Score data sharing processing method and device, server, medium and product

Abstract

The invention provides a score data sharing processing method and device, a server, a medium and a product, in one embodiment, the sharing processing method is applied to an authorization management node of a block chain network, and comprises the following steps: receiving permission parameters of one or more mechanism users participating in sharing sent by any student user side through a score management system; receiving a score access request sent by the institution user side, wherein the score access request is generated by any institution user side for any target student; querying authority parameters of the institution user side according to the score access request so as to judge whether the institution user side has access authority or not; if it is confirmed that the institution user side has the access authority, generating an authorization parameter and a decryption parameter; sending the decryption parameter to an institution user side; and sending the authorization parameter to the miner node. According to the method, a block chain technology and a proxy re-encryption technology are combined, fine-grained access control of score data is provided, and privacy security protection and flexible data sharing can be realized at the same time.

Description

Technical Field

[0001] The present application belongs to the field of blockchain technology, and specifically, relates to a method, device, server, medium and product for sharing and processing performance data. Background Art

[0002] In the grade management system, grade data is stored in a centralized database. Students or other institutional users can access the centralized database to query grade data. Therefore, it is of great significance to ensure the data security of students' grade data during the grade data query process.

[0003] At present, in order to ensure the security of student users' performance data, the related technology mainly uses traditional encryption technology to encrypt the performance data and then store it. Other users can decrypt the encrypted data if they have the permission to obtain the performance data.

[0004] However, when the grade data is encrypted and then stored using encryption technology, when different requesting users apply for grade data, the data holding user needs to obtain the other party's public key each time to encrypt the shared data, causing the data holding user to be in the process of encrypting the grade data for a long time, which makes it difficult to achieve an effective balance between the sharing process and security of the grade data. Summary of the invention

[0005] In view of the above problems, the present application aims to provide a method, device, server, medium and product for sharing and processing performance data, so as to solve the problem in the prior art that it is difficult to achieve an effective balance between data sharing and privacy protection.

[0006] In a first aspect, the present application provides a method for sharing and processing performance data, which is applied to an authorization management node of a blockchain network, and the method comprises:

[0007] Receiving the permission parameters of one or more institutional users participating in the sharing sent by any student user end through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by encrypting the grade data of each student by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network;

[0008] Receiving a score access request sent by an institution user terminal, wherein the score access request is generated by any institution user terminal for any target student;

[0009] querying the authority parameters of the institution user terminal according to the score access request to determine whether the institution user terminal has access authority;

[0010] If it is confirmed that the institution user terminal has access rights, authorization parameters and decryption parameters are generated;

[0011] Sending the decryption parameters to the institution's user terminal;

[0012] The authorization parameter is sent to the miner node, so that the miner node generates a proxy re-encryption key according to the authorization parameter and the proxy re-encryption key parameter, the miner node sends the proxy re-encryption key to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user end, so that the institution user end uses the pre-generated private key of the second public-private key pair and the decryption parameter to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameter is generated for each institution user after any student user end sends the permission parameters of one or more institution users participating in sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameter is sent by any student user end to the miner node of the blockchain network.

[0013] In a possible embodiment, the receiving of permission parameters of one or more institution users participating in sharing sent by any student user terminal through the score management system includes:

[0014] Receive a sharing permission list sent by a student user terminal through the grade management system, wherein the sharing permission list is generated by any student user terminal for one or more institutional users through the grade management system, wherein the sharing permission list includes permission parameters corresponding to each institutional user.

[0015] In a possible embodiment, after confirming that the institution user terminal has access rights, generating authorization parameters and decryption parameters includes:

[0016] After confirming that the institutional user terminal has access rights, authorization parameters and decryption parameters for the institutional user terminal are generated based on the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair.

[0017] In a possible embodiment, after confirming that the institution user terminal has access rights, before generating authorization parameters and decryption parameters for the institution user terminal according to the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair, the method further includes:

[0018] A third public key pair sent by a key generation center is received, wherein the third public-private key pair is generated by the key generation center, and the third public-private key pair includes a public key and a private key.

[0019] In a possible embodiment, after receiving the permission parameters of one or more institution users participating in sharing sent by any student user terminal through the score management system, the method further includes:

[0020] Receiving modified permission parameters sent by any student user terminal, wherein the modified permission parameters are obtained by any student user terminal modifying the permission parameters of one or more institution users participating in the sharing through the grade management system;

[0021] The modified permission parameters are used to replace the stored permission parameters.

