Evidence data storage method and device

Abstract

The embodiment of the invention provides an evidence data storage method and device.The evidence data storage method comprises the steps that in the evidence data storage process, evidence key data which is collected by a certification authority based on an evidence storage page and is subjected to secret storage are obtained, and under the condition that data encryption information which is subjected to secret storage is obtained, the evidence key data are encrypted; and performing encryption processing on the evidence data mapped by the data encryption information through an encryption execution program corresponding to an encryption operation configured by the evidence storage page to obtain encrypted evidence data, and uploading the evidence key data and the encrypted evidence data to a server according to an evidence storage instruction submitted by a certification authority based on the evidence storage page so as to perform evidence storage processing.

Description

[0001] This application is a divisional application of the Chinese invention patent application with the application date of January 16, 2024, application number CN202410067706.3, and name “Method and device for storing evidence data”. Technical Field

[0002] This document relates to the field of data processing technology, and in particular to a method and device for storing evidence data. Background Art

[0003] With the development of network technology, more and more services are provided online, and more and more data are transmitted and stored online. Confidential information such as technical information and business information that is not known to the public, has commercial value and has been kept confidential by the right holder is, to a certain extent, an asset of the organization. The leakage of an organization's confidential information will lead to the loss of its assets, further affecting the operation of the organization and the degree of trust of relevant users or institutions in the organization. Therefore, how to effectively manage the confidential information of an organization and avoid the leakage of confidential information is a focus of increasing attention for organizations. Summary of the invention

[0004] One or more embodiments of the present specification provide a method for storing evidence data, which is applied to a user terminal, and the method includes: obtaining key evidence data for secret storage collected by a certification body based on an evidence storage page. Obtaining data encryption information for secret storage. Encrypting the evidence data mapped by the data encryption information through an encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data. According to the evidence storage instruction submitted by the certification body based on the evidence storage page, uploading the key evidence data and the encrypted evidence data to a server for evidence storage processing.

[0005] One or more embodiments of the present specification provide a method for storing evidence data, which is applied to a server, and the method includes: in response to a storage page access request uploaded by a user terminal, returning a storage page for configuring an encryption operation to the user terminal. Receive the encrypted evidence data and evidence key data uploaded by the user terminal. The encrypted evidence data is obtained by encrypting the evidence data mapped to the data encryption information for secret storage through an encryption execution program corresponding to the encryption operation. The encrypted evidence data is sent to a blockchain node to store the encrypted evidence data in the blockchain. Based on the encrypted evidence data, the evidence key data and the on-chain storage address returned by the blockchain node, an evidence file for secret storage is generated.

[0006] One or more embodiments of the present specification provide a device for storing evidence data, which runs on a user terminal, and the device includes: a data acquisition module, configured to obtain key evidence data for secret storage collected by a certification body based on an evidence storage page. An information acquisition module, configured to obtain data encryption information for secret storage. An encryption processing module, configured to encrypt the evidence data mapped by the data encryption information through an encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data. A data upload module, configured to upload the key evidence data and the encrypted evidence data to a server for evidence storage processing according to the evidence storage instruction submitted by the certification body based on the evidence storage page.

[0007] One or more embodiments of the present specification provide a storage device for evidence data, which runs on a server, and the device includes: a page return module, which is configured to respond to an access request for an evidence page uploaded by a user terminal, and return an evidence page for configuring an encryption operation to the user terminal. A data receiving module, which is configured to receive encrypted evidence data and evidence key data uploaded by the user terminal. The encrypted evidence data is obtained by encrypting the evidence data mapped to the data encryption information for secret storage through an encryption execution program corresponding to the encryption operation. A data storage module, which is configured to send the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain. A file generation module, which is configured to generate an evidence file for secret storage based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node.

[0008] One or more embodiments of the present specification provide a user terminal, comprising: a processor; and a memory configured to store computer executable instructions, wherein when the computer executable instructions are executed, the processor: obtains key evidence data for secret evidence storage collected by a certification authority based on an evidence storage page. Obtains data encryption information for secret evidence storage. Encrypts the evidence data mapped by the data encryption information through an encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data. According to the evidence storage instruction submitted by the certification authority based on the evidence storage page, uploads the key evidence data and the encrypted evidence data to a server for evidence storage processing.

[0009] One or more embodiments of the present specification provide a server, including: a processor; and a memory configured to store computer executable instructions, wherein when the computer executable instructions are executed, the processor: in response to a request for access to an evidence page uploaded by a user terminal, returns an evidence page for configuring an encryption operation to the user terminal. Receive encrypted evidence data and evidence key data uploaded by the user terminal. The encrypted evidence data is obtained by encrypting evidence data mapped to data encryption information for secret evidence storage using an encryption execution program corresponding to the encryption operation. The encrypted evidence data is sent to a blockchain node to store the encrypted evidence data in the blockchain. Based on the encrypted evidence data, the evidence key data, and the on-chain evidence address returned by the blockchain node, an evidence file for the secret evidence is generated.

[0010] One or more embodiments of the present specification provide a storage medium for storing computer executable instructions, which implement the following process when executed by a processor: Obtain key evidence data for secret evidence storage collected by a certification body based on an evidence storage page. Obtain data encryption information for secret evidence storage. Encrypt the evidence data mapped by the data encryption information through an encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data. According to the evidence storage instruction submitted by the certification body based on the evidence storage page, upload the key evidence data and the encrypted evidence data to a server for evidence storage processing.

[0011] One or more embodiments of the present specification provide another storage medium for storing computer executable instructions, which implement the following process when executed by a processor: In response to a request for access to an evidence page uploaded by a user terminal, return an evidence page for configuring an encryption operation to the user terminal. Receive encrypted evidence data and evidence key data uploaded by the user terminal. The encrypted evidence data is obtained by encrypting the evidence data mapped to the data encryption information for secret evidence storage through an encryption execution program corresponding to the encryption operation. The encrypted evidence data is sent to a blockchain node to store the encrypted evidence data in the blockchain. Based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node, an evidence file for the secret evidence is generated. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] In order to more clearly illustrate one or more embodiments of the present specification or the technical solutions in the prior art, the drawings required for use in the embodiments or the prior art descriptions are briefly introduced below. Obviously, the drawings described below are only some embodiments recorded in the present specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor. Figure 1 A schematic diagram of an implementation environment of a method for storing evidence data provided in one or more embodiments of this specification; Figure 2 A processing flow chart of a method for storing evidence data provided for one or more embodiments of this specification; Figure 3 A schematic diagram of a subroutine home page provided for one or more embodiments of this specification; Figure 4 A schematic diagram of a reference information entry page provided for one or more embodiments of this specification; Figure 5 A schematic diagram of an authentication failure result page provided for one or more embodiments of this specification; Figure 6 A schematic diagram of a scanning authentication page provided for one or more embodiments of this specification; Figure 7 A schematic diagram of a successful authentication result page provided for one or more embodiments of this specification; Figure 8 A schematic diagram of an authentication result waiting page provided for one or more embodiments of this specification; Fig. 9 A schematic diagram of an authorization reminder page provided for one or more embodiments of this specification; Fig.10 A schematic diagram of a proof page provided for one or more embodiments of this specification; Fig.11 A schematic diagram of a collection category selection page provided for one or more embodiments of this specification; Fig.12 A schematic diagram of a stored evidence list page provided for one or more embodiments of this specification; Fig.13 A schematic diagram of a deposit details page provided for one or more embodiments of this specification; Fig.14 A processing flow chart of a method for storing evidence data applied to a subroutine evidence storage scenario provided by one or more embodiments of this specification; Fig.15 A processing flow chart of a method for storing evidence data applied to a webpage evidence storage scenario provided by one or more embodiments of this specification; Fig.16 A processing flow chart of another method for storing evidence data provided for one or more embodiments of this specification; Fig.17 A schematic diagram of an embodiment of a device for storing evidence data provided in one or more embodiments of this specification; Fig.18 A schematic diagram of another embodiment of a storage device for evidence data provided in one or more embodiments of this specification; Fig.19 A schematic diagram of a user terminal structure provided for one or more embodiments of this specification Fig. 20 A schematic diagram of the structure of a server provided for one or more embodiments of this specification. DETAILED DESCRIPTION

[0013] In order to enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the technical solutions in one or more embodiments of this specification will be clearly and completely described below in conjunction with the drawings in one or more embodiments of this specification. Obviously, the described embodiments are only part of the embodiments of this specification, not all of them. Based on one or more embodiments of this specification, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of this document.

[0014] The evidence data storage method provided in one or more embodiments of this specification can be applied to the implementation environment of evidence data storage, such as Figure 1 As shown, the implementation environment at least includes a user terminal 101 and a server 102; The user terminal 101 may be a smart phone, a tablet computer, an e-book reader, a wearable device, a device for information interaction based on AR (Augmented Reality) / VR (Virtual Reality), etc., and may also be installed with an application or a browser. The user accesses the evidence storage page through a subroutine of the application or the browser to further store the evidence data; The server 102 may be one or more servers, a server cluster consisting of several servers, or a cloud server of a cloud computing platform. The server 102 may be an application or browser server, and is used to interact with the user terminal 101 to perform data transmission during the process of the user accessing the web page of the application or browser based on the user terminal 101; In addition, the implementation environment may also include a blockchain for evidence storage, where blockchain nodes on the blockchain for evidence storage interact with the server 102 and store the acquired data transmissions on the blockchain; In this implementation environment, server 102 responds to an access request for an evidence page uploaded by user terminal 101, and returns an evidence page configured with an encryption operation to the user terminal. User terminal 101 receives and displays the evidence page, obtains key data of evidence for secret evidence storage collected by the certification body based on the evidence page, and when data encryption information for secret evidence storage is obtained, locally encrypts the evidence data mapped by the data encryption information through an encryption execution program corresponding to the encryption operation configured on the evidence page to obtain encrypted evidence data. If an evidence instruction submitted by the certification body based on the evidence page is received, the key data of evidence and the encrypted evidence data are uploaded to server 102 for evidence processing.

[0015] One or more embodiments of a method for storing evidence data provided in this specification are as follows: The present embodiment provides a method for storing evidence data. In the process of storing the evidence data of a certification body, after obtaining the data encryption information for secret storage by the certification body, the evidence data mapped by the data encryption information is encrypted through the encryption execution program corresponding to the encryption operation configured on the evidence page for key data collection to obtain encrypted evidence data. According to the evidence instruction submitted by the certification body based on the evidence page, the key data of the evidence obtained by the key data collection and the encrypted evidence data are uploaded to the server for evidence storage processing. In this way, only the data encryption information mapped to the evidence data is obtained instead of the evidence data itself, and the encrypted evidence data obtained by encryption processing locally is transmitted through the network for evidence processing, so that the evidence data can be read or transmitted through the network to avoid leakage of the evidence data, thereby ensuring that the evidence data is effectively stored while avoiding the risk of leakage of the evidence data itself.

[0016] Reference Figure 2 The method for storing evidence data provided in this embodiment can be applied to a user terminal, and specifically includes steps S202 to S208.

[0017] Step S202, obtaining key data of evidence collected by the certification body for secret evidence storage based on the evidence storage page.

[0018] In this embodiment, the secret evidence storage of commercial secrets can be carried out through a subroutine for secret evidence storage in an application program running on the user terminal, or through a web page for secret evidence storage in a browser running on the user terminal. In order to effectively manage the organization and ensure that the organization that performs secret evidence storage based on a subroutine or web page is real and has actual evidence storage needs, the organization can perform secret evidence storage based on the subroutine and / or web page after the organization has performed authentication processing through the subroutine and / or web page. In this embodiment, the organization that has performed authentication processing through the subroutine and / or web page and successfully performed the authentication processing is the certification organization. In this way, the area for storing encrypted evidence data is reasonably and effectively allocated to avoid invalid occupation of the storage area.

