-commerce platform server; The first user in the above step 100 is a terminal side user corresponding to the e-commerce platform server. After the user logs in, if it is an e-commerce user with a hidden e-commerce function, it will be assigned a hidden user identifier that is valid in its shopping session, which corresponds to its user ID. It is only generated in its shopping session and can be effectively used. After the shopping session process ends, the temporary hidden user identifier becomes invalid, thereby ensuring that the user ID will not be leaked to other people and the privacy of the shopping user is guaranteed. Preferably, the hidden user identifier of the first user can be correspondingly stored on the server side of the e-commerce data protection system, and a corresponding mapping relationship can be established with the user ID of the e-commerce user, the system user ID generated by the e-commerce data protection system for the e-commerce user, and the DID of the e-commerce user established subsequently, so that the encrypted e-commerce data, e-commerce user public key and other information of the e-commerce user can be queried.

[0024] Preferably, in this embodiment, in step 100, a recommendation data AI big model may be set up on the e-commerce platform server, which may train the big model data on the user e-commerce data of the first user and then output the e-commerce product information recommended to the e-commerce user for purchase. In this way, the recommendation data AI big model of the e-commerce platform server will initiate an authorization request for the user e-commerce data of the first user, so that the e-commerce program client will respond to the authorization request, and authorize the decryption of the user e-commerce data corresponding to the hidden user identifier of the first user and encrypted and stored on the server side of the e-commerce data protection system to be given to the recommendation data AI big model of the e-commerce platform server as input data for training. The recommendation data AI big model outputs recommended product information and sends it as recommended data to the e-commerce client side corresponding to the first user; for details of the authorization and decryption steps in this embodiment, please refer to the various flow chart examples in the following embodiment three, which will not be repeated here; in this embodiment, on the e-commerce platform server side, the user e-commerce data authorized to be decrypted to the e-commerce platform server is deleted. This is to ensure that after the recommendation data AI big model completes training and recommendation, the current user data is not retained to ensure the security of user privacy data; then, the first user selects the pre-purchased e-commerce product information from the output recommended product information, thereby forming e-commerce order information, and completing the e-commerce order process in the e-commerce platform server.

[0025] Step 101: Generate a first encryption factor; The encryption factor in the first embodiment of the present invention can be a randomly generated key for symmetric encryption. Other encryption keys using symmetric encryption algorithms can all be used as encryption factors in the first embodiment of the present invention. For example, the 128-bit encryption key in the national encryption SM4 algorithm can all be covered in the scope of the present invention. Preferably, the present invention can use the AES (Advanced Encryption Standard) algorithm to generate a string of random binary sequences as a key through a secure random number generator, and the key length is 128 bits, 192 bits or 256 bits; the secure random number generator in this embodiment will ensure that the generated key has sufficient randomness based on complex algorithms and hardware entropy sources (such as thermal noise, clock jitter, etc.). Preferably, the first encryption factor is only used in the current batch of encrypted data, and the second encryption factor, the third encryption factor, etc. can be regenerated for other batches of user data after a specified time, or other batches of user data in a specified user interface, and applied to subsequent encryption processing to enhance the security level of user data encryption; preferably, for example, in an e-commerce scenario, one encryption factor can be used for data in the order link, another encryption factor can be used for data in the payment link, and a new encryption factor can be used in the next e-commerce order link.

[0026] Step 102: Encrypt at least a portion of the first e-commerce order information according to a first encryption factor to obtain first ciphertext data; In the first embodiment, preferably, the first e-commerce order information includes the following content: 1. Order customer information Username ID: used to identify the customer. In this example, a hidden user ID is used. A secure hash function (such as SHA-256) can be used to perform a hash operation on the user's username, registration time, device information, etc. to obtain a fixed-length hash value as the hidden user ID. In this way, even if an attacker obtains this hash value, it is difficult to reverse the original user information.

[0027] contact information: 1. Username identification: ensure that the goods are delivered to the recipient accurately 2. Mobile phone number: It is convenient for the courier to contact the recipient and receive logistics information notifications 3. Email: can be used to receive electronic documents such as order confirmation, invoices, etc. 4. Detailed address: including province, city, district, street, house number, etc., key information for product delivery Product Information Product Name: Specify the specific product you purchased Product specifications: such as size, color, model, etc., to ensure that merchants provide products that meet customer needs Quantity of product: The specific quantity of the product purchased by the customer Unit price of a product: the price of a single product Order status information Order time: record the specific date and time when the customer submits the order Payment status: Not paid / paid / payment failed, etc., showing whether the customer has completed the payment and the payment status Payment method: such as WeChat payment, Alipay, bank card payment, etc. Shipping status: Not shipped / shipped / signed for, etc., reflecting the logistics progress of the product Logistics information: including the name of the logistics company, express delivery number, etc., to facilitate customers to check the transportation track of the package Order status: pending / processing / completed / cancelled, etc., indicating the status of the order at different stages Price Information Total price of goods: the total price calculated by multiplying the unit price of the goods by the quantity Discount information: Coupon discount: the amount of coupon used and the discount ratio; discount discount: the amount of discount after reaching a certain amount; promotion discount: the cost saved such as buy one get one free, discount activities, etc. Shipping fee: If there is a shipping fee, the specific amount will be displayed Total order price: the total price of the goods plus shipping costs and discounts.

[0028] For the above-mentioned different categories (four categories are given above) of user e-commerce order information, it can be encrypted at multiple levels according to the first encryption factor, so as to prepare for the subsequent authorization and decryption requirements of different scenarios. For example, all e-commerce order information can be encrypted once to generate a first ciphertext data; it can also be, for example, only the commodity information part is encrypted, so as to prepare for the subsequent logistics link to prepare for stocking, and the e-commerce user can authorize decryption to the logistics party for use; it can also be, for example, only the contact information part is encrypted, so as to prepare for the subsequent logistics distribution link to be distributed, and the e-commerce user can authorize decryption to the logistics distribution personnel for use; it can also be, for example, only the total price of the order is encrypted, so as to prepare for the subsequent payment link to generate a third-party payment link, and the e-commerce user can authorize decryption to the e-commerce server side for the total price of the order to be paid. In the subsequent disclosure of the embodiments of the present invention, these authorization and decryption situations are disclosed; the above is only an example, and at least a part of the e-commerce order information can be encrypted according to the needs of those skilled in the art, and uploaded to the server side of the e-commerce data protection system for storage, in preparation for subsequent authorization and decryption.

[0029] Preferably, this step uses symmetric encryption technology. In the first embodiment, a combination of symmetric encryption and asymmetric encryption is used to make the user data encryption and authentication process fast and secure, thus achieving a balance between efficiency and convenience.