[0022] In a possible embodiment, the performance management system, the blockchain network and the database are deployed on a cloud server.

[0023] In a second aspect, the present application also provides a method for sharing and processing score data, which is applied to a proxy server, and the method comprises:

[0024] Receiving each first encrypted score data sent by the teacher user end through the database, wherein the first encrypted score data is obtained by the teacher user end encrypting the score data of each student through the score management system using the public key of the pre-generated first public-private key pair;

[0025] Receive a proxy re-encryption key sent by a miner node, wherein the proxy re-encryption key is generated by the miner node using authorization parameters and proxy re-encryption key parameters; the authorization parameters are generated by any institution user terminal for a grade access request for any target student, the institution user terminal sends the grade access request to the authorization management node, the authorization management node queries the authority parameters of the institution user terminal according to the grade access request to determine whether it has access rights, and if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters, wherein the authorization parameters are sent by the authorization management node to the miner node, and the decryption parameters are sent by the authorization management node to the institution user terminal; the proxy re-encryption key parameters are generated for each institution user after any student user terminal sends the authority parameters of one or more institution users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network;

[0026] After re-encrypting the first encrypted score data of the target student using the proxy re-encryption key, the second encrypted score data of the target student is obtained;

[0027] The second encrypted score data is sent to the institution user terminal, so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0028] In a possible embodiment, the receiving of each first encrypted score data sent by the teacher client through the database includes:

[0029] Receive each first encrypted grade data sent by the database, wherein the first encrypted data is obtained by the teacher user end sending it to the database through the grade management system.

[0030] In a third aspect, the present application also provides a method for sharing and processing performance data, which is applied to a miner node of a blockchain network, and the method includes:

[0031] Receive a proxy re-encryption key parameter sent by any student client, wherein the proxy re-encryption key parameter is generated for each institutional user after any student client sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, wherein the first encrypted grade data is obtained by the instructor client encrypting the grade data of each student through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network;

[0032] Receiving authorization parameters sent by an authorization management node of a blockchain network, wherein the authorization parameters are generated for any institution user terminal to generate a score access request for any target student, the institution user terminal sends the score access request to the authorization management node, and the authorization management node queries the authority parameters of the institution user terminal according to the score access request to determine whether it has access rights; if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters; wherein the decryption parameters are sent by the authorization management node to the institution user terminal;

[0033] generating a proxy re-encryption key using the authorization parameter and the proxy re-encryption key parameter;

[0034] The proxy re-encryption key is sent to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; the second encrypted score data is sent to the institution user terminal, so that the institution user terminal uses the private key of the pre-generated second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0035] In a possible embodiment, the method further includes:

[0036] Receiving a first hash value sent by a teacher client, wherein the first hash value is obtained by performing a hash operation on the grade data by the teacher client;

[0037] The first hash value is forwarded to the institutional user end, so that the institutional user end uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data. After obtaining the score data of the target student, a hash operation is performed on the decrypted score data to obtain a second hash value. The institutional user end compares the first hash value with the second hash value to obtain a verification result.

[0038] In a fourth aspect, the present application also provides a performance data sharing processing device, which is applied to an authorization management node of a blockchain network, including:

[0039] The permission parameter receiving module is used to receive the permission parameters of one or more institutional users participating in the sharing sent by any student user end through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair to encrypt the grade data of each student, and upload each first encrypted grade data to the proxy server of the blockchain network;

[0040] A score access request receiving module, used to receive a score access request sent by an institution user terminal, wherein the score access request is generated by any institution user terminal for any target student;

[0041] An access authority determination module, used to query the authority parameters of the institution user terminal according to the score access request to determine whether it has access authority;

[0042] A parameter generation module, used to generate authorization parameters and decryption parameters after confirming that the institution user terminal has access rights;

[0043] A decryption parameter sending module, used for sending the decryption parameters to the institution user terminal;

[0044] An authorization parameter sending module is used to send the authorization parameter to a miner node so that the miner node generates a proxy re-encryption key according to the authorization parameter and the proxy re-encryption key parameter. The miner node sends the proxy re-encryption key to a proxy server so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user terminal so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameter to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameter is generated for each institution user after any student user terminal sends the permission parameters of one or more institution users participating in sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameter is sent by any student user terminal to the miner node of the blockchain network.