[0019] The authentication process provided in this embodiment can be implemented in the following manner: Obtaining an institution certification instruction submitted by the certification institution, and uploading an institution certification request to the server based on the institution certification instruction; Receive and display the benchmark information entry page returned by the server; If a confirmation instruction is detected after the to-be-certified institution enters the benchmark institution information based on the benchmark information entry page, uploading the benchmark institution information to the server; A scan authentication page including an authentication identification code returned by the server is received and displayed; the authentication identification code is generated based on the reference institution information.

[0020] Optionally, the benchmark institution information may be element information of basic elements for establishing an institution; for example, the institution name, institution credit code, user name of the institution management user, and identity certificate number of the institution management user; the authentication identification code is used for the institution management user to scan for institution verification.

[0021] In the specific implementation process, after the user terminal displays the scan authentication page, the organization management user can be reminded to scan the authentication identification code based on the management user terminal according to the reminder text "Please ask the organization management user to scan the code for authentication" in the scan authentication page; after the server detects the identification code identifier (obtained by parsing the authentication identification code) and the user identifier (obtained by reading from the management user terminal) uploaded after the management user terminal scans the authentication identification code, it first reads the benchmark organization information associated with the identification code identifier, and inquires whether the user identifier is consistent with the user identifier of the organization management user in the benchmark organization information; if not, the authentication result reminder of failed authentication is returned to the user terminal; if so, the authentication result reminder of successful authentication is returned to the user terminal. Optionally, the third-party query interface can be a query interface provided by the organization management platform. Optionally, the authentication identification code can be a QR code or a barcode, which is not limited in this embodiment.

[0022] Optionally, the server receives an institution authentication request uploaded by a user terminal, reads an institution information entry page based on the institution authentication request, and returns the page to the user terminal; The server receives the reference institution information uploaded by the user terminal, generates an authentication identification code based on the reference institution information; generates a scanning authentication page including the authentication identification code and returns it to the user terminal; The server receives the identification code and user identification submitted by the management user after the management user terminal scans the authentication identification code displayed by the user terminal, and performs institution verification based on the user identification and the identification code; If the verification is successful, an authentication result reminder of successful authentication is returned to the user terminal; if the verification is not successful, an authentication result reminder of failed authentication is returned to the user terminal.

[0023] It should be noted that, if the authentication processing and / or secret evidence storage is performed based on a sub-program of the user terminal, the server is the server corresponding to the sub-program; if the authentication processing and / or secret evidence storage is performed based on a web page of the user terminal, the server is the server corresponding to the web page; in addition, the server may also provide the ability to perform authentication processing and / or secret evidence storage based on both a sub-program and a web page. In this case, regardless of whether the user terminal performs authentication processing and / or secret evidence storage based on a sub-program or a web page, the server is the same.

[0024] For example, after the certification body passes Figure 3The "Evidence Storage Experience" control configured in the commercial secret evidence storage introduction area 301 in the subprogram homepage shown in the figure submits the institution authentication instruction; after the user terminal obtains the institution authentication instruction submitted by the institution to be authenticated based on the subprogram homepage of the institution service subprogram, it uploads the institution authentication request to the server, and the server returns the benchmark information entry page to the user terminal based on the institution authentication request, and the user terminal receives and displays the following information: Figure 4 If it is detected that the to-be-certified institution enters the benchmark institution information based on the benchmark information entry page and triggers the confirmation instruction submitted by the "Next" button, the benchmark institution information is uploaded to the server, and the server receives the benchmark institution information and calls the third-party query interface to query whether the institution identifier in the benchmark institution information matches the user identifier of the institution management user. If not, the authentication result reminder of authentication failure is returned to the user terminal, so that the user terminal displays the following Figure 5 If a match is found, a verification QR code associated with the institution's benchmark information is generated, and a verification code is generated as shown in the following figure: Figure 6 The scanning authentication page including the authentication QR code and the reminder text "Please ask the institution management user to scan the code for authentication" is shown and returned to the user terminal. The user terminal receives the scanning authentication page and displays the scanning authentication page in the form of a pop-up window above the benchmark information entry page. After the institution management user of the certification institution scans and decodes the authentication QR code based on the institution service subroutine that manages the user terminal or the application program (application program of a third-party payment application) equipped with the institution service subroutine, the QR code identifier and the user identifier of the institution management user are uploaded to the server associated with the authentication QR code. The server receives the QR code identifier and the user identifier, reads the benchmark institution information associated with the QR code identifier, and verifies whether the user identifier is consistent with the user identifier of the institution management user contained in the benchmark institution information. If they are inconsistent, a reminder of the authentication result of failed authentication is returned to the user terminal. The user terminal receives the reminder of the authentication result of failed authentication and displays the following. Figure 5 If the authentication result page is consistent, the authentication authority will mark the authentication result and return the authentication result reminder of successful authentication to the user terminal. The user terminal receives the authentication result reminder of successful authentication and displays the following information: Figure 7 The authentication success result page is shown in the figure. If the user is waiting for the organization management user to scan and verify, the following will be displayed on the user terminal: Figure 8 The authentication result waiting page is shown.

[0025] In actual applications, the login of application programs, institution service subprograms and / or web pages is performed based on the dimension of "user". Therefore, in the process of authenticating the institution, after determining that the authentication of the institution to be authenticated is successful, the server can send an information authorization reminder to the user terminal, and the user terminal will display the following information: Fig. 9The authorization reminder page shown, if detecting an authorization confirmation instruction submitted based on the authorization reminder page, uploads the authorization confirmation request to the server, and the server reads the submitting user ID who submitted the authorization confirmation request according to the authorization confirmation request, and stores the submitting user ID in association with the certification agency, so that the certification agency corresponding to the user can be determined after subsequently logging into the application, agency service subroutine and / or web page based on the submitting user ID.

[0026] In specific implementation, after the certification body successfully authenticates, it is marked as a certification body. After the user terminal subsequently obtains the agency authentication instruction or the evidence page access request (secret evidence instruction) and uploads it to the server, the server obtains the agency identification according to the authorization confirmation instruction. After obtaining the agency identification, it verifies whether the agency corresponding to the agency identification carries the certification mark. If so, it returns the evidence page for configuring the encryption operation to the user terminal. If not, the agency authentication process is performed in the above manner.

[0027] In addition to the secret storage of business secrets by certification agencies, for users in some specific fields, the user's data also exists in a confidential form. Therefore, in this embodiment, authenticated users can also secretly store evidence through subroutines and / or web pages, and users and / or organizations can perform authentication processing by logging into subroutines and / or web pages.

[0028] In addition, if the storage area and / or storage space is large enough, no allocation is required and no authentication processing is required.

[0029] The secret evidence storage in this embodiment includes the evidence storage of the business secrets of the certification body. The key evidence data includes relevant data that describes the evidence data based on the input on the evidence storage page; for example, the evidence storage purpose that describes the data type of the evidence data, the evidence storage category that describes the category to which the evidence data belongs, and the name of the evidence obtained by naming the evidence data in order to identify the uniqueness of the evidence data. Among them, the evidence storage in this embodiment may also include research categories, identification categories, notarization categories and / or experimental categories. It should be noted that the evidence data of the research category includes evidence uncles obtained by means of research. Other evidence categories are similar and will not be repeated. In addition, the evidence storage categories in this embodiment can also be divided according to other information, such as by the evidence production environment, which is not limited in this embodiment.

[0030] Specifically, the user terminal obtains the evidence page access instruction and uploads the evidence page access request to the server. The server responds to the evidence page access request uploaded by the user terminal and returns the evidence page configured with encryption operation to the user terminal. The user terminal receives the evidence page returned by the server and displays it. It should be noted that after authentication through the mobile phone, you can log in and store evidence through the computer, such as Fig.10The PC (Personal Computer) side evidence page shown in the figure contains the evidence purpose, evidence category, evidence name, data acquisition type, local evidence, encrypted evidence data, evidence formation time and remarks, and is configured with a submit control, which can be triggered to submit the evidence instruction. In order to ensure the effective storage of evidence data of trade secrets, such as Fig.10 In the evidence storage page shown, the evidence storage purpose, evidence storage type, evidence name, and data acquisition type are required items and carry a required mark. Optionally, the evidence storage page includes a local evidence item for collecting data encryption information of the evidence data and an encrypted evidence data display item for displaying the encrypted evidence data after encrypting the evidence data mapped by the data encryption information.

[0031] After the specific display of the evidence page, the key data of evidence for secret evidence storage collected by the certification body based on the evidence page is obtained; among them, except for the local evidence items and the encrypted evidence data display items in the evidence page, the data collected through other data items are all key data of evidence for secret evidence storage.

[0032] Step S204, obtaining data encryption information for secret evidence storage.

[0033] The data encryption information includes information describing the storage location of the evidence data for secret storage in the user terminal; optionally, the data encryption information includes the evidence data identifier and / or storage address. The evidence data identifier refers to the identifier used to uniquely identify the evidence data in the cache of the user terminal; the storage address refers to the specific storage location of the evidence data in the user terminal.

[0034] In specific implementation, in addition to collecting key evidence data based on the evidence page, the certification body can also collect data encryption information for secret evidence based on the evidence page.

[0035] In this embodiment, the evidence data to be secretly stored can be selected from the data stored in the user terminal, or it can be collected in real time. The following specifically describes the real-time collection of data encryption information and the acquisition of data encryption information locally from the user terminal.

[0036] (1) Real-time collection In specific implementation, the certification authority may collect evidence data in real time through the user terminal during the process of secret evidence storage. In an optional implementation provided by this embodiment, the following method is used to obtain data encryption information for secret evidence storage: Obtaining a data collection instruction submitted by the certification body based on the evidence storage page; Reading the data category carried in the data collection instruction, and determining a collection component for data collection according to the data category; The collection component configured in the user terminal is called to collect data, and an evidence data identifier obtained by the data collection is obtained.

[0037] Optionally, the data collection instruction can trigger the submission of the local evidence item of the evidence page by selecting the data acquisition type of local acquisition under the data acquisition type item of the evidence page. The data category includes the category to which the evidence data to be collected belongs; for example, images, recordings, videos, screenshots, and screen recordings. In addition, it can also be other forms of data categories, such as NFC (Near Field Communication) categories.

[0038] Specifically, the user terminal determines the collection component for data collection based on the data category carried in the data collection instruction submitted by the certification body based on the evidence page, calls the collection component configured in the user terminal to collect data, and obtains the evidence data identifier and / or storage address uploaded after the collection component performs data collection and the data is stored.

[0039] Among them, the user terminal obtains the data collection instruction, which can be after detecting that the local data item of the evidence page is triggered, reading the data acquisition type contained in the evidence key data, if the data acquisition type is a local acquisition type, then displaying the acquisition category selection page, and obtaining the certification body based on the data acquisition instruction.

[0040] For example, if it is detected that Fig.10 The local data item in the evidence page shown is triggered, and the data acquisition type selected under the data acquisition type item in the evidence page is read as the local acquisition type, then the following is displayed Fig.11 As shown in the collection category selection page, the certification body selects the data category and submits the data collection instruction through the collection category selection page. The user terminal obtains the data collection instruction carrying the data category of "recording", and determines that the collection component corresponding to the data category of "recording" is the microphone. The "microphone" configured in the user terminal is called to record. After recording, the microphone stores the recording file in the cache of the user terminal, and uploads the file name and / or storage address of the recording file to the evidence page, so that the evidence page can obtain the data encryption information.

[0041] In addition, the certification agency can also select multiple data categories based on the collection category selection page and submit data collection instructions. For example, the data list in the data collection instruction includes recording categories and image categories. Then, according to the recording categories and image categories, the recording component and image collection component configured in the user terminal are called to perform recording collection and image collection, and the identification and / or storage address of the recording file and image are obtained.

