Data tracing method based on block chain

Abstract

The invention discloses a data tracing method based on a block chain, and the method comprises the steps: 1, carrying out the remote service of a cloud storage platform of an enterprise system based on cloud data, and carrying out the access control of a user through a recording terminal of the cloud storage platform, and recording and storing the source information data of an operation behavior; step 2, the cloud storage platform performs hash operation on user identity information in the source information data by using a hash function, and establishes a data association model based on recorded and stored access control and description information data of an operation process; 3, storing the hash value of the cloud storage source information data in a block by using a block chain, and generating a block voucher for tracing the cloud storage source information data; 4, when a data traceability request is generated, triggering the cloud storage source information data based on the block chain to enter a verification traceability mechanism to trace the source information data; the method has the characteristics of improving the security of data accessed by the user and the validity of data tracing.

Description

Technical Field

[0001] The present invention relates to the technical field of data tracing, and in particular to a data tracing method based on blockchain. Background Art

[0002] Enterprise systems with multi-user access control and data sharing functions are remotely accessed and shared through cloud storage platforms with remote service features. Therefore, data on the cloud storage platform will be transmitted between different systems and network components. The data transmission includes transmission within a single data control center and between multiple data control centers. This causes cloud storage data to be damaged during the sharing process due to software and hardware incompatibility. In order to further ensure the recoverability of the data, a variety of data sharing and storage paths are constructed. This diversity of construction makes the cloud storage platform have security issues such as data theft, illegal sharing, and privacy leakage. Among these security issues, it is difficult to trace the source of illegal user behavior due to its sharing nature, which increases the difficulty of maintaining data security in the cloud storage platform. When data leakage occurs, it is difficult to determine which untrustworthy user's behavior caused the data leakage within a limited time period, as well as the impact of such data leakage, which makes the cloud storage platform with remote service characteristics lose physical control over diverse data. Therefore, it is necessary to design a blockchain-based data tracing method to improve the data security of user access and the effectiveness of data tracing. Summary of the invention

[0003] The purpose of the present invention is to provide a data tracing method based on blockchain to solve the problems raised in the above background technology.

[0004] In order to solve the above technical problems, the present invention provides the following technical solutions: a data tracing method based on blockchain, comprising the following steps: Step 1: The cloud storage platform of the enterprise system provides remote services based on cloud data, and uses the recording terminal of the cloud storage platform to record and store the source information data of user access control and operation behavior; Step 2: The cloud storage platform uses a hash function to perform a hash operation on the user identity information in the source information data, and establishes a data association model based on the access control and operation process description information data recorded and stored; Step 3: Use blockchain to store the hash value of the cloud storage source information data in the block, and generate a block certificate for tracing the cloud storage source information data; Step 4: When a data traceability request is generated, the blockchain-based cloud storage source information data is triggered to enter the verification and traceability mechanism to trace the source information data.

[0005] According to the above technical solution, the step of using the recording terminal of the cloud storage platform to record and store the source information data of the user's access control and operation behavior includes: The recording terminal of the cloud storage platform monitors the access control and operation behaviors performed by users on the cloud data in the remote server; Setting the source data record trigger mechanism for the user to perform operations on cloud data. The operations performed on cloud data include: adding, deleting, modifying, copying, moving and sharing cloud data by the user; When users perform the above operations based on cloud data, the recording mechanism will be triggered; The recording terminal of the cloud storage platform records the corresponding execution operations of the user end and converts them into cloud data source information data. The source information data in the cloud data records all operations performed by the current user on the cloud data, including the user identity information of the operation, the execution time data and the attributes of the cloud data; The first step is to encrypt all source information data recorded by the recording terminal of the cloud storage platform through a searchable encryption algorithm. Other terminal users without the decryption key cannot perform corresponding execution operations on the source information data.