[0045] In a fifth aspect, the present application further provides a performance data sharing processing device, which is applied to a proxy server and includes:

[0046] The encrypted grade data receiving module is used to receive each first encrypted grade data sent by the teacher user terminal through the database, wherein the first encrypted grade data is obtained by the teacher user terminal encrypting the grade data of each student through the grade management system using the public key of the pre-generated first public-private key pair;

[0047] A proxy re-encryption key receiving module is used to receive a proxy re-encryption key sent by a miner node, wherein the proxy re-encryption key is generated by the miner node using authorization parameters and proxy re-encryption key parameters; the authorization parameters are generated by any institution user terminal for a grade access request for any target student, the institution user terminal sends the grade access request to the authorization management node, the authorization management node queries the authority parameters of the institution user terminal according to the grade access request to determine whether it has access rights, and if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters, wherein the authorization parameters are sent by the authorization management node to the miner node, and the decryption parameters are sent by the authorization management node to the institution user terminal; the proxy re-encryption key parameters are generated for each institution user after any student user terminal sends the authority parameters of one or more institution users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network;

[0048] A re-encryption module, used to re-encrypt the first encrypted score data of the target student using the proxy re-encryption key to obtain the second encrypted score data of the target student;

[0049] The encrypted score data sending module is used to send the second encrypted score data to the institutional user terminal, so that the institutional user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0050] In a sixth aspect, the present application also provides a performance data sharing processing device, which is applied to a miner node of a blockchain network, including:

[0051] The proxy re-encryption key parameter receiving module is used to receive the proxy re-encryption key parameter sent by any student user end, wherein the proxy re-encryption key parameter is generated for each institutional user after the student user end sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, wherein the first encrypted grade data is obtained by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair to encrypt the grade data of each student, and upload each first encrypted grade data to the proxy server of the blockchain network;

[0052] An authorization parameter receiving module is used to receive authorization parameters sent by an authorization management node of a blockchain network, wherein the authorization parameters are generated by any institution user terminal for a score access request for any target student, the institution user terminal sends the score access request to the authorization management node, and the authorization management node queries the authority parameters of the institution user terminal according to the score access request to determine whether it has access rights; if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters; wherein the decryption parameters are sent by the authorization management node to the institution user terminal;

[0053] a proxy re-encryption key generation module, configured to generate a proxy re-encryption key using the authorization parameter and the proxy re-encryption key parameter;

[0054] The proxy re-encryption key sending module is used to send the proxy re-encryption key to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; and send the second encrypted score data to the institution user terminal, so that the institution user terminal uses the private key of the pre-generated second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0055] In a seventh aspect, the present application further provides an authorization management node, applied in a blockchain network, comprising: at least one processor, and a memory communicatively connected to the at least one processor;

[0056] The memory stores computer-executable instructions;

[0057] The processor executes the computer-executable instructions stored in the memory to implement the method in any possible implementation of the first aspect above.

[0058] In an eighth aspect, the present application further provides a proxy server, comprising: at least one processor, and a memory communicatively connected to the at least one processor;

[0059] The memory stores computer-executable instructions;

[0060] The processor executes the computer-executable instructions stored in the memory to implement the method in any possible implementation of the second aspect above.

[0061] In a ninth aspect, the present application further provides a miner node, applied in a blockchain network, comprising: at least one processor, and a memory communicatively connected to the at least one processor;

[0062] The memory stores computer-executable instructions;

[0063] The processor executes the computer-executable instructions stored in the memory to implement the method in any possible implementation of the third aspect above.

[0064] In the tenth aspect, the present application also provides a computer-readable storage medium, which stores computer execution instructions. When the computer execution instructions are executed by a processor, they are used to implement the method in any possible implementation of the first aspect, the second aspect or the third aspect.

[0065] In the eleventh aspect, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the method in any possible implementation of the first aspect, the second aspect or the third aspect.

[0066] The present application provides a method, device, server, medium and product for sharing and processing performance data. The method for sharing and processing performance data of the present application mainly includes a performance management system, an authorization management node, a miner node, a proxy server and an institutional user terminal. The performance management system encrypts the performance data to obtain first encrypted performance data and sends it to the proxy server, sends the permission parameters to the authorization management node, and sends the proxy re-encryption key parameters to the miner node; the authorization management node receives the performance access request sent by the institutional user terminal, generates authorization parameters and decryption parameters when confirming that it has access rights, and sends the authorization parameters to the miner node, and sends the decryption parameters to the institutional user terminal; the miner node generates a proxy re-encryption key according to the proxy re-encryption key parameters and the authorization parameters and sends it to the proxy server; the proxy server re-encrypts the first encrypted performance data using the proxy re-encryption key to obtain second encrypted performance data and sends it to the institutional user terminal; the institutional user terminal decrypts the second encrypted performance data using the decryption parameters to obtain the performance data.