[0042] It should be noted that, in the present embodiment, during the process of data collection, the collection component configured by the user terminal collects data based on the call of the certification body through the evidence page, and the evidence data obtained by the collection is stored in the cache of the user terminal, and the collection component does not upload the collected evidence data to the evidence page; that is, the collection component configured by the user terminal collects data in response to the call of the certification body based on the evidence page, stores the evidence data obtained by the data collection in the cache area of ​​the user terminal and uploads the evidence data identifier to the evidence page.

[0043] (2) Local selection In specific implementation, the certification authority can obtain data encryption information by selecting evidence data stored locally in the user terminal during the process of secret evidence storage. In an optional implementation provided by this embodiment, the following steps are used to obtain data encryption information for secret evidence storage of locally stored files: Obtaining a data selection instruction submitted by the certification authority based on the evidence storage page; Read and display a data list consisting of terminal storage data under the data category carried in the data selection instruction; In the case where it is detected that the authentication agency selects a target terminal to store data in the data list, the target terminal storage data is used as evidence data and a storage address of the evidence data in the user terminal is obtained.

[0044] Optionally, the data selection instruction can be triggered by selecting the local data acquisition type in the data acquisition type drop-down list of the evidence page, and triggering the submission of the local data item of the evidence page. Fig.10 As shown, the data acquisition type can be selected as local collection or local selection. Similarly, after detecting that the local data item of the evidence page is triggered, the data acquisition type contained in the evidence key data is read. If the data acquisition type is a local selection type, it is determined that the data selection instruction is obtained.

[0045] Specifically, according to the data selection instruction submitted by the certification body based on the evidence page, a data list consisting of the terminal storage data stored in the cache of the user terminal is read and displayed, and when it is detected that the certification body selects the target terminal storage data in the data list, the data identifier and / or storage address of the target terminal storage data is read.

[0046] In addition, the user terminal obtains the data selection instruction, which can be that after detecting that the local data item in the evidence page is triggered and reading that the data acquisition type selected under the data acquisition type in the evidence page is the local selection type, a selection category selection page is displayed, the certification body selects the data category based on the selection category selection page and submits the data selection instruction, the user terminal obtains the data selection instruction carrying the data category, calls the cache of the user terminal to display a data list consisting of the terminal storage data under the data category, and the cache component uploads the data identifier and / or storage address of the target terminal storage data as data encryption information to the evidence page when it detects that the certification body selects the target terminal to store data in the data list.

[0047] It should be noted that the locally selected data category may also include files.

[0048] The above specifically describes the process of obtaining data encryption information based on real-time collection and local selection. In this embodiment, step S204 can also be replaced by obtaining the data encryption information of the evidence data collected by the collection component of the user terminal and stored in the terminal cache, and forming a new implementation method with the other processing steps provided in this embodiment; or, it can also be replaced by obtaining the data encryption information of the evidence data selected by the terminal cache of the user terminal.

[0049] Step S206, encrypting the evidence data mapped by the data encryption information through the encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data.

[0050] The encryption operation refers to the operation of encrypting data encryption information; in the specific execution process, as a user terminal, in the process of data processing, it is based on a "program", which can be a code form to perform specific data processing. Therefore, in this embodiment, in the process of encryption processing, the encryption execution code that specifically implements the encryption operation can be used as an encryption execution program. It should also be noted that the encryption execution program can be configured locally on the user terminal or in the page data of the evidence page.

[0051] The following uses the example of the case where secret evidence is stored through a subroutine of an application, where the encryption execution program is configured locally on the user terminal, that is, stored in the cache of the user terminal, and the case where secret evidence is stored through a web page, where the encryption execution program is configured on the evidence storage page, to specifically explain the encryption processing process.

[0052] (1) The encryption execution program is configured locally on the user terminal In an optional implementation manner provided by this embodiment, if the evidence storage page is a subroutine page in an application, the following method is used to implement an encryption execution program corresponding to the encryption operation configured on the evidence storage page to encrypt the evidence data mapped by the data encryption information: Reading the operation loading strategy of the encryption operation configured in the subroutine page; Loading the encryption execution program corresponding to the encryption operation based on the operation loading strategy; The evidence data identifier is input into the encryption execution program and the encryption execution program is executed to encrypt the evidence data.

[0053] Optionally, the evidence storage page is configured with an operation loading strategy for encryption operations. In this embodiment, the operation loading strategy includes a calling strategy for calling the local encryption execution program of the user terminal.

[0054] In the specific execution process, if the evidence page is a subroutine page in the application, the server generates page data of the evidence page including the operation loading policy of the encryption operation in the process of generating the evidence page based on the evidence page access request and returns it to the user terminal; After obtaining the data encryption information, the user terminal first reads the operation loading policy of the encryption operation in the page data of the subroutine page, and then loads the encryption execution program corresponding to the encryption operation stored locally in the user terminal based on the operation loading policy, inputs the data encryption information into the encryption execution program and executes the encryption execution program to encrypt the evidence data mapped by the data encryption information.

[0055] Optionally, when the data encryption information is an evidence data identifier, the encryption execution program encrypts the evidence data in the following manner: Determining the evidence data to be secretly stored according to the evidence data identifier; The evidence data is hashed to obtain a hash value of the evidence data and the hash value is transmitted to the evidence storage page.

[0056] It should be noted that if what is obtained is the evidence data identifier and / or storage address of the evidence data, the evidence data to be secretly stored can be determined based on the evidence data identifier and / or storage address.

[0057] In the specific execution process, optionally, the encryption execution program is stored in the user terminal when the certification authority accesses the evidence storage page. In an optional implementation manner provided by this embodiment, the encryption execution program is stored in the user terminal in the following manner: Uploading a request for accessing the evidence page to the server according to the evidence page access instruction submitted by the certification authority; Receiving the evidence page and the encrypted execution program returned by the server after performing evidence verification, and displaying the evidence page and program storage reminder; The encrypted execution program is stored in the user terminal according to the storage instruction submitted by the certification authority based on the program storage reminder.

[0058] Specifically, the user terminal uploads a storage page access request to the server according to the storage page access instruction submitted by the certification body. The server returns the storage page and the encryption execution program configured with the operation loading policy of the encryption operation to the user terminal based on the storage page access request. The user terminal receives and displays the storage page, and receives the encryption execution program, and downloads or loads the encryption execution program to the local. In order to enhance the certification body's awareness of the encryption execution program that is downloaded or loaded locally, a pop-up window of the program storage reminder can be displayed above the storage page during the display of the storage page. If the storage instruction submitted by the certification body based on the program storage reminder is detected, the encryption execution program is stored in the user terminal.

[0059] In addition, after marking the organization as a certification organization, that is, after the server has marked the certification organization for authentication, it can return a successful authentication result reminder and an encrypted execution program to the user terminal to download the encrypted execution program to the local user terminal.

[0060] (2) The encryption execution program is configured locally on the user terminal In an optional implementation manner provided by this embodiment, if the evidence storage page is a web page, the following method is used to implement an encryption execution program corresponding to the encryption operation configured on the evidence storage page to encrypt the evidence data mapped by the data encryption information: Reading the encrypted execution code contained in the page data of the web page as the encrypted execution program; The storage address is used as an execution input to execute the encryption execution program to encrypt the evidence data.

[0061] Optionally, the evidence storage page is configured with an encryption execution program for encryption operations.

[0062] In the specific execution process, if the evidence page is a web page, the server generates page data of the evidence page including the encrypted execution program in the process of generating the evidence page based on the evidence page access request and returns it to the user terminal; After acquiring the data encryption information, the user terminal reads the encryption execution program contained in the page data of the web page, inputs the data encryption information into the encryption execution program and executes the encryption execution program to encrypt the evidence data mapped by the data encryption information.

[0063] Optionally, when the data encryption information is the storage address of the evidence data, the evidence data is encrypted in the following manner: Determining the evidence data according to the storage address; The evidence data is hashed to obtain a hash value of the evidence data and the hash value is transmitted to the evidence storage page.

[0064] It should be emphasized that the encryption processing of evidence data in this embodiment is a local encryption processing of evidence data, that is, whether the evidence page is configured with an encryption execution program or the encryption processing of evidence data is performed by calling the encryption execution program stored locally in the user terminal through the operation loading strategy configured on the evidence page, the evidence data is encrypted locally, that is, the evidence data will not be transmitted. After the evidence data stored locally in the user terminal is encrypted, only the encrypted evidence data is transmitted.

[0065] The above provides two encryption processing processes, which correspond to different forms of evidence pages. It should be noted that the subroutine page configuration operation loading strategy may not be limited, and the web page configuration encryption execution program, that is, in an optional implementation provided by this embodiment, the evidence data mapped by the data encryption information is encrypted through the encryption execution program corresponding to the encryption operation configured in the evidence page, and the encrypted evidence data is obtained, which is implemented in the following way: Read the operation loading strategy of the encryption operation configured in the evidence storage page; Loading the encryption execution program corresponding to the encryption operation based on the operation loading strategy; Inputting the data encryption information into the encryption execution program and executing the encryption execution program to encrypt the evidence data mapped by the data encryption information; or, Reading the encrypted execution program contained in the page data of the evidence page; The encryption execution program is executed using the data encryption information as execution input to encrypt the evidence data mapped by the data encryption information.

[0066] Optionally, the encryption execution program encrypts the evidence data mapped by the data encryption information in the following manner: Determining the evidence data according to the data encryption information; The evidence data is hashed to obtain a hash value of the evidence data and the hash value is transmitted to the evidence storage page.

[0067] In the specific execution process, in order to enhance the certification authority's awareness of whether the encryption processing of the evidence data has been completed, in this embodiment, the evidence page may be configured with an encrypted evidence data item. After the encryption execution program performs hash processing on the evidence data to obtain a hash value, the hash value is transmitted to the evidence page. If the user terminal (evidence page) detects the encrypted evidence data, the encrypted data is updated to the encrypted evidence data item of the evidence page for display. The content of the encrypted evidence data item in the evidence page is automatically filled and cannot be manually collected or entered. Optionally, the evidence page is implanted with an operation loading strategy for the encryption operation and / or an encryption execution program corresponding to the encryption operation.

[0068] In addition, step S206 can also be replaced by taking the data encryption information as the execution input, executing the encryption execution program corresponding to the encryption operation configured in the evidence page, so as to perform local encryption processing on the evidence data mapped by the data encryption information, and forming a new implementation method with the other processing steps provided in this embodiment. Steps S204 to S208 can also be replaced by taking the data encryption information for secret evidence storage as the execution input, executing the encryption execution program corresponding to the encryption operation configured in the evidence page, so as to perform encryption processing on the evidence data mapped by the data encryption information, obtain encrypted evidence data, and forming a new implementation method with the other processing steps provided in this embodiment.

[0069] It should be noted that, in the process of encryption processing, in addition to local encryption processing of the evidence data mapped by the data encryption information, the evidence key data and the evidence data can also be encrypted together; based on this, step S206 can also be replaced by encrypting the evidence key data and the evidence data mapped by the data encryption information through the encryption execution program corresponding to the encryption operation configured on the evidence page, obtaining encrypted evidence data, and forming a new implementation method with other processing steps provided in this embodiment.

[0070] Step S208, according to the evidence storage instruction submitted by the certification body based on the evidence storage page, the key evidence data and the encrypted evidence data are uploaded to the server for evidence storage processing.

[0071] In specific implementation, after the encrypted evidence data is obtained, in order to effectively store the encrypted evidence data, the encrypted evidence data is uploaded to the server for evidence processing according to the evidence storage instruction submitted by the certification body based on the evidence storage page.

[0072] During the specific execution process, the user terminal may upload the evidence key data and the encrypted evidence data to the server for evidence storage, or may only upload the encrypted evidence data to the server for evidence storage, which is not limited in this embodiment.

[0073] In the first optional implementation mode provided in this embodiment, the server performs evidence storage processing in the following manner: Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Receive the on-chain evidence address returned by the blockchain node, and generate the secret evidence file based on the key evidence data, the encrypted evidence data and the on-chain evidence address.