[0006] According to the above technical solution, the step of using a hash function to perform a hash operation on the user identity information in the source information data includes: The user identity information data in the source information data includes the user's ID identity data and the real identity data for entering the cloud storage platform. The user identity information data in the cloud storage source information data is hashed by using a hash function. Then the cloud storage platform uses the key center to hash the user identity information through a secure hash algorithm to generate an identity unique identifier, and selects security parameters and system property sets to generate a master key pair for the cloud storage platform, and generates an attribute private key corresponding to the user identity information.

[0007] According to the above technical solution, the step of establishing a data association model based on the recorded and stored descriptive information data of access control and operation process includes: The key center obtains the user attribute set based on the generated user identity unique identifier using the data association model. When the user who has hashed the user identity information data joins the blockchain network as a node, the ECDSA signature algorithm is used to assign a public key and a private key to the user. The key center assigns an identification ID to each hashed user, and connects the user's identification ID with the descriptive information data generated by the user during the access control operation process using the established source information data association model. The Keccak algorithm is used simultaneously for further hash operations. The hash value is encrypted with the user's public key to form a user identity authentication credential. The user credential is mapped to the user ID. The key center writes this mapping relationship into the blockchain through the user identity information confidentiality contract. This mapping relationship is the user's identity authentication credential. The verification of user identity is based on the generation of the identity authentication credential, so that other shared terminal users in the data source information and participating users in the blockchain cannot tamper with the cloud storage data source information and the privacy information of a specific user.

[0008] According to the above technical solution, the step of using blockchain to store the hash value of cloud storage source information data in the block includes: The blockchain stores the hash value of the cloud storage source information data in the block. Each source information data in the cloud platform has a unique block certificate corresponding to it in the blockchain. The cloud storage source information data is verified through the block certificate to form a traceability mechanism for the corresponding source information data. After the source information data is published on the blockchain, the block containing the hash value of the cloud data source information data is added to the blockchain, and the hash value representing the cloud storage source information data is further stored in the leaf node of the block, and the flow source information data generated by the access control operation performed by each user is added to the blockchain network as a node. The traceability information is stored in each block of the blockchain, and the execution actions between the flow source information data nodes generated by the user's execution operation are used as the carrier for storage. Each node in the blockchain network will back up all the on-chain execution information; That is, the traceability information recorded on the blockchain is jointly maintained by each node. At the same time, each node in the blockchain network can obtain the traceability information of any source information data. Then the cloud storage platform stores the cloud storage source information data in the source information database, where the on-chain storage content specifically includes the execution hash value of each traceability information and the additional traceability information. The mapping relationship between the source information data ID and the execution hash value of the traceability information corresponding to the attached data ID is written on the chain through the traceability information verification mechanism. By setting the attribute set or access structure for the user's private key or ciphertext, it can only be correctly decrypted when the attribute set matches the access structure. The specific execution operation information, data transfer information and data attribute information of the source information data entity are also written in detail to the blockchain through the corresponding smart contract, completing the on-chain verification of the cloud storage source information data based on the block certificate of the source information data.

[0009] According to the above technical solution, the step of generating a data tracing request and tracing the source information data includes: When a data traceability request is generated, the source information data traceability verification terminal in the cloud storage platform sends a request to the blockchain to obtain the cloud storage source information data block certificate; The blockchain generates a block certificate of the cloud storage source information data by accessing the block resource manager and sends it to the cloud storage source information data verification and tracing terminal. The block certificate contains the hash value of the source information data and the tree certificate of the hash value used to verify the source information of the source information data. The tree certificate is the path from the leaf node storing the hash value of the cloud data source information data to the root node of the tree. The source information data tracing and verification terminal reconstructs the tree using the block certificate to verify the cloud storage source information data. When the source information data tracing verification terminal reconstructs the tree display successfully, the source information data in the source information database is true. By using the data tracing of the source information data row association operation, when the source information data tracing verification terminal reconstructs the tree display failed, it is judged that the source information data in the source information database is false, and further judged whether the cloud storage source information data in the source information database has been tampered with; Obtain the corresponding traceability information storage and flow hash through the identification ID corresponding to the traceability data, obtain the data identification ID to be traced, and obtain the blockchain execution hash value with the latest traceability information of this data through the data ID, and determine whether the execution hash value exists. If not, it means that there is no relevant traceability information for this data. If it exists, proceed to the next step, and obtain the specific information data of the execution operation from the blockchain according to the execution hash value, and obtain the traceability information of this data from the additional data. Whether this traceability information has execution operation data, the source information data tracing verification terminal uses the block certificate to verify the specific information of the source information data. If it exists, directly obtain the result set of the traceability information storage, and add the result set to the source information database in the data traceability request.