[0067] This application places the performance management system, authorization management nodes and miner nodes into the blockchain network, which can ensure the immutability and integrity of shared data transmission, and at the same time uses proxy re-encryption to realize data sharing between the performance management system and institutional users. Since the proxy re-encryption technology only needs to encrypt the initial ciphertext through the public key of the performance management system, and then use the proxy re-encryption key for re-encryption, the institutional user end can use the private key to decrypt and obtain the performance data, thus reducing the encryption burden of shared data in the performance management system, while protecting the shared privacy of performance data, the flexibility of data sharing is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0068] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0069] Figure 1 An application scenario diagram of the method for sharing and processing the score data provided in this application;

[0070] Figure 2 A flowchart of a method for sharing and processing score data provided in the first embodiment of the present application;

[0071] Figure 3 A flowchart of a method for sharing and processing score data provided in the second embodiment of the present application;

[0072] Figure 4 A flowchart of a method for sharing and processing score data provided in the third embodiment of the present application;

[0073] Figure 5 A flowchart of a method for sharing and processing performance data provided in the fourth embodiment of the present application;

[0074] Figure 6 An interactive signaling diagram of a method for sharing and processing performance data provided in a fifth embodiment of the present application;

[0075] Figure 7 A schematic diagram of a structure of a performance data sharing processing device provided in a sixth embodiment of the present application;

[0076] Figure 8 A schematic diagram of a structure of a performance data sharing processing device provided in the seventh embodiment of the present application;

[0077] Fig. 9 A schematic diagram of a structure of a performance data sharing processing device provided in the eighth embodiment of the present application;

[0078] Fig.10 A hardware structure diagram of an authorization management node provided in the ninth embodiment of the present application.

[0079] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments.

[0080] Description of reference numerals:

[0081] 10-score management system; 101-teacher user terminal; 102-student user terminal; 103-database; 20-miner node; 30-authorization management node; 40-proxy server; 50-key generation center; 60-institutional user terminal;

[0082] 71-authority parameter receiving module; 72-score access request receiving module; 73-access right determination module; 74-parameter generation module; 75-decryption parameter sending module; 76-authorization parameter sending module;

[0083] 81-encrypted score data receiving module; 82-proxy re-encryption key receiving module; 83-re-encryption module; 84-encrypted score data sending module;

[0084] 91-proxy re-encryption key parameter receiving module; 92-authorization parameter receiving module; 93-proxy re-encryption key generating module; 94-proxy re-encryption key sending module; 95-hash value receiving module; 96-hash value sending module;

[0085] 1001 - processor; 1002 - memory; 1003 - communication interface; 1004 - communication bus. DETAILED DESCRIPTION

[0086] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0087] In the embodiments of the present application, words such as "first" and "second" are used to distinguish the same or similar items with substantially the same functions and effects. Those skilled in the art can understand that words such as "first" and "second" do not limit the quantity and execution order, and words such as "first" and "second" do not necessarily limit the difference.

[0088] It should be noted that in the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a concrete way. In the embodiments of the present application, "at least one" refers to one or more, and "more than one" refers to two or more.

[0089] It should be noted that the “at…” in the embodiments of the present application may be the instant when a certain situation occurs, or may be a period of time after the occurrence of a certain situation, and the embodiments of the present application do not specifically limit this.

[0090] In order to clearly describe the technical solutions of the embodiments of the present application, some terms and technologies involved in the embodiments of the present application are briefly introduced below:

[0091] Proxy re-encryption: It is to entrust a trusted third party or a semi-honest agent to convert the ciphertext encrypted by its own public key (which can only be decrypted by its own private key) into ciphertext that can be decrypted by the other party's private key to achieve data sharing.

[0092] Key Generation Center: Also known as KGC, the full name is Key Generation Center, which is a key management center that is mainly responsible for generating, storing and managing keys to ensure information security and data privacy. KGC uses identity-based key generation technology to ensure that there are different keys in each session, thereby ensuring the security of data transmission.

[0093] In the grade management system, grade data is stored in a centralized database. Students or other institutional users can access the centralized database to query grade data. Therefore, it is of great significance to ensure the security of students' grade data during the grade data query process.

[0094] At present, in order to ensure the security of student users' performance data, the related technology mainly uses traditional encryption technology to encrypt the performance data and then store it. Other users can decrypt the encrypted data if they have the permission to obtain the performance data.