[0074] Specifically, the server receives the encrypted evidence data and evidence key data uploaded by the user terminal, and sends the encrypted evidence data to the blockchain node to store the encrypted evidence data in the blockchain, and the receiving server blockchain node obtains and returns the on-chain evidence address after storing the encrypted evidence data in the blockchain.

[0075] The above provides a process in which the server receives the encrypted evidence data and evidence key data uploaded by the user terminal, sends the encrypted evidence data to the blockchain node, and stores the encrypted evidence data in the blockchain; In addition, the above-mentioned user terminal performs local encryption processing on the evidence key data and the evidence data mapped by the data encryption information to obtain encrypted evidence data. On the basis of receiving the encrypted evidence data uploaded by the user terminal, after the server receives the encrypted evidence data, in the process of evidence storage processing, the server sends the encrypted evidence data to the blockchain node to store the encrypted evidence data in the blockchain, that is, the encrypted evidence data of both the evidence key data and the evidence data are uploaded to the blockchain.

[0076] After receiving the on-chain evidence address, in order to enable the certification authority to access all relevant data of the secret evidence when accessing the evidence result of the secret evidence, in this embodiment, after receiving the on-chain evidence address, the server generates a secret evidence file based on the evidence key data, encrypted evidence data and the on-chain evidence address.

[0077] After generating the evidence file, the server may optionally read the key data of historical evidence stored in the historical secret evidence of the certification body, generate an evidence list page based on the key data of historical evidence and the key data of evidence, and return it to the user terminal. Correspondingly, in an optional implementation provided by this embodiment, the user terminal performs the following operations: Receive and display the evidence list page returned by the server; If it is detected that the certification authority submits an instruction to access the details of the secret evidence based on the key data of the evidence in the evidence list page, the evidence details in the evidence file are read and displayed.

[0078] Optionally, the evidence list page is generated based on the evidence key data and historical evidence key data of the historical secret evidence of the certification body.

[0079] Specifically, when the server returns the evidence list page to the user terminal, it can also return the evidence file of each evidence record in the evidence list page to the user terminal. The user terminal receives and displays the evidence list page returned by the server. If it is detected that the certification body submits an access instruction to the details of the corresponding secret evidence based on any evidence key data in the evidence list page, the evidence details in the evidence file to which any evidence key data belongs are read and displayed.

[0080] Furthermore, in order to identify the uniqueness of the secret evidence, the server may first generate an evidence number in the process of generating the evidence file of the secret evidence, generate evidence key data based on the evidence number and evidence key data, and generate evidence details based on the evidence number, evidence key data, encrypted evidence data and on-chain evidence address, thereby obtaining an evidence file containing evidence key data and evidence details. Optionally, the evidence list in the evidence list page is generated based on the evidence key data and the historical evidence key data of the historical secret evidence of the certification authority.

[0081] like Fig.12 The evidence list page shown shows the key data of two secret evidences, including the name of the evidence, the purpose of the evidence, the type of evidence, the time when the evidence was formed, and the user of the evidence institution (obtained based on user authorization). The evidence records can be queried based on any of the key data. In addition, a detail access control is also configured for each secret evidence. The certification agency can access the evidence details of the secret evidence by triggering the corresponding detail access control. For example, if the certification agency triggers the detail access control 1201 for evidence 1, it will obtain the detail access instruction for evidence 1, read the evidence details of evidence 1 and display them. The display of evidence details is as follows: Fig.13 shown.

[0082] like Fig.13 The evidence storage details shown also record data attributes such as the evidence data identifier, evidence data type, and evidence data size of the evidence data. The data attributes can be uploaded to the server together with the evidence key data and the encrypted evidence data.

[0083] In addition, the server may also only return the evidence list page to the user terminal. If the user terminal detects that the certification authority submits a detailed access instruction for the secret evidence based on the key evidence data in the evidence list page, the server uploads a detailed access request for the secret evidence to the server. In an optional implementation provided by this embodiment, the server receives the detailed access request for the secret evidence uploaded by the user terminal; based on the detailed access request, the evidence details contained in the evidence file are read and returned to the user terminal. The user terminal receives the evidence details and displays them.

[0084] In addition, the user terminal may also generate the evidence file. In the process of generating the evidence file by the user terminal, the server returns the on-chain evidence address returned by the blockchain node to the user terminal after receiving it. In an optional implementation manner provided by this embodiment, the user terminal generates the secret evidence file in the following manner: Receiving the on-chain evidence storage address returned by the server after performing evidence storage processing; Read the data attributes of the evidence data, and generate the evidence details of the secret evidence according to the data attributes, the on-chain evidence address and the encrypted evidence data.

[0085] Specifically, the user terminal generates secret evidence storage details based on the data attributes of the evidence data, the on-chain evidence storage address returned by the server, and the encrypted evidence data. Optionally, the evidence storage details and the evidence key data are integrated into a secret evidence storage file.

[0086] After obtaining the evidence file, the user terminal uploads the evidence file to the server for storage on the server; after receiving the evidence file, the server stores the evidence file, reads the historical evidence file of the certification body and returns it to the user terminal. In an optional implementation manner provided in this embodiment, after receiving the historical evidence file, the user terminal performs the following operations: Generate and display a stored evidence list page based on the evidence key data and the historical evidence key data returned by the server; If it is detected that the certification authority submits an instruction to access the details of the secret evidence based on the key data of the evidence in the evidence list page, the evidence details are displayed.

[0087] Specifically, an evidence list page is generated and displayed based on the evidence key data and the historical evidence key data in the historical evidence file returned by the server. If it is detected that the certification body submits a detailed access instruction for any evidence key data based on the evidence list page, the evidence details are read from the corresponding evidence file and displayed.

[0088] Similar to the process of generating a proof file by the server described above, in the process of generating a proof file, the user terminal may first generate a proof number, generate proof key data based on the proof number and the evidence key data, and generate proof details based on the proof number, the evidence key data, the encrypted evidence data and the on-chain proof address, thereby obtaining a proof file containing the proof key data and the proof details. Optionally, the proof list in the proof list page is generated based on the proof key data and the historical proof key data of the historical secret proof of the certification authority.

[0089] It should be noted that, in this embodiment, the user terminal, except for those specifically described as execution entities such as acquisition components and encryption execution programs, are all subprograms or web pages that provide authentication services.

[0090] In addition, in addition to uploading the encrypted evidence data to the blockchain for storage, the server can also store it in the cloud storage and obtain the cloud storage address.

[0091] To summarize, the method for storing one or more evidence data provided in the present embodiment obtains key evidence data for secret storage collected by the certification body based on the evidence page during the process of storing the evidence data. After obtaining the evidence data identifier and storage address for secret storage collected based on the evidence page, the encryption execution program corresponding to the encryption operation configured on the evidence page is first determined, and the encryption execution program is executed with the evidence data identifier and storage address as execution input to perform local encryption processing on the evidence data to obtain encrypted evidence data; the encrypted evidence data and the key evidence data are uploaded to the server for storage processing. In this way, there is no need to transmit the evidence data, and the evidence page will not obtain the evidence data itself, but the evidence data identifier and storage address, and only the encrypted evidence data is transmitted, thereby avoiding data leakage caused by the transmission of evidence data and improving the effectiveness of the storage of trade secrets.

[0092] The following uses the application of the evidence data storage method provided by this embodiment in the subroutine evidence storage scenario as an example to further illustrate the evidence data storage method provided by this embodiment. Fig.14 The evidence data storage method applied to the subroutine evidence storage scenario specifically includes the following steps.

[0093] Step S1402, obtaining key data of evidence for commercial secrets evidence collected by the certification body based on the subprogram evidence page of the agency service subprogram in the application.

[0094] Step S1404, according to the data collection instruction submitted by the certification body based on the subprogram evidence storage page, the collection component configured in the user terminal is called to collect data.

[0095] Step S1406, obtaining the local storage address and evidence data identifier of the evidence data stored in the terminal cache after data collection.

[0096] Step S1408, read the algorithm loading strategy for hash processing implanted in the subroutine evidence page, and load the encrypted execution program in the terminal cache based on the algorithm loading strategy.

[0097] Step S1410: input the local storage address and the evidence data identifier into the encryption execution program and execute the encryption execution program to perform local encryption processing on the evidence data to obtain encrypted evidence data.

[0098] Step S1412: If a certificate storage instruction submitted by the certification body based on the subroutine certificate storage page is detected, the encrypted evidence data is uploaded to the server to upload the encrypted evidence data to the blockchain for evidence storage processing.

[0099] Step S1414, receiving the on-chain evidence address returned by the server, and generating an evidence file for storing trade secrets based on the on-chain evidence address, key evidence data and encrypted evidence data.

[0100] Step S1416, generating and displaying a proof list page based on the proof file and the certification body's historical proof file.

[0101] The following uses the application of the evidence data storage method provided by this embodiment in the webpage evidence storage scenario as an example to further illustrate the evidence data storage method provided by this embodiment. Fig.15 , a method for storing evidence data applied to web page evidence storage scenarios specifically includes the following steps.

[0102] Step S1502, obtaining key evidence data for data storage of the user's data collected based on the web page storage page.

[0103] Step S1504, according to the data selection instruction submitted by the user based on the webpage evidence storage page, read the data list consisting of the terminal storage data of the user terminal and display it.

[0104] Step S1506: Obtain the local storage address and evidence data identifier of the evidence data selected by the user based on the data list.

[0105] Step S1508, read the encryption execution program for hash calculation embedded in the web evidence page.

[0106] Step S1510, input the key evidence data, the local storage address and the evidence data identifier into the encryption execution program and execute the encryption execution program to perform local encryption processing on the key evidence data and the evidence data to obtain encrypted evidence data.

[0107] Step S1512: If a user submits an evidence storage instruction based on the web evidence storage page, the encrypted evidence data is uploaded to the server, so as to upload the encrypted evidence data to the blockchain for evidence storage processing.

[0108] Step S1514, receiving and displaying the evidence list page returned by the server after generating the evidence file for data evidence based on the on-chain evidence address and encrypted evidence data.

[0109] One or more embodiments of another method for storing evidence data provided in this specification are as follows: The method for storing evidence data provided in the present embodiment can be applied to a server, and the method for storing evidence data provided in the above embodiment can be applied to a user terminal. The method for storing evidence data applicable to a server provided in the present embodiment can be executed correspondingly to the method for storing evidence data applicable to a user terminal provided in the above embodiment during execution. Therefore, the reading of this embodiment can refer to the relevant contents of the above embodiment, and correspondingly, the reading of the above embodiment can also refer to the relevant contents of this embodiment.

[0110] Reference Fig.16 The method for storing evidence data provided in this embodiment can be applied to a server, and specifically includes steps S1602 to S1608.

[0111] Step S1602, in response to the evidence page access request uploaded by the user terminal, the evidence page for configuring the encryption operation is returned to the user terminal.

[0112] In this embodiment, the secret evidence storage of commercial secrets can be carried out through a subroutine for secret evidence storage in an application program running on the user terminal, or through a web page for secret evidence storage in a browser running on the user terminal. In order to effectively manage the organization and ensure that the organization that performs secret evidence storage based on a subroutine or web page is real and has actual evidence storage needs, the organization can perform secret evidence storage based on the subroutine and / or web page after the organization has performed authentication processing through the subroutine and / or web page. In this embodiment, the organization that has performed authentication processing through the subroutine and / or web page and successfully performed the authentication processing is the certification organization. In this way, the area for storing encrypted evidence data is reasonably and effectively allocated to avoid invalid occupation of the storage area.

[0113] The authentication process provided in this embodiment can be implemented by the user terminal in the following manner: Obtaining an institution certification instruction submitted by the certification institution, and uploading an institution certification request to the server based on the institution certification instruction; Receive and display the benchmark information entry page returned by the server; If a confirmation instruction is detected after the to-be-certified institution enters the benchmark institution information based on the benchmark information entry page, uploading the benchmark institution information to the server; A scan authentication page including an authentication identification code returned by the server is received and displayed; the authentication identification code is generated based on the reference institution information.