[0010] According to the above technical solution, the data tracing system based on blockchain includes: The source information data recording and storage module is used to record and store the source information data of user access control and operation behavior using the recording terminal of the cloud storage platform; The source information data encryption and chain verification module is used to encrypt the source information data and verify the block chain; The source information data verification and tracing module is used to perform block voucher verification and tracing on the source information data that generates the data tracing request.

[0011] Compared with the prior art, the beneficial effects achieved by the present invention are as follows: the present invention provides remote services based on cloud data through the cloud storage platform of the enterprise system, utilizes the recording terminal of the cloud storage platform to record and store the source information data of the user's access control and operation behavior, and uses a hash function to perform hash operations on the user identity information in the source information data, and establishes a data association model based on the recorded and stored descriptive information data of the access control and operation process, and further utilizes the blockchain to store the hash value of the cloud storage source information data in the block, and generates a block certificate for tracing the cloud storage source information data. Therefore, when a data tracing request is generated, the cloud storage source information data based on the blockchain is triggered to enter the verification and tracing mechanism to trace the source information data, ensuring the immutability of the cloud storage source information data while realizing the effective tracing of the source information data of the cloud data execution operation based on the sharing platform, realizing the accountability and evidence of the execution operation based on the cloud data, solving the problem that the user's illegal sharing behavior is difficult to track, and improving the security of the cloud storage platform with remote sharing services. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] The accompanying drawings are used to provide a further understanding of the present invention and constitute a part of the specification. Together with the embodiments of the present invention, they are used to explain the present invention and do not constitute a limitation of the present invention. In the accompanying drawings: Figure 1 A flowchart of a data tracing method based on blockchain provided in Example 1 of the present invention; Figure 2 A schematic diagram of the module composition of a blockchain-based data tracing system provided in Example 2 of the present invention. DETAILED DESCRIPTION

[0013] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0014] Embodiment 1: Figure 1 This is a flowchart of a data tracing method based on blockchain provided in Embodiment 1 of the present invention. This embodiment can be applied to the scenario of data tracing on a remote sharing platform. This method can be executed by a data tracing system based on blockchain provided in this embodiment. Figure 1 As shown, the method specifically comprises the following steps: Step 1: The cloud storage platform of the enterprise system provides remote services based on cloud data, and uses the recording terminal of the cloud storage platform to record and store the source information data of user access control and operation behavior; In the embodiment of the present invention, after the cloud storage platform of the enterprise system generates a remote service, the recording terminal of the cloud storage platform is used to record and store the source data, wherein the recorded source information data includes: source data and operation process data that generate the current data state, that is, read and write operation data including addition, deletion, modification, copying, and movement, description information data of access control and operation process, and status data of different data states of each data in the access control and operation behavior process; Exemplarily, the recording terminal of the cloud storage platform monitors the access control and operation behaviors of the user on the cloud data in the remote server, and sets a source data recording trigger mechanism for the user's operation on the cloud data. The operations performed on the cloud data include the addition, deletion, modification, copying and mobile sharing of the cloud data by the user. When the user performs the above-mentioned operation behaviors based on the cloud data, the recording mechanism will be triggered. The recording terminal of the cloud storage platform records the corresponding execution operations of the user and converts them into cloud data source information data. The source information data in the cloud data records all operations performed by the current user on the cloud data, including the user identity information of the operation, the time data of the execution and the attributes of the cloud data. The first step is to encrypt all the source information data recorded by the recording terminal of the cloud storage platform through a searchable encryption algorithm. Other terminal users without the decryption key cannot perform corresponding execution operations on the source information data.