[0030] Step 103: Obtaining a first user public key for asymmetric encryption processing corresponding to the hidden user identifier of the first user from the server side of the e-commerce data protection system; wherein the first user private key of the first user is managed by the first user himself, and the first user public key and the first user private key generate a decentralized identity identifier of the first user in the first blockchain; In this step, the user public key is the public key in the public-private key pair used in the asymmetric encryption algorithm, and the private key will be securely stored and used by the user himself. The asymmetric encryption algorithm here is preferably the RSA (Rivest-Shamir-Adleman) algorithm. In the present invention, the public-private key pairs of asymmetric encryption algorithms other than the RSA algorithm, such as the national secret SM2 algorithm, can be used as the user public key and user private key in Example 1 of the present invention, and can be covered by the scope of the present invention. In this embodiment, the e-commerce user’s registration (the process of new user registration, please refer to Figure 4 The first user public key is uploaded as the saved user public key in the flowchart, and the e-commerce data protection system server manages the user public key to facilitate subsequent requests for use. In the present invention, the first user public key and the first user private key obtained by the e-commerce user are used to generate a user decentralized identity, and the decentralized identity (Decentralized Identifier, DID) is chained in the block to achieve tamper-proof storage of the e-commerce data encrypted by the e-commerce user. On the one hand, the first user public key and the first user private key can encrypt user data assets to ensure that only users can view their data assets. At the same time, based on the first user public key and the first user private key, a DID is generated to perform chain operations in the blockchain block, thereby obtaining the advantages of blockchain technology in improving data credibility and transparency.

[0031] Step 104: Encrypt the first encryption factor according to the first user public key to obtain the first encryption factor ciphertext data; The process of encrypting data using an asymmetric public key in this step is a general process of encrypting data using a public key such as in an RSA algorithm. Asymmetric encryption algorithms well known to those skilled in the art can be used here and will not be described in detail here.

[0032] Step 105: Upload the first ciphertext data and the first encryption factor ciphertext data to the e-commerce data protection system server and save them corresponding to the first user public key; wherein the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the first user's decentralized identity.

[0033] In this step, it is ensured that the first ciphertext data, the first encryption factor ciphertext data, and the user's public key are stored on the server side of the e-commerce data protection system, so that the encrypted storage and privacy protection of the e-commerce data of the e-commerce user are realized. Only the e-commerce user can use the private key to decrypt the ciphertext data of the user's e-commerce data, and it is also convenient to retrieve the user's encrypted e-commerce data based on the user's public key, user ID, and user DID, creating conditions for subsequent users to use private keys for decryption. At the same time, the hash values ​​of the user's ciphertext data and the encryption factor ciphertext data are also calculated, and then chained to the blocks in the blockchain, and recorded correspondingly with the first user's decentralized identity (DID), so that the hash values ​​of the user's ciphertext data and the encryption factor ciphertext data can be obtained through the DID, and the data integrity check can be performed. After the check is correct, the corresponding ciphertext data and the encryption factor ciphertext data can be found on the server side of the e-commerce data protection system, thereby completing the acquisition of the e-commerce data of the e-commerce user; in addition, the use of the user's DID to mark the encrypted e-commerce data also plays a role in hiding the e-commerce user's identity, and also combines the advantages of blockchain technology to achieve better anonymity and realize a truly hidden e-commerce process.

[0034] In the above-mentioned embodiment 1, preferably, the embodiment can further include the step of registering an e-commerce user with a concealed e-commerce function for the first time. Specifically, the preferred embodiment includes the following processing steps: when it is determined that the first user is an e-commerce user who registers with a concealed user identifier for the first time; obtain the first user's public key and the first user's private key that can be used for asymmetric encryption and decryption processing; generate the first user's decentralized identity identifier based on the first user's public key and the first user's private key; store the first user's private key on the client side; upload the first user's decentralized identity identifier, the first user's public key, and the first user's application user ID to the e-commerce data protection system server for corresponding storage; wherein the first user's decentralized identity identifier is recorded in the block chained to the first blockchain. When registering a concealed e-commerce user for the first time, the e-commerce user needs to obtain the user's public key and the user's private key that can be used for asymmetric encryption and decryption processing by himself. This acquisition can be implemented in the SDK package provided by the e-commerce client to provide such a public-private key pair for the e-commerce user, or the user can access the service port of a third-party digital certificate certification agency (Certificate Authority CA) that can provide asymmetric encryption and decryption public-private key pairs to apply for acquisition. One of the innovations of the present invention is that the public-private key pair is used to encrypt and decrypt the user's e-commerce data under the full control and authorization of the user, and the public-private key pair is used to generate the user's DID identification, preparing the e-commerce user identification for the subsequent chain-linking of e-commerce data, thereby efficiently realizing the encryption of e-commerce data and the chain-linking of the user's e-commerce data.

[0035] In the above-mentioned embodiment 1, preferably, the embodiment may further include a step of submitting and encrypting the e-commerce data of the hidden e-commerce user for storage. Specifically, a preferred embodiment includes the following processing steps: after registering as an e-commerce user with a hidden user identifier, triggering the submission of user e-commerce data on the e-commerce client side, wherein the user e-commerce data includes at least one of user description information, browsing history information, shopping cart behavior information, user evaluation feedback information, and user e-commerce social information; generating a second encryption factor (it should be noted that the second encryption factor and the first encryption factor in this example are not the same encryption factor, and the same encryption factor will be used for encryption within the same batch of data encryption); encrypting the user e-commerce data according to the second encryption factor to obtain fourth ciphertext data; obtaining the user public key of the e-commerce user from the server side of the e-commerce data protection system; encrypting the second encryption factor according to the user public key to obtain fourth encryption factor ciphertext data; uploading the fourth ciphertext data and the fourth encryption factor ciphertext data to the server side of the e-commerce data protection system and saving them corresponding to the user public key; wherein the hash values ​​of the fourth ciphertext data and the fourth encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded corresponding to the user decentralized identity identifier of the e-commerce user. In this embodiment, the second encryption factor is used, which is the same as the generation of the first encryption factor, and will not be repeated here. This preferred embodiment is for encryption processing other than e-commerce order information, and can also be for e-commerce users to submit to the e-commerce platform server for storage, such as user description information, browsing history information, shopping cart behavior information, user evaluation feedback information, user e-commerce social information, these e-commerce users' e-commerce data can be encrypted and stored, and the corresponding chain processing, so that all e-commerce data in the interaction between e-commerce users and e-commerce platform servers can be encrypted to the e-commerce platform server, thereby achieving complete concealment of e-commerce.