[0114] Optionally, the benchmark institution information may be element information of basic elements for establishing an institution; for example, the institution name, institution credit code, user name of the institution management user, and identity certificate number of the institution management user; the authentication identification code is used for the institution management user to scan for institution verification.

[0115] In the specific implementation process, after the user terminal displays the scan authentication page, the organization management user can be reminded to scan the authentication identification code based on the management user terminal according to the reminder text "Please ask the organization management user to scan the code for authentication" in the scan authentication page; after the server detects the identification code identifier (obtained by parsing the authentication identification code) and the user identifier (obtained by reading from the management user terminal) uploaded after the management user terminal scans the authentication identification code, it first reads the benchmark organization information associated with the identification code identifier, and inquires whether the user identifier is consistent with the user identifier of the organization management user in the benchmark organization information; if not, the authentication result reminder of failed authentication is returned to the user terminal; if so, the authentication result reminder of successful authentication is returned to the user terminal. Optionally, the third-party query interface can be a query interface provided by the organization management platform. Optionally, the authentication identification code can be a QR code or a barcode, which is not limited in this embodiment.

[0116] Optionally, the server receives an institution authentication request uploaded by a user terminal, reads an institution information entry page based on the institution authentication request, and returns the page to the user terminal; The server receives the reference institution information uploaded by the user terminal, generates an authentication identification code based on the reference institution information; generates a scanning authentication page including the authentication identification code and returns it to the user terminal; The server receives the identification code and user identification submitted by the management user after the management user terminal scans the authentication identification code displayed by the user terminal, and performs institution verification based on the user identification and the identification code; If the verification is successful, an authentication result reminder of successful authentication is returned to the user terminal; if the verification is not successful, an authentication result reminder of failed authentication is returned to the user terminal.

[0117] It should be noted that if the authentication processing and / or secret evidence storage is performed based on a sub-program of the user terminal, the server is the server corresponding to the sub-program; if the authentication processing and / or secret evidence storage is performed based on a web page of the user terminal, the server is the server corresponding to the web page; in addition, the server can also provide the ability to perform authentication processing and / or secret evidence storage based on both sub-programs and web pages. In this case, regardless of whether the user terminal is based on a sub-program or a web page, the server is the same.

[0118] For example, after the certification body passes Figure 3 The "Evidence Storage Experience" control configured in the commercial secret evidence storage introduction area 301 in the subprogram homepage shown in the figure submits the institution authentication instruction; after the user terminal obtains the institution authentication instruction submitted by the institution to be authenticated based on the subprogram homepage of the institution service subprogram, it uploads the institution authentication request to the server, and the server returns the benchmark information entry page to the user terminal based on the institution authentication request, and the user terminal receives and displays the following information: Figure 4 If it is detected that the to-be-certified institution enters the benchmark institution information based on the benchmark information entry page and triggers the confirmation instruction submitted by the "Next" control, the benchmark institution information is uploaded to the server, and the server receives the benchmark institution information and calls the third-party query interface to query whether the institution identifier in the benchmark institution information matches the user identifier of the institution management user. If not, the authentication result reminder of authentication failure is returned to the user terminal, so that the user terminal displays the following Figure 5 The authentication failure result page shown in the figure is displayed; if a match is found, an authentication QR code associated with the institution's benchmark information is generated, and a scan authentication page containing the authentication QR code and a reminder text "Please ask the institution's management user to scan the code for authentication" is generated and returned to the user terminal. The user terminal receives the scan authentication page and displays the scan authentication page above the benchmark information entry page in the form of a pop-up window, such as Figure 6 As shown, after the organization management user of the organization to be authenticated scans and decodes the authentication QR code based on the organization service subroutine of the management user terminal or the application program (third-party payment application application) equipped with the organization service subroutine, the QR code identifier and the user identifier of the organization management user are uploaded to the server associated with the authentication QR code. The server receives the QR code identifier and the user identifier, reads the benchmark organization information associated with the QR code identifier, and verifies whether the user identifier is consistent with the user identifier of the organization management user contained in the benchmark organization information. If they are inconsistent, an authentication result reminder of authentication failure is returned to the user terminal. The user terminal receives the authentication result reminder of authentication failure and displays it as shown in the figure. Figure 5 If the authentication result page is consistent, the authentication authority will mark the authentication result and return the authentication result reminder of successful authentication to the user terminal. The user terminal receives the authentication result reminder of successful authentication and displays the following information: Figure 7The authentication success result page is shown in the figure. If the user is waiting for the organization management user to scan and verify, the following will be displayed on the user terminal: Figure 8 The authentication result waiting page is shown.

[0119] In actual applications, the login of application programs, institution service subprograms and / or web pages is performed based on the dimension of "user". Therefore, in the process of authenticating the institution, after determining that the authentication of the institution to be authenticated is successful, the server can send an information authorization reminder to the user terminal, and the user terminal will display the following information: Fig. 9 The authorization reminder page shown, if detecting an authorization confirmation instruction submitted based on the authorization reminder page, uploads the authorization confirmation request to the server, and the server reads the submitting user ID who submitted the authorization confirmation request according to the authorization confirmation request, and stores the submitting user ID in association with the certification agency, so that the certification agency corresponding to the user can be determined after subsequently logging into the application, agency service subroutine and / or web page based on the submitting user ID.

[0120] In specific implementation, after the certification body successfully authenticates, it is marked as a certification body. After the user terminal subsequently obtains the agency authentication instruction or the evidence page access request (secret evidence instruction) and uploads it to the server, the server obtains the agency identification according to the authorization confirmation instruction. After obtaining the agency identification, it verifies whether the agency corresponding to the agency identification carries the certification mark. If so, the evidence page for configuring the encryption operation is returned to the user terminal. If not, the agency authentication process is performed in the above manner.

[0121] In addition to the secret storage of business secrets by certification agencies, for users in some specific fields, the user's data also exists in a confidential form. Therefore, in this embodiment, authenticated users can also secretly store evidence through subroutines and / or web pages, and users and / or organizations can perform authentication processing by logging into subroutines and / or web pages.

[0122] In addition, if the storage area is large enough, no allocation is required and no authentication processing is required.

[0123] The secret evidence storage in this embodiment includes the evidence storage of the business secrets of the certification body. The key evidence data includes relevant data that describes the evidence data based on the evidence storage page; for example, the evidence storage purpose that describes the data type of the evidence data, the evidence storage category that describes the category to which the evidence data belongs, and the evidence name obtained by naming the evidence data in order to identify the uniqueness of the evidence data.

[0124] Specifically, the user terminal obtains the evidence page access instruction and uploads the evidence page access request to the server. The server responds to the evidence page access request uploaded by the user terminal and returns the evidence page configured with the encryption operation to the user terminal. The user terminal receives the evidence page returned by the server and displays it. Fig.10 The evidence storage page shown in the figure contains the purpose of evidence storage, evidence storage category, evidence name, data acquisition type, local evidence, encrypted evidence data, evidence formation time and remarks, and is configured with a submit control, which can be triggered to submit the evidence storage instruction. In order to ensure the effective storage of evidence data of trade secrets, such as Fig.10 In the evidence storage page shown, the evidence storage purpose, evidence storage type, evidence name, and data acquisition type are required items and carry a required mark. Optionally, the evidence storage page includes a local evidence item for collecting data encryption information of the evidence data and an encrypted evidence data display item for displaying the encrypted evidence data after encrypting the evidence data mapped by the data encryption information.

[0125] After the specific display of the evidence page, the key data of evidence for secret evidence storage collected by the certification body based on the evidence page is obtained; among them, except for the local evidence items and the encrypted evidence data display items in the evidence page, the data collected through other data items are all key data of evidence for secret evidence storage.

[0126] The user terminal obtains the key data of the evidence collected by the certification body for secret evidence storage based on the evidence storage page, and obtains the data encryption information for secret evidence storage.

[0127] The data encryption information includes information describing the storage location of the evidence data for secret storage in the user terminal; optionally, the data encryption information includes the evidence data identifier and / or storage address. The evidence data identifier refers to the identifier used to uniquely identify the evidence data in the cache of the user terminal; the storage address refers to the specific storage location of the evidence data in the user terminal.

[0128] In specific implementation, in addition to collecting key evidence data based on the evidence page, the certification body can also collect data encryption information for secret evidence based on the evidence page.

[0129] In this embodiment, the evidence data to be secretly stored can be selected from the data stored in the user terminal, or it can be collected in real time. The following specifically describes the real-time collection of data encryption information and the acquisition of data encryption information locally from the user terminal.

[0130] (1) Real-time collection In specific implementation, the certification authority may collect evidence data in real time through the user terminal during the process of secret evidence storage. In an optional implementation provided by this embodiment, the user terminal obtains the data encryption information for secret evidence storage in the following manner: Obtaining a data collection instruction submitted by the certification body based on the evidence storage page; Reading the data category carried in the data collection instruction, and determining a collection component for data collection according to the data category; The collection component configured in the user terminal is called to collect data, and an evidence data identifier obtained by the data collection is obtained.

[0131] Optionally, the data collection instruction can be triggered by selecting the data acquisition type of local collection under the data acquisition type item of the evidence storage page, and submitting the local evidence item of the evidence storage page. The data category includes the category to which the evidence data to be collected belongs; for example, images, recordings.

[0132] Specifically, the user terminal determines the collection component for data collection based on the data category carried in the data collection instruction submitted by the certification body based on the evidence page, calls the collection component configured in the user terminal to collect data, and obtains the evidence data identifier and / or storage address uploaded after the collection component performs data collection and data storage.

[0133] Among them, the user terminal obtains the data collection instruction, which can be after detecting that the local data item of the evidence page is triggered, reading the data acquisition type contained in the key data of the evidence, if the data acquisition type is a local acquisition type, then displaying the acquisition category selection page, and obtaining the certification body based on the data collection instruction.

[0134] For example, if the user terminal detects Fig.10 The local data item in the evidence page shown is triggered, and the data acquisition type selected under the data acquisition type item in the evidence page is read as the local acquisition type, then the following is displayed Fig.11 As shown in the collection category selection page, the certification body selects the data category and submits the data collection instruction through the collection category selection page. The user terminal obtains the data collection instruction carrying the data category of "recording", and determines that the collection component corresponding to the data category of "recording" is the microphone. The microphone configured on the user terminal is called to record. After recording, the microphone stores the recording file in the cache of the user terminal, and uploads the file name and / or storage address of the recording file to the evidence page, so that the evidence page can obtain the data encryption information.

[0135] In addition, the certification agency can also select multiple data categories based on the collection category selection page and submit data collection instructions. For example, the data list in the data collection instruction includes recording categories and image categories. Then, according to the recording categories and image categories, the recording component and image collection component configured in the user terminal are called to perform recording collection and image collection, and the identification and / or storage address of the recording file and image are obtained.

[0136] It should be noted that, in the present embodiment, during the process of data collection, the collection component configured by the user terminal collects data based on the call of the certification body through the evidence page, and the evidence data obtained by the collection is stored in the cache of the user terminal, and the collection component does not upload the collected evidence data to the evidence page; that is, the collection component configured by the user terminal collects data in response to the call of the certification body based on the evidence page, stores the evidence data obtained by the data collection in the cache area of ​​the user terminal and uploads the evidence data identifier to the evidence page.

[0137] (2) Local selection In specific implementation, the certification authority can obtain data encryption information by selecting evidence data stored locally by the user terminal during the process of secret evidence storage. In an optional implementation provided by this embodiment, the user terminal uses the following steps to obtain data encryption information for secret evidence storage of locally stored files: Obtaining a data selection instruction submitted by the certification authority based on the evidence storage page; Read and display a data list consisting of terminal storage data under the data category carried in the data selection instruction; In the case where it is detected that the authentication agency selects a target terminal to store data in the data list, the target terminal storage data is used as evidence data and a storage address of the evidence data in the user terminal is obtained.