[0015] Step 2: The cloud storage platform uses a hash function to perform a hash operation on the user identity information in the source information data, and establishes a data association model based on the access control and operation process description information data recorded and stored; In the embodiment of the present invention, the user identity information data in the source information data includes the user's ID identity data and the real identity data for entering the cloud storage platform. The user identity information data in the cloud storage source information data is hashed by using a hash function, and then the cloud storage platform uses a key center to hash the user identity information through a secure hash algorithm to generate an identity unique identifier, and selects security parameters and a system attribute set to generate a master key pair of the cloud storage platform, and generates an attribute private key corresponding to the user identity information; Exemplarily, the key center obtains the user attribute set using the data association model based on the generated user identity unique identifier, and when the user whose user identity information data is hashed is added to the blockchain network as a node, the public key and private key are assigned to the user using the ECDSA signature algorithm. The key center assigns an identification ID to each hashed user, and connects the identification ID of the user with the descriptive information data generated by the user during the access control operation process using the established source information data association model; Exemplarily, the Keccak algorithm is used for further hash operation, and the hash value is encrypted with the user's public key to form a user identity authentication credential. The user credential is mapped to the user ID, and the key center writes this mapping relationship into the blockchain through the user identity information confidentiality contract. This mapping relationship is the identity authentication credential of this user. The verification of the user identity is based on the generation of the identity authentication credential, so that other shared terminal users in the data source information and participating users in the blockchain cannot tamper with the cloud storage data source information and the privacy information of a specific user, thereby ensuring the privacy and authenticity of the cloud storage user identity; Step 3: Use blockchain to store the hash value of the cloud storage source information data in the block, and generate a block certificate for tracing the cloud storage source information data; In the embodiment of the present invention, the blockchain stores the hash value of the cloud storage source information data in the block. By using the blockchain, the source information data of the cloud storage data is reinforced to be tamper-proof. Each source information data in the cloud platform has a unique copyright block IP corresponding to it in the blockchain. The cloud storage source information data is verified by generating a block certificate related to the cloud storage source information data, forming a traceability mechanism for the corresponding source information data. Exemplarily, after the source information data is published on the blockchain, the block containing the hash value of the cloud data source information data is first added to the blockchain, and the hash value representing the cloud storage source information data is further stored in the leaf node of the block, and the flow source information data generated by the access control operation performed by each user is added to the blockchain network as a node. The traceability information is stored in each block of the blockchain, and is stored in a series of execution actions between nodes of the flow source information data generated by the user. Each node in the blockchain network will back up all the on-chain execution information, that is, the traceability information recorded on the blockchain is jointly maintained by each node, and each node in the blockchain network can obtain any The cloud storage platform then stores the cloud storage source information data in the source information database, where the on-chain storage content specifically includes the execution hash value of each traceability information and the additional traceability information. The mapping relationship between the source information data ID and the execution hash value of the traceability information corresponding to the attached data ID is written on the chain through the traceability information verification mechanism. By setting the attribute set or access structure for the user's private key or ciphertext, it can only be correctly decrypted when the attribute set matches the access structure. The specific execution operation information, data transfer information and data attribute information of the source information data entity are also written in detail to the blockchain through the corresponding smart contract, completing the on-chain verification of the cloud storage source information data based on the block certificate of the source information data.

[0016] Step 4: When a data traceability request is generated, the blockchain-based cloud storage source information data is triggered to enter the verification and traceability mechanism to trace the source information data.