[0036] In the above-mentioned embodiment 1, preferably, the embodiment can further include the step of payment process based on e-commerce order information. Specifically, the preferred embodiment includes the following processing steps: the e-commerce platform server initiates an authorization request for the price payment information in the order information; encrypts the price payment information in the first e-commerce order information according to the first encryption factor to obtain the second ciphertext data; authorizes the e-commerce platform server to obtain the second encryption factor ciphertext data and the second ciphertext data; wherein the second encryption factor ciphertext data is obtained by encrypting the first encryption factor according to the public key of the e-commerce platform server; the e-commerce platform server uses the e-commerce platform server private key to decrypt the second encryption factor ciphertext data to obtain the first encryption factor; decrypts the second ciphertext data according to the first encryption factor to obtain the price payment information in the first e-commerce order information, and generates the corresponding payment link information; after performing the third-party payment process according to the payment link information, obtain the third-party payment confirmation information.

[0037] Specifically, the above preferred embodiment is disclosed. On the e-commerce client side, the e-commerce user encrypts the price payment information in the first e-commerce order information according to the first encryption factor to obtain the second ciphertext data; and further obtains the public key of the e-commerce platform server user from the e-commerce data protection system server side, and uses the public key of the e-commerce platform server (here, the e-commerce platform server can be regarded as a user, which also has a public-private key pair, so it can also be referred to as the public key of the e-commerce platform server user and the private key of the e-commerce platform server user) to encrypt the first encryption factor to obtain the second encryption factor ciphertext data, and upload it together with the second ciphertext data to the e-commerce data protection system server side and store it in correspondence with the public key of the e-commerce platform server, so that the e-commerce platform server user can obtain the second encryption factor ciphertext data, the second ciphertext data and the e-commerce platform server user public key according to his user ID. In this way, the e-commerce platform server can query the second encryption factor ciphertext data and the second ciphertext data under its user data item from the e-commerce data protection system server side, so as to complete the authorization of the e-commerce platform server to obtain the second encryption factor ciphertext data and the second ciphertext data. It can be seen that the e-commerce platform server exists entirely as an e-commerce data protection system user. It also has its own public and private keys, can save its own encrypted data on the e-commerce data protection system server, and can also receive e-commerce data from users authorized by e-commerce users. This authorization data is given to the e-commerce platform server user to help it complete the e-commerce payment process more efficiently.

[0038] In the above-mentioned embodiment 1, preferably, the embodiment can further include the process steps of logistics delivery based on e-commerce order information. Specifically, the preferred embodiment includes the following processing steps: the e-commerce logistics server initiates an authorization request for the address-type logistics information in the order information; encrypts the address-type logistics information in the first e-commerce order information according to the first encryption factor to obtain the third ciphertext data; authorizes the e-commerce logistics server user to obtain the third encryption factor ciphertext data and the third ciphertext data; wherein the third encryption factor ciphertext data is obtained by encrypting the first encryption factor according to the public key of the e-commerce logistics server user; uses the e-commerce logistics server user private key to decrypt the third encryption factor ciphertext data to obtain the first encryption factor; decrypts the third ciphertext data according to the first encryption factor to obtain the address-type logistics information in the first e-commerce order information, and performs logistics delivery.

[0039] Specifically, the above preferred embodiment is disclosed. On the e-commerce client side, the e-commerce user encrypts the address-type logistics information in the first e-commerce order information according to the first encryption factor to obtain the third ciphertext data; and further obtains the public key of the e-commerce logistics server user from the e-commerce data protection system server side, uses the public key of the e-commerce logistics server user to encrypt the first encryption factor to obtain the third encryption factor ciphertext data, and uploads it together with the third ciphertext data to the e-commerce data protection system server side and stores it in correspondence with the public key of the e-commerce logistics server user, so that the e-commerce logistics server user can obtain the third encryption factor ciphertext data, the third ciphertext data and the e-commerce logistics server user public key according to its user ID. In this way, the e-commerce logistics server user (the user is preferably, for example, a logistics express delivery person) can query the third encryption factor ciphertext data and the third ciphertext data under its user data item from the e-commerce data protection system server side, so that the e-commerce logistics server user can be authorized to obtain the third encryption factor ciphertext data and the third ciphertext data. It can be seen that the e-commerce logistics server user exists entirely as an e-commerce data protection system user. It also has its own public and private keys, can save its own encrypted data on the e-commerce data protection system server, and can also receive e-commerce data of e-commerce users authorized by e-commerce users. This authorization data is given to the e-commerce logistics server user to enable it to complete the e-commerce logistics delivery process more efficiently.

[0040] Embodiment 2: In order to more clearly reveal the working details of the e-commerce data processing system of the present invention, Figure 2 A module diagram of an e-commerce data protection system server device provided by Embodiment 2 of the present invention is shown in FIG. As a preferred embodiment of the e-commerce data protection system server of the present invention, the following is disclosed: In the second embodiment of the present invention, an e-commerce data protection system server device 200 is provided, which includes the following six modules: a decentralized identity (DID) user management module 201, a public key escrow module 202, a user e-commerce data management module 203, a data transceiver module 204, a system background management module 205, a secret data storage module 206 and a blockchain node server module 207. As a server-side device of the e-commerce data protection system, the e-commerce data protection system server device 200 can be at least one working server (to realize specific working logic processing) and a database server and a blockchain node server for secret data storage, so as to realize the functions of each module in the embodiment and complete the background functions of the e-commerce data protection system.

[0041] In the second embodiment of the present invention, the system background management module 205 is configured as follows: creating users in the management system and user login and access, and setting system user identification for users; the e-commerce data protection system in the background server can preferably set at least administrator users, operator users, e-commerce server users (e-commerce payment server users and e-commerce logistics server users can be used as a sub-user of e-commerce server users), and e-commerce application users. The administrator user has the highest authority and can add, delete, modify, and manage the parameters and permissions of all other users; the operator user is a user similar to an administrator who can operate specific content in the system. He can manage the access of e-commerce applications and e-commerce application users, query / add and remove e-commerce applications, and query e-commerce application users, view the details of e-commerce applications and e-commerce application users, and can determine whether e-commerce applications and e-commerce application users can access the e-commerce data protection system, and the operator user can also query and view the user e-commerce data records hosted and stored in the e-commerce data protection system, but cannot decrypt and view these data records. The e-commerce server user is configured for use by the application development management personnel of the e-commerce application developer, and can manage the access of the e-commerce application and the e-commerce application user, query, modify, reset, add, enable, disable, view details and other operations on the e-commerce application listed in the e-commerce data protection system, manage the access of the e-commerce application, and can query the e-commerce application user, and view details, in addition, the e-commerce server user can also query and view the user e-commerce data records stored in the e-commerce data protection system, but cannot decrypt and view these data records; the e-commerce application user is configured for use by each e-commerce application user, and the SDK development kit of the data processing of the present invention is built in its client, and this type of user can be connected to the e-commerce data protection system, and upload and save the public key of the hosted e-commerce user, and can query, upload, download, encrypt and decrypt the e-commerce data records encrypted and uploaded by the e-commerce user. Preferably, in this embodiment, the e-commerce application user can also define the user role and authority from the perspective of e-commerce transactions, for example: e-commerce buyer user, e-commerce seller user; and the e-commerce server user can be divided into e-commerce payment server user and e-commerce logistics server user according to the functional sub-items, which can exist as a sub-user of the e-commerce server user.