[0138] Optionally, the data selection instruction can be triggered by selecting the local data acquisition type in the data acquisition type drop-down list of the evidence page, and triggering the submission of the local data item of the evidence page. Fig.10 As shown, the data acquisition type can be selected as local collection or local selection. Similarly, after detecting that the local data item of the evidence page is triggered, the data acquisition type contained in the evidence key data is read. If the data acquisition type is a local selection type, it is determined that the data selection instruction is obtained.

[0139] Specifically, according to the data selection instruction submitted by the certification body based on the evidence page, a data list consisting of the terminal storage data stored in the cache of the user terminal is read and displayed, and when it is detected that the certification body selects the target terminal storage data in the data list, the data identifier and / or storage address of the target terminal storage data is read.

[0140] In addition, the user terminal obtains the data selection instruction, which can be that after detecting that the local data item in the evidence page is triggered and reading that the data acquisition type selected under the data acquisition type in the evidence page is the local selection type, a selection category selection page is displayed, the certification body selects the data category based on the selection category selection page and submits the data selection instruction, the user terminal obtains the data selection instruction carrying the data category, calls the cache of the user terminal to display a data list consisting of the terminal storage data under the data category, and the cache component uploads the data identifier and / or storage address of the target terminal storage data as data encryption information to the evidence page when it detects that the certification body selects the target terminal to store data in the data list.

[0141] The user terminal encrypts the evidence data mapped by the data encryption information through the encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data.

[0142] The encryption operation refers to the operation of encrypting data encryption information; in the specific execution process, as a user terminal, in the process of data processing, it is based on a "program", which can be a code form to perform specific data processing. Therefore, in this embodiment, in the process of encryption processing, the encryption execution code that specifically implements the encryption operation is used as the encryption execution program. It should also be noted that the encryption execution program can be configured locally on the user terminal or in the page data of the evidence page.

[0143] The following uses the example of the case where secret evidence is stored through a subroutine of an application, where the encryption execution program is configured locally on the user terminal, that is, stored in the cache of the user terminal, and the case where secret evidence is stored through a web page, where the encryption execution program is configured on the evidence storage page, to specifically explain the encryption processing process.

[0144] (1) The encryption execution program is configured locally on the user terminal In an optional implementation manner provided by this embodiment, if the evidence storage page is a subroutine page in an application, the user terminal implements the encryption execution program corresponding to the encryption operation configured by the evidence storage page in the following manner to encrypt the evidence data mapped by the data encryption information: Reading the operation loading strategy of the encryption operation configured in the subroutine page; Loading the encryption execution program corresponding to the encryption operation based on the operation loading strategy; The evidence data identifier is input into the encryption execution program and the encryption execution program is executed to encrypt the evidence data.

[0145] Optionally, the evidence storage page is configured with an operation loading strategy for encryption operations. In this embodiment, the operation loading strategy includes a calling strategy for calling the local encryption execution program of the user terminal.

[0146] In the specific execution process, if the evidence page is a subroutine page in the application, the server generates page data of the evidence page including the operation loading policy of the encryption operation in the process of generating the evidence page based on the evidence page access request and returns it to the user terminal; After obtaining the data encryption information, the user terminal first reads the operation loading policy of the encryption operation in the page data of the subroutine page, and then loads the encryption execution program corresponding to the encryption operation stored locally in the user terminal based on the operation loading policy, inputs the data encryption information into the encryption execution program and executes the encryption execution program to encrypt the evidence data mapped by the data encryption information.

[0147] Optionally, when the data encryption information is an evidence data identifier, the encryption execution program encrypts the evidence data in the following manner: Determining the evidence data to be secretly stored according to the evidence data identifier; The evidence data is hashed to obtain a hash value of the evidence data and the hash value is transmitted to the evidence storage page.

[0148] It should be noted that if what is obtained is the evidence data identifier and / or storage address of the evidence data, the evidence data to be secretly stored can be determined based on the evidence data identifier and / or storage address.

[0149] In the specific execution process, optionally, the encryption execution program is stored in the user terminal when the certification authority accesses the evidence storage page. In an optional implementation manner provided by this embodiment, the encryption execution program is stored in the user terminal in the following manner: Uploading a request for accessing the evidence page to the server according to the evidence page access instruction submitted by the certification authority; Receiving the evidence page and the encrypted execution program returned by the server after performing evidence verification, and displaying the evidence page and program storage reminder; The encrypted execution program is stored in the user terminal according to the storage instruction submitted by the certification authority based on the program storage reminder.

[0150] Specifically, the user terminal uploads a storage page access request to the server according to the storage page access instruction submitted by the certification body. The server returns the storage page and the encryption execution program configured with the operation loading policy of the encryption operation to the user terminal based on the storage page access request. The user terminal receives and displays the storage page, receives the encryption execution program, and downloads or loads the encryption execution program to the local. In order to enhance the certification body's awareness of the encryption execution program that is downloaded or loaded locally, a pop-up window of the program storage reminder can be displayed above the storage page during the display of the storage page. If the storage instruction submitted by the certification body based on the program storage reminder is detected, the encryption execution program is stored in the user terminal.

[0151] In addition, after marking the organization as a certification organization, that is, after the server has marked the certification organization for authentication, it can return a successful authentication result reminder and an encrypted execution program to the user terminal to download the encrypted execution program to the local user terminal.

[0152] (2) The encryption execution program is configured locally on the user terminal In an optional implementation manner provided by this embodiment, if the evidence storage page is a web page, the user terminal implements the encryption execution program corresponding to the encryption operation configured on the evidence storage page in the following manner to encrypt the evidence data mapped by the data encryption information: Reading the encrypted execution code contained in the page data of the web page as the encrypted execution program; The storage address is used as an execution input to execute the encryption execution program to encrypt the evidence data.

[0153] Optionally, the evidence storage page is configured with an encryption execution program for encryption operations.

[0154] In the specific execution process, if the evidence page is a web page, the server generates page data of the evidence page including the encrypted execution program in the process of generating the evidence page based on the evidence page access request and returns it to the user terminal; After acquiring the data encryption information, the user terminal reads the encryption execution program contained in the page data of the web page, inputs the data encryption information into the encryption execution program and executes the encryption execution program to encrypt the evidence data mapped by the data encryption information.

[0155] Optionally, when the data encryption information is the storage address of the evidence data, the evidence data is encrypted in the following manner: Determining the evidence data according to the storage address; The evidence data is hashed to obtain a hash value of the evidence data and the hash value is transmitted to the evidence storage page.

[0156] It should be emphasized that the encryption processing of evidence data in this embodiment is a local encryption processing of evidence data, that is, whether the evidence page is configured with an encryption execution program or the encryption processing of evidence data is performed by calling the encryption execution program stored locally in the user terminal through the operation loading strategy configured on the evidence page, the evidence data is encrypted locally, that is, the evidence data will not be transmitted. After the evidence data stored locally in the user terminal is encrypted, only the encrypted evidence data is transmitted.

[0157] The above provides two encryption processing processes, which correspond to different forms of evidence pages. It should be noted that the subroutine page configuration operation loading strategy may not be limited, and the web page configuration encryption execution program, that is, in an optional implementation provided by this embodiment, the evidence data mapped by the data encryption information is encrypted through the encryption execution program corresponding to the encryption operation configured in the evidence page, and the encrypted evidence data is obtained. The user terminal is implemented in the following manner: Read the operation loading strategy of the encryption operation configured in the evidence storage page; Loading the encryption execution program corresponding to the encryption operation based on the operation loading strategy; Inputting the data encryption information into the encryption execution program and executing the encryption execution program to encrypt the evidence data mapped by the data encryption information; or, Reading the encrypted execution program contained in the page data of the evidence page; The encryption execution program is executed using the data encryption information as execution input to encrypt the evidence data mapped by the data encryption information.

[0158] Optionally, the encryption execution program encrypts the evidence data mapped by the data encryption information in the following manner: Determining the evidence data according to the data encryption information; The evidence data is hashed to obtain a hash value of the evidence data and the hash value is transmitted to the evidence storage page.

[0159] In the specific execution process, in order to enhance the certification authority's awareness of whether the encryption processing of the evidence data has been completed, in this embodiment, the evidence page may be configured with an encrypted evidence data item. After the encryption execution program performs hash processing on the evidence data to obtain a hash value, the hash value is transmitted to the evidence page. If the user terminal (evidence page) detects the encrypted evidence data, the encrypted data is updated to the encrypted evidence data item of the evidence page for display. The content of the encrypted evidence data item in the evidence page is automatically filled and cannot be manually collected or entered. Optionally, the evidence page is implanted with an operation loading strategy for the encryption operation and / or an encryption execution program corresponding to the encryption operation.

[0160] The user terminal uploads the evidence key data and the encrypted evidence data to the server for evidence storage processing according to the evidence storage instruction submitted by the certification authority based on the evidence storage page.

[0161] In specific implementation, after the encrypted evidence data is obtained, in order to effectively store the encrypted evidence data, the encrypted evidence data is uploaded to the server for evidence processing according to the evidence storage instruction submitted by the certification body based on the evidence storage page.

[0162] During the specific execution process, the user terminal may upload the key evidence data and the encrypted evidence data to the server for evidence storage, or may only upload the encrypted evidence data to the server for evidence storage, which is not limited in this embodiment.

[0163] Step S1604: receiving the encrypted evidence data and evidence key data uploaded by the user terminal.

[0164] Optionally, the encrypted evidence data is obtained by encrypting evidence data mapped to data encryption information for secret evidence storage using an encryption execution program corresponding to the encryption operation.

[0165] Step S1606: Send the encrypted evidence data to the blockchain node to store the encrypted evidence data in the blockchain.

[0166] Step S1608, based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node, generate the evidence file of the secret evidence.

[0167] In an optional implementation manner provided by this embodiment, after the step of generating an evidence file based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node is executed, the step further includes: Reading key data of historical evidence of historical secret evidence stored by the certification body that performs the secret evidence storage; A stored evidence list page is generated based on the evidence key data and the historical evidence key data and is returned to the user terminal.

[0168] Furthermore, in an optional implementation manner provided in this embodiment, the following operations are also performed: Receiving a request for access to details of the secret evidence uploaded by the user terminal; Based on the detail access request, the evidence details contained in the evidence file are read and returned to the user terminal.

[0169] Optionally, the detail access request is uploaded after detecting that the certification authority submits a detail access instruction for the secret attestation based on the attestation list page.

[0170] In the first optional implementation mode provided in this embodiment, the server performs evidence storage processing in the following manner: Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Receive the on-chain evidence address returned by the blockchain node, and generate the secret evidence file based on the key evidence data, the encrypted evidence data and the on-chain evidence address.

[0171] Specifically, the server receives the encrypted evidence data and evidence key data uploaded by the user terminal, and sends the encrypted evidence data to the blockchain node to store the encrypted evidence data in the blockchain, and the receiving server blockchain node obtains and returns the on-chain evidence address after storing the encrypted evidence data in the blockchain.

[0172] After receiving the on-chain evidence address, in order to enable the certification authority to access all relevant data of the secret evidence when accessing the evidence result of the secret evidence, in this embodiment, after receiving the on-chain evidence address, the server generates a secret evidence file based on the evidence key data, encrypted evidence data and the on-chain evidence address.

[0173] After generating the evidence file, the server may optionally read the key data of historical evidence stored in the historical secret evidence of the certification body, generate an evidence list page based on the key data of historical evidence and the key data of evidence, and return it to the user terminal. Correspondingly, in an optional implementation provided by this embodiment, the user terminal performs the following operations: Receive and display the evidence list page returned by the server; If it is detected that the certification authority submits an instruction to access the details of the secret evidence based on the key data of the evidence in the evidence list page, the evidence details in the evidence file are read and displayed.

[0174] Optionally, the evidence list page is generated based on the evidence key data and historical evidence key data of the historical secret evidence of the certification body.