[0017] In an embodiment of the present invention, when a data tracing request is generated, a source information data tracing verification terminal in a cloud storage platform sends a request to the blockchain to obtain a cloud storage source information data block certificate. The blockchain generates a block certificate of the cloud storage source information data by accessing a block resource manager, and sends it to the cloud storage source information data tracing verification terminal. The block certificate includes a hash value of the source information data and a tree certificate for verifying the hash value of the source information data source information. The tree certificate is a path from a leaf node storing the hash value of the cloud data source information data to a root node of the tree. The source information data tracing verification terminal reconstructs the tree using the block certificate to verify the cloud storage source information data. When the source information data tracing verification terminal reconstructs the tree successfully, the source information data in the source information database is true. By using the data tracing of the source information data row association operation, when the source information data tracing verification terminal fails to reconstruct the tree, the source information data in the source information database is judged to be false. Exemplarily, further determine whether the cloud storage source information data in the source information database has been tampered with, obtain the corresponding traceability information storage flow hash through the identification ID corresponding to the traceability data, take the data identification ID to be traced, and obtain the blockchain execution hash value of the latest traceability information of this data through the data ID, and determine whether the execution hash value exists. If not, it means that this data has no relevant traceability information. If it exists, proceed to the next step, obtain the specific information data of the execution operation from the blockchain according to the execution hash value, and obtain the traceability information of this data from the additional data. Whether this traceability information exists in the execution operation data, the source information data tracing verification terminal uses the block certificate to verify the specific information of the source information data. If it exists, directly obtain the result set of the traceability information storage, and add the result set to the source information database in the data traceability request.

[0018] Embodiment 2: Embodiment 2 of the present invention provides a data tracing system based on blockchain. Figure 2 A schematic diagram of the module composition of a blockchain-based data tracing system provided in Embodiment 2 of the present invention is shown in FIG. Figure 2 As shown, the system includes: The source information data recording and storage module is used to record and store the source information data of user access control and operation behavior using the recording terminal of the cloud storage platform; The source information data encryption and chain verification module is used to encrypt the source information data and verify the block chain; The source information data verification and tracing module is used to perform block voucher verification and tracing on the source information data that generates the data tracing request.

[0019] In some embodiments of the present invention, the source information data record storage module includes: A remote service generation module, which is used for the cloud storage platform of the enterprise system to generate remote services based on the platform cloud data; The cloud data execution operation monitoring module is used by the recording terminal of the cloud storage platform to monitor the access control and operation behaviors performed by users on the cloud data in the remote server; The recording trigger mechanism setting module is used to set the source data recording trigger mechanism for the user end to perform operations on cloud data.

[0020] In some embodiments of the present invention, the source information data encryption and chain verification module includes: Hash function module, used for the cloud storage platform to use hash function to perform hash operation on user identity information in source information data; A data association model building module is used to build a data association model based on the access control and operation process description information data stored in the record; A block storage hash value module is used to store the hash value of the cloud storage source information data in a block using the blockchain; The block credential generation module is used to generate block credentials related to cloud storage source information data.

[0021] In some embodiments of the present invention, the source information data verification and tracing module includes: Verification and tracing mechanism triggering module, used to trigger the verification and tracing mechanism of cloud storage source information data based on blockchain; The traceability verification terminal is used for the source information data traceability verification terminal to send a request to the blockchain to obtain the cloud storage source information data block certificate; The block credential tracing module is used by the blockchain to trace the source information data by accessing the block resource manager to generate the block credential of the cloud storage source information data.

[0022] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device.

[0023] Finally, it should be noted that the above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art can still modify the technical solutions described in the aforementioned embodiments or replace some of the technical features therein by equivalents. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A data tracing method based on blockchain, characterized by: The method comprises the following steps: Step 1: The cloud storage platform of the enterprise system provides remote services based on cloud data, and uses the recording terminal of the cloud storage platform to record and store the source information data of user access control and operation behavior; Step 2: The cloud storage platform uses a hash function to perform a hash operation on the user identity information in the source information data, and establishes a data association model based on the access control and operation process description information data recorded and stored; Step 3: Use blockchain to store the hash value of the cloud storage source information data in the block, and generate a block certificate for tracing the cloud storage source information data; Step 4: When a data traceability request is generated, the blockchain-based cloud storage source information data is triggered to enter the verification and traceability mechanism to trace the source information data.