[0042] In the second embodiment of the present invention, the decentralized identity (DID) user management module 201 is configured to: obtain the first user's decentralized identity generated by the first user based on the first user's private key and the first user's public key from the e-commerce program client, and record the first user's decentralized identity on the chain through the blockchain node server module 207. The user's decentralized identity corresponds to the user's system user identity.

[0043] In the second embodiment of the present invention, the public key hosting module 202 is configured to obtain, manage, and provide externally a first user public key uploaded from an e-commerce program client, wherein the first user public key is stored corresponding to the first user decentralized identity.

[0044] In the second embodiment of the present invention, the user e-commerce data management module 203 is configured to: obtain and manage the first ciphertext data and the first encryption factor ciphertext data of the first user uploaded from the e-commerce program client, and chain the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data to the block in the blockchain node server module, and record them corresponding to the first user's decentralized identity; wherein, the first encryption factor ciphertext data is obtained by encrypting the first encryption factor generated by the e-commerce program client side according to the first user public key; the first ciphertext data is obtained by encrypting at least part of the first e-commerce order information of the e-commerce user according to the first encryption factor. The storage is all carried out in the secret data storage module 206. The first ciphertext data here encrypts at least part of the first e-commerce order information of the e-commerce user according to the first encryption factor, which can be based on the specific demand scenario of the e-commerce, such as requesting authorization for some specific e-commerce data. This method of partially authorizing the decryption of data ensures the data security and privacy protection of the e-commerce user, and truly realizes the request for authorization to use part of the e-commerce data according to the scenario requirements.

[0045] In the second embodiment of the present invention, the secret data storage module 206 is configured to correspondingly store the first ciphertext data, the first encryption factor ciphertext data and the first user public key uploaded from the e-commerce program client.

[0046] In a preferred embodiment, the encrypted data information table 1 of the ciphertext data information record stored in the secret data storage module 206 is shown in Table 1 below, which is the ciphertext data information table in this embodiment, and the description of the fields it contains. The ciphertext data information table in this embodiment includes: owner_factor_HASH, oss_HASH, owner_DID, distributors_DID, and receiver_DID. In the ciphertext data information record table, the hash value of the encryption factor after the data owner's public key is encrypted, and the hash value of the ciphertext data are recorded. The hash value calculation here is preferably generated using the SHA-256 algorithm, and in this embodiment, the ciphertext data is obtained by encrypting at least part of the e-commerce order information using the encryption factor; and the DID of the data owner is added, as well as the DID of the distributor and the receiver after subsequent data distribution, authorization, and transfer, which can be recorded separately. These DID fields, which mark the DID tag corresponding to the application user, correspond to the DID in the block record in the blockchain, and can query the hash value of the ciphertext data of the corresponding e-commerce data and the hash value of the encryption factor after the corresponding user's public key encryption.

[0047] Field Name Field Description Remark id Primary Key ID The mark of each ciphertext data information item app_primary_id The primary key ID of the business system where the data is located app_id Data belongs to application ID cipher_type Ciphertext data type cipher_size Ciphertext data size owner_factor_sha256 Client encryption factor SHA256 value owner_factor The encryption factor after the data owner's public key is encrypted owner_factor_HASH Hash value of the encryption factor encrypted with the data owner's public key oss_name Ciphertext data storage name oss_url Ciphertext data storage address oss_HASH Ciphertext data hash value owner_id Data owner user ID The ID of the application user who owns the data owner_DID Data owner user DID The DID of the application user who owns the data distributors_id Distributor ID distributors_DID Distributor DID receiver_id Data Recipient ID receiver_DID Data recipient DID status Data distribution status 1: Owned 2: Authorized 3: Transferred first_create_date First creation date create_time Creation time update_time Update time is_delete Delete 0: Not deleted 1: Deleted Table 1 In addition, an application user information table 2 is also maintained for application user information. The following table 2 is the application user information table in this embodiment, and the description of the fields it contains. The application user information table of this embodiment has an application user DID field, which marks the DID tag corresponding to the application user. Corresponding to the DID in the block record in the blockchain, the hash value of the ciphertext data of the corresponding e-commerce data and the hash value of the encryption factor encrypted by the corresponding user public key can be queried; in addition, there is the user's pubkey public key string field: Field Name Field Description Remark id Primary Key ID Per-app user information tag app_name Application Name app_id App ID app_creator_id App creator ID app_creator App creator name app_user_id Application User ID app_user_DID Application User DID pubkey_type Public key algorithm type 1: RSA algorithm 2: SM2 algorithm pubkey Public key string Specific algorithm generation create_time Creation time is_delete Delete 0: not deleted; 1: deleted Table 2 In the second embodiment of the present invention, the data transceiver module 204 is configured to receive and send data related to user e-commerce information between the e-commerce program client and / or the e-commerce server. Preferably, the e-commerce server includes an e-commerce payment server and an e-commerce logistics server.

[0048] In the second embodiment of the present invention, the blockchain node server module 207 is configured as a node server for deploying and running a blockchain. Preferably, the blockchain node server module 207 is configured as a blockchain node server for deploying and running a consortium chain, which forms a complete blockchain network with other blockchain servers in the Internet, or runs in a network of a specific consortium.

[0049] In this embodiment, preferably, in order to encrypt other e-commerce related data of e-commerce users except e-commerce orders, the user e-commerce data management module 203 is further configured to: receive the fourth ciphertext data and the fourth encryption factor ciphertext data and upload them to the e-commerce data protection system server side and store them corresponding to the first user public key; wherein the hash values ​​of the fourth ciphertext data and the fourth encryption factor ciphertext data are respectively linked to the block in the blockchain node server module, and recorded corresponding to the user decentralized identity of the first user; wherein the fourth encryption factor ciphertext data is obtained by encrypting the second encryption factor generated by the e-commerce program client side according to the first user public key; the fourth ciphertext data is obtained by encrypting the user e-commerce data of the first user according to the second encryption factor; wherein the user e-commerce data includes at least one of the user description information, browsing record information, shopping cart behavior information, user evaluation feedback information, and user e-commerce social information of the first user. On the e-commerce program client side, the e-commerce user. In this embodiment, for the information related to the e-commerce user submitted by the e-commerce user on the e-commerce client side, such as the user's definition information, historical record information when browsing products, product information added to the shopping cart, user feedback submission information, user shared product information, etc., when this information is submitted on the e-commerce client side or uploaded to the e-commerce server side, it is necessary to perform the processing steps in this embodiment, and upload it after encrypting the user's e-commerce data. In this way, the user's e-commerce related information cannot be viewed on the e-commerce server side. If it needs to be viewed, user authorization is required, and the user can view it by himself after decryption.