[0175] Specifically, when the server returns the evidence list page to the user terminal, it can also return the evidence file of each evidence record in the evidence list page to the user terminal. The user terminal receives and displays the evidence list page returned by the server. If it is detected that the certification body submits an access instruction to the details of the corresponding secret evidence based on any evidence key data in the evidence list page, the evidence details in the evidence file to which any evidence key data belongs are read and displayed.

[0176] Furthermore, in order to identify the uniqueness of the secret evidence, the server may first generate an evidence number in the process of generating the evidence file of the secret evidence, generate evidence key data based on the evidence number and evidence key data, and generate evidence details based on the evidence number, evidence key data, encrypted evidence data and on-chain evidence address, thereby obtaining an evidence file containing evidence key data and evidence details. Optionally, the evidence list in the evidence list page is generated based on the evidence key data and the historical evidence key data of the historical secret evidence of the certification authority.

[0177] like Fig.12 The evidence list page shown shows the key data of two secret evidences, including the evidence name, evidence purpose, evidence category, evidence formation time and evidence institution user (obtained based on user authorization). In addition, for each secret evidence, a detail access control is also configured. The certification agency can access the evidence details of the secret evidence by triggering the corresponding detail access control. For example, if the certification agency triggers the detail access control 1201 for evidence 1, it will obtain the detail access instruction for evidence 1, read the evidence details of evidence 1 and display it. The display of evidence details is as follows: Fig.13 shown.

[0178] like Fig.13 The evidence storage details shown also record data attributes such as the evidence data identifier, evidence data type, and evidence data size of the evidence data. The data attributes can be uploaded to the server together with the evidence key data and the encrypted evidence data.

[0179] In addition, the server may also only return the evidence list page to the user terminal. If the user terminal detects that the certification authority submits a detailed access instruction for the secret evidence based on the key evidence data in the evidence list page, the server uploads a detailed access request for the secret evidence to the server. In an optional implementation provided by this embodiment, the server receives the detailed access request for the secret evidence uploaded by the user terminal; based on the detailed access request, the evidence details contained in the evidence file are read and returned to the user terminal. The user terminal receives the evidence details and displays them.

[0180] In addition, the user terminal may also generate the evidence file. In the process of generating the evidence file by the user terminal, the server returns the on-chain evidence address returned by the blockchain node to the user terminal after receiving it. In an optional implementation manner provided by this embodiment, the user terminal generates the secret evidence file in the following manner: Receiving the on-chain evidence storage address returned by the server after performing evidence storage processing; Read the data attributes of the evidence data, and generate the evidence details of the secret evidence according to the data attributes, the on-chain evidence address and the encrypted evidence data.

[0181] Specifically, the user terminal generates secret evidence storage details based on the data attributes of the evidence data, the on-chain evidence storage address returned by the server, and the encrypted evidence data. Optionally, the evidence storage details and the evidence key data are integrated into a secret evidence storage file.

[0182] After obtaining the evidence file, the user terminal uploads the evidence file to the server for storage on the server; after receiving the evidence file, the server stores the evidence file, reads the historical evidence file of the certification body and returns it to the user terminal. In an optional implementation manner provided in this embodiment, after receiving the historical evidence file, the user terminal performs the following operations: Generate and display a stored evidence list page based on the evidence key data and the historical evidence key data returned by the server; If it is detected that the certification authority submits an instruction to access the details of the secret evidence based on the key data of the evidence in the evidence list page, the evidence details are displayed.

[0183] Specifically, an evidence list page is generated and displayed based on the evidence key data and the historical evidence key data in the historical evidence file returned by the server. If it is detected that the certification body submits a detailed access instruction for any evidence key data based on the evidence list page, the evidence details are read from the corresponding evidence file and displayed.

[0184] Similar to the process of generating a proof file by the server described above, in the process of generating a proof file, the user terminal may first generate a proof number, generate proof key data based on the proof number and the evidence key data, and generate proof details based on the proof number, the evidence key data, the encrypted evidence data and the on-chain proof address, thereby obtaining a proof file containing the proof key data and the proof details. Optionally, the proof list in the proof list page is generated based on the proof key data and the historical proof key data of the historical secret proof of the certification authority.

[0185] It should be noted that, in this embodiment, the user terminal, except for those specifically described as execution entities such as acquisition components and encryption execution programs, are all subprograms or web pages that provide authentication services.

[0186] In addition, in addition to uploading the encrypted evidence data to the blockchain for storage, the server can also store it in the cloud storage and obtain the cloud storage address.

[0187] One or more embodiments of a device for storing evidence data provided in this specification are as follows: In the above-mentioned embodiment, a method for storing evidence data is provided, and correspondingly, a device for storing evidence data is also provided, which will be described below with reference to the accompanying drawings.

[0188] Reference Fig.17 , which shows a schematic diagram of an embodiment of an evidence data storage device provided in this embodiment.

[0189] Since the device embodiment corresponds to the method embodiment, the description is relatively simple, and the relevant parts can refer to the corresponding description of the method embodiment provided above. The device embodiment described below is only illustrative.

[0190] This embodiment provides a device for storing evidence data, including: The data acquisition module 1702 is configured to acquire key data of evidence collected by the certification authority for secret evidence storage based on the evidence storage page; The information acquisition module 1704 is configured to acquire data encryption information for secret evidence storage; The encryption processing module 1706 is configured to encrypt the evidence data mapped by the data encryption information through the encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data; The data upload module 1708 is configured to upload the evidence key data and the encrypted evidence data to the server for evidence storage processing according to the evidence storage instruction submitted by the certification authority based on the evidence storage page.

[0191] One or more embodiments of another evidence data storage device provided in this specification are as follows: In the above-mentioned embodiment, another method for storing evidence data is provided, and correspondingly, another device for storing evidence data is also provided, which is described below with reference to the accompanying drawings.

[0192] Reference Fig.18 , which shows a schematic diagram of an embodiment of an evidence data storage device provided in this embodiment.

[0193] Since the device embodiment corresponds to the method embodiment, the description is relatively simple, and the relevant parts can refer to the corresponding description of the method embodiment provided above. The device embodiment described below is only illustrative.

[0194] This embodiment provides a device for storing evidence data, including: The page return module 1802 is configured to respond to the storage page access request uploaded by the user terminal and return the storage page for configuring the encryption operation to the user terminal; The data receiving module 1804 is configured to receive the encrypted evidence data and evidence key data uploaded by the user terminal; the encrypted evidence data is obtained by encrypting the evidence data mapped to the data encryption information for secret evidence storage through the encryption execution program corresponding to the encryption operation; The data storage module 1806 is configured to send the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; The file generation module 1808 is configured to generate a secret evidence file based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node.

[0195] One or more embodiments of a user terminal provided in this specification are as follows: Corresponding to the method for storing evidence data described above, based on the same technical concept, one or more embodiments of this specification further provide a user terminal, which is used to execute the method for storing evidence data provided above. Fig.19 A schematic diagram of the structure of a user terminal provided in one or more embodiments of this specification.

[0196] This embodiment provides a user terminal, including: like Fig.19 As shown, the user terminal may have relatively large differences due to different configurations or performances, and may include one or more processors 1901 and memory 1902, and the memory 1902 may store one or more storage applications or data. Among them, the memory 1902 may be a short-term storage or a persistent storage. The application stored in the memory 1902 may include one or more modules (not shown in the figure), and each module may include a series of computer executable instructions in the user terminal. Furthermore, the processor 1901 may be configured to communicate with the memory 1902 and execute a series of computer executable instructions in the memory 1902 on the user terminal. The user terminal may also include one or more power supplies 1903, one or more wired or wireless network interfaces 1904, one or more input / output interfaces 1905, one or more keyboards 1906, etc.

[0197] In a specific embodiment, the user terminal includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer executable instructions in the user terminal, and the one or more programs are configured to be executed by one or more processors, including computer executable instructions for performing the following: Obtain key data of evidence collected by the certification body based on the evidence storage page for secret storage; Obtain data encryption information for secret evidence storage; The evidence data mapped by the data encryption information is encrypted by the encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data; According to the evidence storage instruction submitted by the certification body based on the evidence storage page, the key evidence data and the encrypted evidence data are uploaded to the server for evidence storage processing.

[0198] One or more embodiments of a server provided in this specification are as follows: Corresponding to the other evidence data storage method described above, based on the same technical concept, one or more embodiments of this specification further provide a server, which is used to execute the evidence data storage method provided above. Fig. 20 A schematic diagram of the structure of a server provided for one or more embodiments of this specification.

[0199] This embodiment provides a server, including: like Fig. 20 As shown, the server may have relatively large differences due to different configurations or performances, and may include one or more processors 2001 and memory 2002, and the memory 2002 may store one or more storage applications or data. Among them, the memory 2002 may be a short-term storage or a persistent storage. The application stored in the memory 2002 may include one or more modules (not shown in the figure), and each module may include a series of computer executable instructions in the server. Furthermore, the processor 2001 may be configured to communicate with the memory 2002 and execute a series of computer executable instructions in the memory 2002 on the server. The server may also include one or more power supplies 2003, one or more wired or wireless network interfaces 2004, one or more input / output interfaces 2005, etc.

[0200] In a specific embodiment, the server includes a memory and one or more programs, wherein the one or more programs are stored in the memory, and the one or more programs may include one or more modules, and each module may include a series of computer executable instructions in the server, and the one or more programs are configured to be executed by one or more processors, including computer executable instructions for performing the following: In response to a storage page access request uploaded by a user terminal, returning a storage page for configuring encryption operations to the user terminal; Receiving the encrypted evidence data and evidence key data uploaded by the user terminal; the encrypted evidence data is obtained by encrypting the evidence data mapped to the data encryption information for secret evidence storage through the encryption execution program corresponding to the encryption operation; Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node, a storage file of the secret evidence is generated.

[0201] One or more embodiments of a storage medium provided in this specification are as follows: Corresponding to the method for storing evidence data described above, based on the same technical concept, one or more embodiments of this specification also provide a storage medium.

[0202] The storage medium provided in this embodiment is used to store computer executable instructions, and the computer executable instructions implement the following process when executed by a processor: Obtain key data of evidence collected by the certification body based on the evidence storage page for secret storage; Obtain data encryption information for secret evidence storage; The evidence data mapped by the data encryption information is encrypted by the encryption execution program corresponding to the encryption operation configured on the evidence storage page to obtain encrypted evidence data; According to the evidence storage instruction submitted by the certification body based on the evidence storage page, the key evidence data and the encrypted evidence data are uploaded to the server for evidence storage processing.

[0203] It should be noted that the embodiment of the storage medium in this specification and the embodiment of a method for storing evidence data in this specification are based on the same inventive concept, so the specific implementation of this embodiment can refer to the implementation of the corresponding method mentioned above, and the repeated parts will not be repeated.

[0204] One or more embodiments of another storage medium provided in this specification are as follows: Corresponding to the other method of storing evidence data described above, based on the same technical concept, one or more embodiments of this specification also provide a storage medium.

[0205] The storage medium provided in this embodiment is used to store computer executable instructions, and the computer executable instructions implement the following process when executed by a processor: In response to a storage page access request uploaded by a user terminal, returning a storage page for configuring encryption operations to the user terminal; Receiving the encrypted evidence data and evidence key data uploaded by the user terminal; the encrypted evidence data is obtained by encrypting the evidence data mapped to the data encryption information for secret evidence storage through the encryption execution program corresponding to the encryption operation; Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Based on the encrypted evidence data, the evidence key data and the on-chain evidence address returned by the blockchain node, a storage file of the secret evidence is generated.

[0206] It should be noted that the embodiment of the storage medium in this specification and the embodiment of another method for storing evidence data in this specification are based on the same inventive concept, so the specific implementation of this embodiment can refer to the implementation of the aforementioned corresponding method, and the repeated parts will not be repeated.