2. A data tracing method based on blockchain according to claim 1, characterized in that: The step of using the recording terminal of the cloud storage platform to record and store the source information data of the user's access control and operation behavior includes: The recording terminal of the cloud storage platform monitors the access control and operation behaviors performed by users on the cloud data in the remote server; Setting the source data record trigger mechanism for the user to perform operations on cloud data. The operations performed on cloud data include: adding, deleting, modifying, copying, moving and sharing cloud data by the user; When users perform the above operations based on cloud data, the recording mechanism will be triggered; The recording terminal of the cloud storage platform records the corresponding execution operations of the user end and converts them into cloud data source information data. The source information data in the cloud data records all operations performed by the current user on the cloud data, including the user identity information of the operation, the execution time data and the attributes of the cloud data; The first step is to encrypt all source information data recorded by the recording terminal of the cloud storage platform through a searchable encryption algorithm. Other terminal users without the decryption key cannot perform corresponding execution operations on the source information data.

3. A data tracing method based on blockchain according to claim 2, characterized in that: The step of using a hash function to perform a hash operation on the user identity information in the source information data includes: The user identity information data in the source information data includes the user's ID identity data and the real identity data for entering the cloud storage platform. The user identity information data in the cloud storage source information data is hashed by using a hash function. Then the cloud storage platform uses the key center to hash the user identity information through a secure hash algorithm to generate an identity unique identifier, and selects security parameters and system property sets to generate a master key pair for the cloud storage platform, and generates an attribute private key corresponding to the user identity information.

4. A data tracing method based on blockchain according to claim 3, characterized in that: The step of establishing a data association model based on the recorded and stored access control and operation process description information data includes: The key center obtains the user attribute set based on the generated user identity unique identifier using the data association model. When the user who has hashed the user identity information data joins the blockchain network as a node, the ECDSA signature algorithm is used to assign a public key and a private key to the user. The key center assigns an identification ID to each hashed user, and connects the user's identification ID with the descriptive information data generated by the user during the access control operation process using the established source information data association model. The Keccak algorithm is used simultaneously for further hash operations. The hash value is encrypted with the user's public key to form a user identity authentication credential. The user credential is mapped to the user ID. The key center writes this mapping relationship into the blockchain through the user identity information confidentiality contract. This mapping relationship is the user's identity authentication credential. The verification of user identity is based on the generation of the identity authentication credential, so that other shared terminal users in the data source information and participating users in the blockchain cannot tamper with the cloud storage data source information and the privacy information of a specific user.

5. A blockchain-based data tracing method according to claim 4, characterized in that: The step of storing the hash value of the cloud storage source information data in the block using the blockchain includes: The blockchain stores the hash value of the cloud storage source information data in the block. Each source information data in the cloud platform has a unique block certificate corresponding to it in the blockchain. The cloud storage source information data is verified through the block certificate to form a traceability mechanism for the corresponding source information data. After the source information data is published on the blockchain, the block containing the hash value of the cloud data source information data is added to the blockchain, and the hash value representing the cloud storage source information data is further stored in the leaf node of the block, and the flow source information data generated by the access control operation performed by each user is added to the blockchain network as a node. The traceability information is stored in each block of the blockchain, and the execution actions between the flow source information data nodes generated by the user's execution operation are used as the carrier for storage. Each node in the blockchain network will back up all the on-chain execution information; That is, the traceability information recorded on the blockchain is jointly maintained by each node. At the same time, each node in the blockchain network can obtain the traceability information of any source information data. Then the cloud storage platform stores the cloud storage source information data in the source information database, where the on-chain storage content specifically includes the execution hash value of each traceability information and the additional traceability information. The mapping relationship between the source information data ID and the execution hash value of the traceability information corresponding to the attached data ID is written on the chain through the traceability information verification mechanism. By setting the attribute set or access structure for the user's private key or ciphertext, it can only be correctly decrypted when the attribute set matches the access structure. The specific execution operation information, data transfer information and data attribute information of the source information data entity are also written in detail to the blockchain through the corresponding smart contract, completing the on-chain verification of the cloud storage source information data based on the block certificate of the source information data.