[0050] In this embodiment, preferably, in order to realize the response to the authorization request from the e-commerce server side, such as requesting the transaction amount, logistics address and other e-commerce related data, it is necessary to authorize these encrypted e-commerce data, so this embodiment can further include an e-commerce data authorization module 208 (indicated by a dotted line), which is configured as follows: in response to the e-commerce platform server initiating an authorization request for the price-type payment information in the first e-commerce order information, the price-type payment information in the first e-commerce order information is authorized to the e-commerce platform server user to initiate the payment process. The authorization request initiated by the e-commerce platform server here can preferably be an authorization request initiated by its e-commerce payment support server, and a sub-user of the e-commerce platform server can be set for it, and the authorization for the encrypted data of the price-type payment information in the e-commerce order information can be obtained in the e-commerce data protection system server, so that the price-type payment information can be decrypted to complete the payment process.

[0051] In this embodiment, preferably, in order to implement the response to the authorization request from the e-commerce logistics server side, such as requesting logistics address information, the e-commerce data authorization module 208 (indicated by dotted lines) in this embodiment can be further configured as: in response to the e-commerce logistics server initiating an authorization request for the address-type logistics information in the first e-commerce order information, the address-type logistics information in the first e-commerce order information is authorized to the e-commerce logistics server user for the logistics delivery process.

[0052] In this embodiment, preferably, in order to respond to the authorization request from the recommendation data AI big model side of the e-commerce platform server, such as requesting the user e-commerce data of the authorized user, the e-commerce data authorization module 208 (indicated by dotted lines) in this embodiment can be further configured as: in response to the recommendation data AI big model of the e-commerce platform server initiating an authorization request for the user e-commerce data of the first user, the user e-commerce data of the first user is authorized to the recommendation data AI big model user of the e-commerce platform server as input data; wherein the user e-commerce data includes at least one of the user description information of the first user, browsing history information, shopping cart behavior information, user evaluation feedback information, and user e-commerce social information.

[0053] Embodiment three: In order to explain the overall picture of the e-commerce data processing system of the present invention more clearly, Figure 3 , which illustrates a third embodiment of the present invention, and provides a schematic diagram of the framework of an e-commerce data processing system. The third embodiment of the present invention provides an e-commerce data processing system, which includes a buyer user terminal device 301, a buyer user terminal device 302, a seller user terminal device 303, an e-commerce platform server 304, an e-commerce data protection system server device 305, and the Internet 306.

[0054] The buyer's user terminal device is installed with the buyer's version of the e-commerce program 1, and the seller's user terminal device is installed with the seller's version of the e-commerce program 1. The buyer's version / seller's version of the e-commerce program 1 is integrated with the user's e-commerce data hiding SDK data package to interact with the e-commerce platform server 304 and the e-commerce data protection system server device 305, so as to realize the concealment of the user's e-commerce data and protect the user's e-commerce data. The e-commerce program 1 here is, for example, a common e-commerce APP program or website application such as Taobao, Jingdong, Pinduoduo, etc. The e-commerce platform server 304 is the background server corresponding to these e-commerce APPs or websites. The server can be integrated with the e-commerce program 1 background support server 3042, and one or more of the sub-servers such as the e-commerce payment support server 3041, the e-commerce logistics server 3044, and the AI ​​model server 3043 of the recommended data. This embodiment only gives a preferred embodiment, and the scope of the present invention is not limited to this situation. In addition, the SDK here is not limited to this form, it can also be a web script program in the browser, in which similar operation logic in the SDK can be run, which is covered within the scope of the present invention. That is to say, the application here is a browser, in which a Web application of a common e-commerce website platform can be loaded. These examples are all within the scope of the present invention and do not constitute a limitation on the scope of the present invention. The e-commerce program 1 backend support server 3042 is a backend support server of an e-commerce program or e-commerce website in the prior art, which supports content loading for the commodity display of the e-commerce program client, and its technical implementation will not be repeated here.

[0055] In the embodiment of the present invention, there is an e-commerce platform server 304, which includes: an e-commerce program 1 backend support server 3042, an e-commerce payment support server 3041, an e-commerce logistics server 3044, and an AI model server 3043 for recommended data; the AI ​​model server 3043 for recommended data here is a better solution (shown by the dotted line), and many e-commerce websites do not use AI models for data recommendation. The e-commerce program 1 backend support server 3042 is an e-commerce backend server in the prior art field, which supports the client program to complete the loading and caching of product content in the e-commerce APP.

[0056] In this embodiment, the e-commerce data protection system server device 305 includes: a DID user management module 3051, a public key custody module 3052, a user e-commerce data management module 3053, a data sending and receiving module 3054, an e-commerce data authorization module 3055, a system background management module 3056, a confidential data storage module 3057 and an alliance chain node server module 3058.

[0057] Among them, the DID user management module 3051, the public key escrow module 3052, the user e-commerce data management module 3053, the data transceiver module 3054, the e-commerce data authorization module 3055, the system background management module 3056, and the secret data storage module 3057 are respectively the same as the decentralized identity (DID) user management module 201, the public key escrow module 202, the user e-commerce data management module 203, the data transceiver module 204, the e-commerce data authorization module 208, the system background management module 205, and the secret data storage module 206 in the second embodiment, and they are not repeated here. The alliance chain node server module 3058 is different from the blockchain node server threshold 207 in the second embodiment. It is a better solution to use the alliance chain node server module. It can also be other types of blockchains in blockchain technology, as long as it can meet the blockchain product and service of the present invention for recording the hash value of secret data and DID user tags. In the embodiment of the present invention, there is also an Internet 306, which is the network where other blockchain node servers are located, and prepares for providing distributed node servers for blockchain.

[0058] The e-commerce data protection system in the third embodiment is only a preferred solution of the embodiment of the present invention, wherein, for example, the buyer user terminal device and the seller user terminal device can be combined as needed to form a new embodiment; each submodule in the e-commerce platform server 304, except the e-commerce program 1 backend support server 3042, can be combined to form a new embodiment, for example, in a preferred embodiment, there is no AI model server 3043 for recommended data. These combination solution embodiments are all within the scope of the invention.