[0207] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referenced to each other. Each embodiment focuses on the differences from other embodiments. For example, the device embodiment, equipment embodiment and storage medium embodiment are similar to the method embodiment, so the description is relatively simple. To read the relevant content in the device embodiment, equipment embodiment and storage medium embodiment, please refer to the partial description of the method embodiment.

[0208] The above is a description of a specific embodiment of the present specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recorded in the claims can be performed in an order different from that in the embodiments and still achieve the desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or continuous order shown to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

[0209] In the 1930s, improvements to a technology could be clearly distinguished as hardware improvements (for example, improvements to circuit structures such as diodes, transistors, switches, etc.) or software improvements (improvements to method flows). However, with the development of technology, many of today's method flow improvements can be regarded as direct improvements to hardware circuit structures. Designers almost always obtain the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that an improvement in a method flow cannot be implemented using hardware entity modules. For example, a programmable logic device (PLD) (such as a field programmable gate array (FPGA)) is such an integrated circuit whose logical function is determined by the user's programming of the device. Designers can "integrate" a digital system on a PLD by programming it themselves, without having to ask chip manufacturers to design and produce dedicated integrated circuit chips. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly implemented by "logic compiler" software, which is similar to the software compiler used when developing and writing programs, and the original code before compilation must also be written in a specific programming language, which is called hardware description language (HDL). There is not only one kind of HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language), AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc. The most commonly used ones are VHDL (Very-High-Speed ​​Integrated Circuit Hardware Description Language) and Verilog. Those skilled in the art should also know that it is only necessary to program the method flow slightly in the above-mentioned hardware description languages ​​and program it into the integrated circuit, and then it is easy to obtain the hardware circuit that implements the logic method flow.

[0210] The controller may be implemented in any suitable manner, for example, the controller may take the form of a microprocessor or processor and a computer-readable medium storing a computer-readable program code (such as software or firmware) executable by the (micro)processor, a logic gate, a switch, an application-specific integrated circuit (ASIC), a programmable logic controller, and an embedded microcontroller. Examples of controllers include, but are not limited to, the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20, and Silicone Labs C8051F320. The memory controller may also be implemented as part of the control logic of the memory. It is also known to those skilled in the art that, in addition to implementing the controller in a purely computer-readable program code manner, the controller may be implemented in the form of a logic gate, a switch, an application-specific integrated circuit, a programmable logic controller, and an embedded microcontroller by logically programming the method steps. Therefore, such a controller may be considered as a hardware component, and the devices for implementing various functions included therein may also be considered as structures within the hardware component. Or even, the devices for implementing various functions may be considered as both software modules for implementing the method and structures within the hardware component.

[0211] The systems, devices, modules or units described in the above embodiments may be implemented by computer chips or entities, or by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or a combination of any of these devices.

[0212] For the convenience of description, the above device is described in terms of functions and is divided into various units and described separately. Of course, when implementing the embodiments of this specification, the functions of each unit can be implemented in the same or multiple software and / or hardware.

[0213] It should be understood by those skilled in the art that one or more embodiments of the present specification may be provided as a method, system or computer program product. Therefore, one or more embodiments of the present specification may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present specification may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0214] This specification is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of this specification. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0215] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0216] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 A step that specifies a function in one or more boxes.

[0217] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0218] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. Memory is an example of a computer-readable medium.

[0219] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined in this article, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0220] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0221] One or more embodiments of the present specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of the present specification may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.

[0222] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.

[0223] The above description is only an embodiment of this document and is not intended to limit this document. For those skilled in the art, this document may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this document should be included in the scope of the claims of this document.

Claims

1. A method for storing evidence data, applied to a user terminal, comprising: Obtain key evidence data collected based on the evidence storage page; Obtain data encryption information; By using the encryption execution program corresponding to the encryption operation configured on the evidence storage page, the evidence key data and the evidence data mapped by the data encryption information are locally encrypted to obtain encrypted evidence data; The encrypted evidence data is uploaded to the server for evidence storage processing.

2. According to the method for storing evidence data according to claim 1, the step of obtaining data encryption information comprises: Obtaining data collection instructions submitted based on the evidence storage page; Reading the data category carried in the data collection instruction, and determining a collection component for data collection according to the data category; The collection component configured in the user terminal is called to collect data, and an evidence data identifier obtained by the data collection is obtained.

3. According to the evidence data storage method of claim 1, if the evidence storage page is a subroutine evidence storage page, the encryption execution program corresponding to the encryption operation configured by the evidence storage page performs local encryption processing on the evidence key data and the evidence data mapped by the data encryption information to obtain encrypted evidence data, including: Read the operation loading strategy of the encryption operation implanted in the subroutine evidence page; Load the encrypted execution code in the terminal cache based on the operation loading policy of the encryption operation configured on the subprogram evidence storage page; The evidence key data and the data encryption information are input into the encryption execution code to encrypt the evidence key data and the evidence data.

4. According to the evidence data storage method of claim 3, the encrypted execution code is stored in the user terminal when the organization or user accesses the subroutine evidence storage page; The encrypted execution code is stored in the user terminal in the following manner: Uploading a storage page access request to the server according to a subprogram page access instruction submitted by the institution or the user; Receiving the subprogram evidence page and encrypted execution code returned by the server after performing evidence verification, and displaying the subprogram evidence page and code storage reminder; The encrypted execution code is stored in the user terminal according to a storage instruction submitted by the institution or the user based on the code storage reminder.

5. According to the method for storing evidence data as claimed in claim 1, the step of obtaining data encryption information comprises: Obtaining data selection instructions submitted based on the evidence storage page; Read and display a data list consisting of terminal storage data under the data category carried in the data selection instruction; In the case where it is detected that a target terminal is selected to store data in the data list, the target terminal storage data is used as evidence data and a storage address of the evidence data in the user terminal is obtained.

6. According to the evidence data storage method of claim 1, if the evidence storage page is a web page, the encryption execution program corresponding to the encryption operation configured on the evidence storage page performs local encryption processing on the evidence key data and the evidence data mapped by the data encryption information to obtain encrypted evidence data, including: Read the encrypted execution code embedded in the web evidence storage page; The encryption execution program is executed using the data encryption information as execution input to encrypt the mapped evidence data.

7. According to the method for storing evidence data of claim 5, the encryption execution code encrypts the mapped evidence data in the following manner: Determining mapped evidence data according to the storage address; The mapped evidence data is hashed to obtain a hash value of the mapped evidence data and the hash value is transmitted to the evidence storage page.

8. According to the method for storing evidence data as claimed in claim 1, the evidence storage process comprises: Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Receive the on-chain evidence address returned by the blockchain node, and generate an evidence file based on the evidence key data, the encrypted evidence data and the on-chain evidence address.

9. The method for storing evidence data according to claim 8, after the step of uploading the encrypted evidence data to the server for evidence storage is performed, further comprising: Receive and display the evidence list page returned by the server; The evidence list page is generated based on the evidence key data and the historical evidence key data of the historical secret evidence of the institution or user; If a detail access instruction submitted by the institution or the user based on the key data of the evidence in the evidence list page is detected, the evidence details in the evidence file are read and displayed.

10. The method for storing evidence data according to claim 1, after the step of uploading the encrypted evidence data to the server for evidence storage is performed, further comprising: Receiving the on-chain evidence storage address returned by the server after performing evidence storage processing; Read the data attributes of the evidence data, and generate evidence details according to the data attributes, the on-chain evidence storage address and the encrypted evidence data.

11. The method for storing evidence data according to claim 10, further comprising: Generate and display a stored evidence list page based on the evidence key data and the historical evidence key data returned by the server; If a detail access instruction submitted based on the key data of the evidence in the evidence list page is detected, the evidence details are displayed.

12. According to the method for storing evidence data as claimed in claim 1, the step of obtaining data encryption information comprises: Obtaining data encryption information based on the evidence data mapping of the commercial secrets collected on the evidence storage page; The data encryption information includes the evidence data identifier and / or storage address.

13. A method for storing evidence data, applied to a server, comprising: In response to a storage page access request uploaded by a user terminal, returning a storage page for configuring encryption operations to the user terminal; Receiving encrypted evidence data uploaded by the user terminal; The encrypted evidence data is obtained by encrypting the evidence key data and the evidence data mapped by the data encryption information through the encryption execution code corresponding to the encryption operation; Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Generate an evidence file based on the encrypted evidence data and the on-chain evidence address returned by the blockchain node.

14. According to the method for storing evidence data of claim 13, after the step of generating an evidence file based on the encrypted evidence data and the on-chain evidence address returned by the blockchain node is executed, it also includes: Read key data of historical evidence stored in secret by the institution; A stored evidence list page is generated based on the evidence key data and the historical evidence key data and is returned to the user terminal.

15. The method for storing evidence data according to claim 14, further comprising: receiving a request for accessing details uploaded by the user terminal; The detail access request is uploaded after detecting the detail access instruction submitted based on the evidence list page; Based on the detail access request, the evidence details contained in the evidence file are read and returned to the user terminal.

16. A device for storing evidence data, running on a user terminal, comprising: A data acquisition module, configured to acquire key evidence data collected based on the evidence storage page; An information acquisition module is configured to acquire data encryption information; An encryption processing module is configured to perform local encryption processing on the evidence key data and the evidence data mapped by the data encryption information through an encryption execution program corresponding to the encryption operation configured on the evidence storage page, so as to obtain encrypted evidence data; The data uploading module is configured to upload the encrypted evidence data to the server for evidence storage processing.

17. A device for storing evidence data, running on a server, comprising: A page return module, configured to respond to a storage page access request uploaded by a user terminal and return a storage page for configuring an encryption operation to the user terminal; A data receiving module, configured to receive encrypted evidence data uploaded by the user terminal; The encrypted evidence data is obtained by encrypting the evidence key data and the evidence data mapped by the data encryption information through the encryption execution code corresponding to the encryption operation; A data storage module, configured to send the encrypted evidence data to a blockchain node to store the encrypted evidence data in a blockchain; Generate an evidence file based on the encrypted evidence data and the on-chain evidence address returned by the blockchain node.

18. A user terminal, comprising: processor; and a memory configured to store computer executable instructions that, when executed, cause the processor to: Obtain key evidence data collected based on the evidence storage page; Obtain data encryption information; By using the encryption execution program corresponding to the encryption operation configured on the evidence storage page, the evidence key data and the evidence data mapped by the data encryption information are locally encrypted to obtain encrypted evidence data; The encrypted evidence data is uploaded to the server for evidence storage processing.

19. A server, comprising: processor; and a memory configured to store computer executable instructions that, when executed, cause the processor to: In response to a storage page access request uploaded by a user terminal, returning a storage page for configuring encryption operations to the user terminal; Receiving encrypted evidence data uploaded by the user terminal; The encrypted evidence data is obtained by encrypting the evidence key data and the evidence data mapped by the data encryption information through the encryption execution code corresponding to the encryption operation; Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Generate an evidence file based on the encrypted evidence data and the on-chain evidence address returned by the blockchain node.

20. A storage medium for storing computer executable instructions, wherein the computer executable instructions, when executed by a processor, implement the following process: Obtain key evidence data collected based on the evidence storage page; Obtain data encryption information; By using the encryption execution program corresponding to the encryption operation configured on the evidence storage page, the evidence key data and the evidence data mapped by the data encryption information are locally encrypted to obtain encrypted evidence data; The encrypted evidence data is uploaded to the server for evidence storage processing.

21. A storage medium for storing computer executable instructions, wherein the computer executable instructions, when executed by a processor, implement the following process: In response to a storage page access request uploaded by a user terminal, returning a storage page for configuring encryption operations to the user terminal; Receiving encrypted evidence data uploaded by the user terminal; The encrypted evidence data is obtained by encrypting the evidence key data and the evidence data mapped by the data encryption information through the encryption execution code corresponding to the encryption operation; Sending the encrypted evidence data to a blockchain node to store the encrypted evidence data in the blockchain; Generate an evidence file based on the encrypted evidence data and the on-chain evidence address returned by the blockchain node.

Images