6. A data tracing method based on blockchain according to claim 5, characterized in that: The step of generating a data tracing request and tracing the source information data includes: When a data traceability request is generated, the source information data traceability verification terminal in the cloud storage platform sends a request to the blockchain to obtain the cloud storage source information data block certificate; The blockchain generates a block certificate of the cloud storage source information data by accessing the block resource manager and sends it to the cloud storage source information data verification and tracing terminal. The block certificate contains the hash value of the source information data and the tree certificate of the hash value used to verify the source information of the source information data. The tree certificate is the path from the leaf node storing the hash value of the cloud data source information data to the root node of the tree. The source information data tracing and verification terminal reconstructs the tree using the block certificate to verify the cloud storage source information data. When the source information data tracing verification terminal reconstructs the tree display successfully, the source information data in the source information database is true. By using the data tracing of the source information data row association operation, when the source information data tracing verification terminal reconstructs the tree display failed, it is judged that the source information data in the source information database is false, and further judged whether the cloud storage source information data in the source information database has been tampered with; Obtain the corresponding traceability information storage and flow hash through the identification ID corresponding to the traceability data, obtain the data identification ID to be traced, and obtain the blockchain execution hash value with the latest traceability information of this data through the data ID, and determine whether the execution hash value exists. If not, it means that there is no relevant traceability information for this data. If it exists, proceed to the next step, and obtain the specific information data of the execution operation from the blockchain according to the execution hash value, and obtain the traceability information of this data from the additional data. Whether this traceability information has execution operation data, the source information data tracing verification terminal uses the block certificate to verify the specific information of the source information data. If it exists, directly obtain the result set of the traceability information storage, and add the result set to the source information database in the data traceability request.

7. The data tracing method based on blockchain according to claim 6 is applied to a data tracing system based on blockchain, characterized in that: The system comprises: The source information data recording and storage module is used to record and store the source information data of user access control and operation behavior using the recording terminal of the cloud storage platform; The source information data encryption and chain verification module is used to encrypt the source information data and verify the block chain; The source information data verification and tracing module is used to perform block voucher verification and tracing on the source information data that generates the data tracing request.

8. A blockchain-based data tracing system according to claim 7, characterized in that: The source information data record storage module includes: A remote service generation module, which is used for the cloud storage platform of the enterprise system to generate remote services based on the platform cloud data; The cloud data execution operation monitoring module is used by the recording terminal of the cloud storage platform to monitor the access control and operation behaviors performed by users on the cloud data in the remote server; The recording trigger mechanism setting module is used to set the source data recording trigger mechanism for the user end to perform operations on cloud data.

9. A blockchain-based data tracing system according to claim 8, characterized in that: The source information data encryption and chain verification module includes: Hash function module, used for the cloud storage platform to use hash function to perform hash operation on user identity information in source information data; A data association model building module is used to build a data association model based on the access control and operation process description information data stored in the record; A block storage hash value module is used to store the hash value of the cloud storage source information data in a block using the blockchain; The block credential generation module is used to generate block credentials related to cloud storage source information data.

10. A blockchain-based data tracing system according to claim 9, characterized in that: The source information data verification and tracing module includes: Verification and tracing mechanism triggering module, used to trigger the verification and tracing mechanism of cloud storage source information data based on blockchain; The traceability verification terminal is used for the source information data traceability verification terminal to send a request to the blockchain to obtain the cloud storage source information data block certificate; The block credential tracing module is used by the blockchain to trace the source information data by accessing the block resource manager to generate the block credential of the cloud storage source information data.

Images