[0059] The following Figure 4 , Figure 5 , Figure 6 and Figure 7 , the following specific disclosure is given with respect to the example of information flow interaction in the e-commerce data protection system in the third embodiment of the present invention. Figure 4 , Figure 5 , Figure 6 and Figure 7 Buyer e-commerce client and SDK correspondence Figure 3 E-commerce program 1 buyer version, seller e-commerce client and SDK corresponding Figure 3 The e-commerce program 1 seller version in it includes the SDK software package for hiding user e-commerce data.

[0060] Figure 4 , Figure 5 , Figure 6 and Figure 7 E-commerce user data processing protection system corresponding to Figure 3 The e-commerce data protection system server device 305. And Figure 4 , Figure 5 , Figure 6 and Figure 7 The buyer user A in the example (who has user e-commerce data A, order information A, payment information A', logistics address information A', which can be encrypted and authorized to user B or e-commerce platform server user, etc.), user A public key, user A private key, e-commerce logistics user B, user B public key, user B private key, logistics status information C, encryption factor a1, encryption factor a1', ciphertext data A1, ciphertext data A1', ciphertext data A2, ciphertext data A3, encryption factor ciphertext data B1, encryption factor ciphertext data B1', encryption factor ciphertext data B2, encryption factor ciphertext data B3 can all be uniformly explained in the examples in these figures.

[0061] in, Figure 4 It is a schematic diagram of the interaction process when a user registers in the e-commerce data processing system in the third embodiment of the present invention. Figure 4 Buyer e-commerce client and SDK correspondence Figure 3 E-commerce program 1 buyer version, e-commerce user data processing protection system corresponding Figure 3 The e-commerce data protection system server device 305 in the e-commerce data protection system. When the buyer user A performs e-commerce user registration on the e-commerce client, the e-commerce user data concealment SDK will determine that this registration is the first time to conceal the e-commerce user registration, and then upload the e-commerce application user ID of the user to the e-commerce user data processing and protection system; the e-commerce user data processing and protection system notifies the e-commerce user data concealment SDK to obtain the public-private key pair of the e-commerce user and upload its public key; the user obtains its public-private key pair on the e-commerce client side, and generates a user DID through the e-commerce user data concealment SDK, and the e-commerce user saves the obtained private key in the security area of ​​the e-commerce client side for subsequent encryption, and uploads the user public key and the generated user DID to the e-commerce user data processing and protection system; preferably, the corresponding user ID of the e-commerce user in the e-commerce user data processing and protection system can be generated at this time (see Figure 4 The dotted line in the figure is the beginning), but it is not limited to generating the corresponding user ID in the system at this moment; then the user public key, user DID, and the user's e-commerce application user ID are correspondingly saved in the system, and the uploaded user DID is chained to the block in the blockchain for recording, so as to prepare for the subsequent e-commerce data under the DID. Preferably, the registration of the first hidden e-commerce user in this embodiment and the registration of a new user of the e-commerce platform can be carried out at the same time, so that when registering an e-commerce user, the registration mark is simultaneously registered as a hidden e-commerce user, so as to prepare for the realization of the e-commerce process of the hidden e-commerce later.

[0062] in, Figure 5It is a schematic diagram of the interactive process of encrypting user e-commerce data when it is uploaded from the e-commerce client in the third embodiment of the present invention. Figure 5 Buyer e-commerce client and SDK correspondence Figure 3 E-commerce program 1 buyer version, e-commerce user data processing protection system corresponding Figure 3 The e-commerce data protection system server device 305 in the e-commerce platform. Buyer user A will submit the user's e-commerce data to the e-commerce platform server on the e-commerce client side, such as submitting the e-commerce product information marked in the shopping cart in the e-commerce client. The user e-commerce data here includes: the e-commerce user's user description information, browsing history information, shopping cart behavior information, user evaluation feedback information, and at least one of the user's e-commerce social information. When the submission is triggered to prepare to upload the user's e-commerce data A, the e-commerce user data hiding SDK will generate an encryption factor a1' (it should be noted that the encryption factor a1' in the figure is the same as Figure 6 , Figure 7 The encryption factor a1 generated in is not the encryption factor used for encrypting the same batch of data. Although they are all marked as a1, it is the encryption processing of the second batch of e-commerce data after the order information encryption is completed, so it is marked as a1', which can be understood as the second encryption factor. Its generation principle is the same as the first encryption factor), and a1' is used to symmetrically encrypt the user e-commerce data A to obtain the ciphertext A1', and the public key of the buyer user A is obtained from the e-commerce user data processing and protection system. In the e-commerce user data hiding SDK, a1' is encrypted by the obtained public key of user A to obtain the encryption factor ciphertext data B1', and the ciphertext A1' and the encryption factor ciphertext data B1' are uploaded to the e-commerce user data processing and protection system side, and saved corresponding to the user ID of user A; in addition, after the hash value of the ciphertext A1' and the encryption factor ciphertext data B1' is calculated, it can be chained to the block in the blockchain and recorded and saved corresponding to the DID of user A. This flowchart can encrypt and save all user e-commerce data other than important user e-commerce data such as e-commerce order information after submission, and save them on the chain, so as to truly achieve complete anonymity protection of e-commerce user e-commerce data. This embodiment is an encryption processing scheme when a user submits user e-commerce data. Preferably, even if the e-commerce platform server stores user e-commerce data, the user can request the e-commerce platform server to provide such user e-commerce data, and after encrypting it on its client, upload it to the e-commerce user data processing protection system for storage, and subsequently apply for authorization of user e-commerce data to the e-commerce platform server for use according to the data analysis needs of the e-commerce platform server.

[0063] in, Figure 6 It is a schematic diagram of the interactive process of an order payment transaction of an e-commerce user in Embodiment 3 of the present invention. Figure 6 Buyer e-commerce client and SDK correspondence Figure 3 E-commerce program 1 buyer version, e-commerce user data processing protection system corresponding Figure 3The e-commerce data protection system server device 305 in the e-commerce data protection system. After the buyer user A enters the shopping process of the hidden e-commerce on the e-commerce client side, the e-commerce platform server will assign a hidden user identifier to the buyer user A. The hidden user identifier corresponds to the e-commerce user ID of user A, and it is only valid and usable during the e-commerce session. The buyer user A accesses the e-commerce client and selects the e-commerce product from the e-commerce product information recommended for display to form the e-commerce order information A. The buyer e-commerce client and SDK will generate an encryption factor a1, and use a1 to symmetrically encrypt the order information A to obtain the ciphertext A1, and request the e-commerce user data processing and protection system to obtain the public key of user A corresponding to the hidden user identifier. The buyer's e-commerce client and SDK then encrypt a1 with the public key of user A to obtain the encrypted factor ciphertext data B1, and upload the ciphertext A1 and the encrypted factor ciphertext data B1 to the e-commerce user data processing and protection system and save them in correspondence with the public key of user A. After calculating the hash value of the ciphertext A1 and the encrypted factor ciphertext data B1, they are chained to the block of the blockchain and recorded and saved in correspondence with the DID of user A. The e-commerce platform server initiates an authorization request for the price payment information in the order information A. After user A confirms the authorization, the buyer's e-commerce client and SDK obtain the public key of the e-commerce platform server user and the data A1 and B1 of the e-commerce user from the e-commerce user data processing and protection system. In the buyer's e-commerce client and SDK, the private key of user A given by the user authorization is used to decrypt the data B1 to obtain the encryption factor a1, and the data A1 is decrypted using a1 to obtain the order information A, and then the payment information A' required by the e-commerce platform server in the order information A is obtained, such as the total payment price in a specific order, and the payment information A' is encrypted using a1 to obtain the ciphertext A2, and then Use the public key of the e-commerce platform server user to encrypt a1, obtain the encrypted factor ciphertext data B2, upload the ciphertext A2 and the encrypted factor ciphertext data B2 to the e-commerce user data processing and protection system and save them in correspondence with the e-commerce platform server public key; in this way, when the e-commerce platform server user initiates a request for the ciphertext A2 and the encrypted factor ciphertext data B2, the corresponding saved ciphertext A2 and the encrypted factor ciphertext data B2 can be queried based on its user ID and the user public key corresponding to the user ID, which means that user A has completed the authorization process of the payment information A' to the e-commerce platform server user. In this embodiment, the authorization process of other e-commerce data, such as the authorization process of the logistics address, also has similar authorization logic. After the e-commerce platform server user obtains the ciphertext A2 and the encrypted factor ciphertext data B2, the e-commerce platform server user private key is used to decrypt the factor ciphertext data B2 to obtain the encrypted factor a1, and the ciphertext data A2 is decrypted based on a1 to obtain the payment information A'.Finally, the payment link can be generated in the e-commerce payment support server 3041 in the e-commerce platform server according to the payment information A'. After the buyer user A completes the payment, he will obtain the payment completion confirmation information from the third-party payment institution.

[0064] in, Figure 7 It is a schematic diagram of the interactive process of logistics delivery information processing of e-commerce users in embodiment 3 of the present invention. Figure 7 Buyer e-commerce client and SDK correspondence Figure 3 E-commerce program 1 buyer version, seller e-commerce client and SDK corresponding Figure 3 E-commerce program 1 seller version, e-commerce user data processing protection system corresponding Figure 3 The e-commerce data protection system server device 305 in the e-commerce logistics server corresponds to Figure 3The e-commerce logistics server 3044 in the e-commerce server can be used as a sub-server in the e-commerce server. The e-commerce logistics user B can be used as a user of the e-commerce platform server to use the e-commerce logistics server 3044 to process the logistics delivery process of e-commerce products. In this embodiment, after receiving the confirmation information of the payment completion, the e-commerce platform server sends the order information A of user A and the payment confirmation information to the seller's e-commerce client side. The seller determines the order information A of user A, organizes the logistics distribution and delivery, and then sends the order information A to the sub-server e-commerce logistics server of the e-commerce platform server. When the logistics personnel e-commerce logistics user B performs the delivery link, the logistics address information will be required, and then the logistics address information in the order information A will be requested to start the logistics delivery process. The e-commerce logistics server requests the buyer's e-commerce client side to authorize the logistics address information A' in the order information A of user A. After the buyer user A determines to authorize the information requested by user B, the e-commerce platform server queries the information of user A and user B from the e-commerce user data processing protection system side to obtain the user public key of user B and the ciphertext data A1 and encryption factor ciphertext data B1 of the buyer user A. User A uses his private key to decrypt data B1 on the buyer's e-commerce client side to obtain encryption factor a1, and then decrypts ciphertext data A1 based on a1 to obtain order information A, so that the logistics address information A' in order information A can be obtained, and then the logistics address information A' is encrypted using a1 to obtain ciphertext A3, and then the a1 is encrypted using the obtained user public key to obtain encryption factor ciphertext data B3. The ciphertext A3 and data B3 are uploaded to the e-commerce user data processing and protection system on the buyer's e-commerce client side, and the ciphertext A3 and data B3 are saved corresponding to the user ID of user B, so that the buyer user A can authorize the e-commerce logistics user B to authorize the logistics address information A' in the order information A. It should be noted here that the e-commerce logistics user B is a sub-user in the e-commerce platform server, and can also be assigned a corresponding public-private key pair in the e-commerce platform, and store its own encrypted data in the e-commerce user data processing and protection system and receive the authorization of the buyer user to obtain the buyer's e-commerce data related to logistics, which is used for the e-commerce logistics process that it is responsible for. Then, when the e-commerce logistics user B requests to obtain the logistics address information again, the e-commerce logistics server queries the information item of user B from the e-commerce user data processing and protection system to request data B3 and ciphertext data A3. The e-commerce logistics server uses the private key of user B to decrypt the encryption factor ciphertext data B3 locally to obtain the encryption factor a1, and then decrypts the ciphertext data A3 based on a1 to obtain the logistics address information A' in the order information A. In this way, the e-commerce logistics user B can dispatch the e-commerce product based on the logistics address information A', and then obtain the logistics status information C of the dispatched product.The logistics status information C is uploaded to the e-commerce user data processing and protection system, and is processed on the chain through the alliance chain node server module 3058, recorded in the alliance chain block, and corresponds to the DID information of user B. In this way, the logistics status of the order of buyer e-commerce user A delivered by e-commerce logistics user B can be easily queried in the alliance chain.

[0065] Embodiment 4: In the fourth embodiment of the present invention, a client computer device is disclosed, which includes a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor. When the processor executes the computer program, the solution consisting of all possible steps and methods disclosed in the first embodiment above can be implemented, and the specific software solution implementation will not be repeated here.

[0066] Embodiment five: In the fifth embodiment of the present invention, an e-commerce data processing system is disclosed, which is similar to the e-commerce data processing system in the third embodiment, but the e-commerce data processing system in the fifth embodiment includes all the e-commerce data protection system server device solutions provided in the second embodiment and at least one client computer device as described in the fourth embodiment, and an e-commerce platform server connected to the client computer device and the e-commerce data protection system server device respectively, and the e-commerce platform server is an e-commerce program background server in the prior art. Further, the various preferred e-commerce data protection system server device embodiments provided in the second embodiment can be used as e-commerce data protection system server devices in the fifth embodiment of the e-commerce data processing system; in addition, all the client computer device embodiments disclosed in the fourth embodiment can be used as client computer devices in the fifth embodiment of the e-commerce data processing system.

[0067] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated. Some or all of the modules may be selected according to actual needs to achieve the purpose of the present embodiment. Those of ordinary skill in the art may understand and implement the present invention without creative effort.

[0068] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for processing e-commerce data, running on an e-commerce client side, comprising: Selecting e-commerce product information to form first e-commerce order information according to the hidden user identifier assigned to the first user by the e-commerce platform server; generating a first encryption factor; Encrypting at least a portion of the first e-commerce order information according to the first encryption factor to obtain first ciphertext data; Obtaining, from the server side of the e-commerce data protection system, a first user public key for asymmetric encryption processing corresponding to the concealed user identifier of the first user; wherein the first user private key of the first user is managed by the first user himself, and the first user public key and the first user private key generate a decentralized identity identifier of the first user in the first blockchain; Encrypting the first encryption factor according to the first user public key to obtain first encryption factor ciphertext data; The first ciphertext data and the first encryption factor ciphertext data are uploaded to the server side of the e-commerce data protection system and saved correspondingly with the first user public key; wherein the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded correspondingly with the first user's decentralized identity.

2. The method according to claim 1, characterized in that The anonymous user identification of the first user is generated and made valid by being allocated in correspondence with the user identification of the first user during the order session.

3. The method according to claim 1, characterized in that Further including: When it is determined that the first user is an e-commerce user who registers for the first time with an anonymous user ID; Obtaining a first user public key and a first user private key that can be used by the first user for asymmetric encryption and decryption processing; Generate a decentralized identity of the first user based on the first user's public key and the first user's private key; Storing the first user's private key on the client side; Upload the decentralized identity of the first user, the first user public key, and the first user application user ID to the e-commerce data protection system server for corresponding storage; The decentralized identity of the first user is recorded in a block on the first blockchain.

4. The method according to claim 1, characterized in that: Further including: The e-commerce platform server initiates an authorization request for the price payment information in the order information; Encrypting the price payment information in the first e-commerce order information according to the first encryption factor to obtain second ciphertext data; Authorize the e-commerce platform server to obtain the second encryption factor ciphertext data and the second ciphertext data; wherein the second encryption factor ciphertext data is obtained by encrypting the first encryption factor according to the public key of the e-commerce platform server; The e-commerce platform server uses the e-commerce platform server private key to decrypt the second encryption factor ciphertext data to obtain the first encryption factor; Decrypting the second ciphertext data according to the first encryption factor to obtain price payment information in the first e-commerce order information, and generating corresponding payment link information; After the third-party payment process is carried out according to the payment link information, the third-party payment confirmation information is obtained.

5. The method according to claim 1, characterized in that Further including: The e-commerce logistics server initiates an authorization request for the address-related logistics information in the order information; Encrypting the address-related logistics information in the first e-commerce order information according to the first encryption factor to obtain third ciphertext data; Authorize the e-commerce logistics server user to obtain the third encryption factor ciphertext data and the third ciphertext data; wherein the third encryption factor ciphertext data is obtained by encrypting the first encryption factor according to the e-commerce logistics server user public key; Decrypt the third encryption factor ciphertext data using the e-commerce logistics server user private key to obtain the first encryption factor; The third ciphertext data is decrypted according to the first encryption factor to obtain the address-related logistics information in the first e-commerce order information, and then logistics delivery is performed.

6. The method according to claim 3, characterized in that Further including: After registering as an e-commerce user with an anonymous user ID, the e-commerce client-side user e-commerce data submission is triggered, wherein the user e-commerce data includes at least one of user description information, browsing history information, shopping cart behavior information, user evaluation feedback information, and user e-commerce social information; generating a second encryption factor; Encrypting the user e-commerce data according to the second encryption factor to obtain fourth ciphertext data; Obtain the user public key of the e-commerce user from the e-commerce data protection system server; Encrypting the second encryption factor according to the user public key to obtain ciphertext data of the fourth encryption factor; The fourth ciphertext data and the fourth encryption factor ciphertext data are uploaded to the server side of the e-commerce data protection system and saved correspondingly with the user public key; wherein the hash values ​​of the fourth ciphertext data and the fourth encryption factor ciphertext data are respectively linked to the blocks in the first blockchain, and recorded correspondingly with the decentralized user identity of the e-commerce user.

7. The method according to claim 1, characterized in that The step of selecting e-commerce product information to form first e-commerce order information based on the hidden user identifier assigned to the first user by the e-commerce platform server includes: Responding to an authorization request from the recommendation data AI big model of the e-commerce platform server for the user e-commerce data of the first user; Authorize the user e-commerce data corresponding to the first user's hidden user identifier and encrypted and stored on the e-commerce data protection system server to be decrypted and given to the recommendation data AI big model of the e-commerce platform server as input data; The recommendation data AI big model outputs the first recommended product information; On the e-commerce platform server side, deleting the user e-commerce data authorized to be decrypted to the e-commerce platform server; Sending the first recommended product information as recommendation data to the e-commerce client side corresponding to the first user; Receiving e-commerce product information selected by the first user from the first recommended product information; First e-commerce order information is formed based on the selected e-commerce product information.

8. An e-commerce data protection system server device, comprising: The system backend management module is configured to: create users in the management system and user login and access, and set system user IDs for users; The decentralized identity user management module is configured to: obtain the first user's decentralized identity generated by the first user according to the first user's private key and the first user's public key from the e-commerce program client, and record the first user's decentralized identity on the blockchain through the blockchain node server module, wherein the user's decentralized identity corresponds to the user's system user identity; A public key escrow module, configured to: obtain, manage, and provide externally a first user public key uploaded from an e-commerce program client, wherein the first user public key is stored corresponding to the first user decentralized identity; The user e-commerce data management module is configured to: obtain and manage the first ciphertext data and the first encryption factor ciphertext data of the first user uploaded from the e-commerce program client, and upload the hash values ​​of the first ciphertext data and the first encryption factor ciphertext data to the blocks in the blockchain node server module, and record them correspondingly to the first user's decentralized identity; The first encryption factor ciphertext data is obtained by encrypting the first encryption factor generated by the e-commerce program client side according to the first user public key; the first ciphertext data is obtained by encrypting at least part of the first e-commerce order information of the e-commerce user according to the first encryption factor; A secret data storage module, which is configured to: correspondingly store the first ciphertext data, the first encryption factor ciphertext data and the first user public key uploaded from the e-commerce program client; A data transceiver module configured to: receive and send data related to user e-commerce information between an e-commerce program client and / or an e-commerce server; The blockchain node server module is configured as a node server for deploying and running blockchain.

9. A client computer device, comprising a storage medium, a processor, and a computer program stored on the storage medium and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 7 is implemented.

10. An e-commerce data processing system, comprising an e-commerce data protection system server device as described in claim 8 and at least one client computer device as described in claim 9 and an e-commerce platform server respectively connected to the client computer device and the e-commerce data protection system server device.

Images