[0095] For example, when using asymmetric encryption, the data holder user A uses the shared public key of user B to encrypt the data, and then sends the ciphertext to user B. User B uses his private key to decrypt the ciphertext to obtain the plaintext of the score.

[0096] However, although the method of encrypting the grade data and then storing it through encryption technology ensures the security of data transmission, when multiple different sharing request users apply for grade data, the data holding user A needs to obtain the other party's public key each time to encrypt the grade data, resulting in the data holding user always being in the process of encrypting the grade data with different public keys. This puts a lot of computing pressure on the data holding user, and it is difficult to achieve an effective balance between the sharing process and security of the grade data.

[0097] In order to solve the above problems, the embodiments of the present application provide a method, device, server, medium and product for sharing and processing performance data. In the method for sharing and processing performance data, the performance management system, the authorization management node and the miner node are all placed in the blockchain network, which can ensure the immutability and integrity of the shared data transmission, and at the same time set the permission parameters for the institutional users participating in the sharing, add the institutional users who meet the access rights to the blockchain, and use proxy re-encryption to realize the data sharing between the performance management system and the institutional users. Since the proxy re-encryption technology only needs to encrypt the initial ciphertext through the public key of one end of the performance management system without using the public key of the institutional user, and then re-encrypt using the proxy re-encryption key, the institutional user can use his own private key to decrypt and obtain the performance data, thereby reducing the encryption burden of the performance management system to share data, and improving the flexibility of data sharing while protecting the shared privacy of the performance data.

[0098] Figure 1 This is an application scenario diagram of the method for sharing and processing performance data provided in this application. The scenario includes: a performance management system 10; a miner node 20; an authorization management node 30; a proxy server 40; a key generation center 50 and an institutional user terminal 60 requesting data sharing.

[0099] The grade management system 10 holds grade data, including: teacher user terminal 101, student user terminal 102 and database 103, wherein the grade management system 10, miner node 20, authorization management node 30, proxy server 40 and key generation center 50 are in the same blockchain network. When the institutional user terminal 60 has access rights and shares data, it can join the blockchain network.

[0100] The performance management system 10 and the institution user terminal 60 are clients installed on electronic devices, which may be personal computers, mobile phones, tablet computers, notebooks, e-book readers, vehicle-mounted terminals, etc. The client may be software (e.g., APP, browser, etc.), or a web page, a small program, etc. The target object may share performance data through the above-mentioned client on the electronic device.

[0101] The miner node 20, the authorization management node 30, the proxy server 40, the key generation center 50 and the database 103 can be independent physical servers, or they can be edge devices in the field of cloud computing, or they can be cloud servers that provide basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud storage, cloud functions, network services, cloud communications, middleware services, domain name services, security services, content delivery networks (CDN), as well as big data and artificial intelligence platforms.

[0102] Optionally, the performance management system 10, blockchain network and database 103 can be deployed on a cloud server, which can facilitate dynamic adjustment of resource allocation, make expansion or reduction more flexible, and reduce investment costs and operation and maintenance costs.

[0103] There is no limit to the number of teacher user terminals 101, student user terminals 102, and institution user terminals 60. However, in order to simplify the technical solution of the present application, only one teacher user terminal 101, multiple student user terminals 102, and one institution user terminal 60 may be considered.

[0104] The following describes the warehouse transfer method provided by the exemplary embodiment of the present application in combination with the above-mentioned application scenarios and with reference to the accompanying drawings. It should be noted that the above-mentioned application scenarios are only shown to facilitate understanding of the spirit and principles of the present application, and the implementation methods of the present application are not subject to any limitations in this regard.

[0105] Figure 2 This is a flow chart of a method for sharing and processing performance data provided in the first embodiment of the present application. Figure 1 The authorization management node of the blockchain network shown may include the following steps:

[0106] S201: Receive the permission parameters of one or more authorized management node users of participating institutions sent by any student user terminal through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by the teacher user terminal through the grade management system using the public key of the pre-generated first public-private key pair to encrypt the grade data of each student, and upload the first encrypted grade data to the proxy server of the blockchain network.

[0107] In the embodiment of the present application, the teacher user enters all the grade data of the student user in the grade management system through the teacher user terminal. In order to limit which institutional users have the authority to obtain the grade data of the target student, each user can send a permission parameter on the student user terminal, which is used to limit one or more institutional users to share their grade data. If the permission parameter is not set, it can be assumed that any institutional user can apply to share their grade data.

[0108] In the embodiment of the present application, the authorization management node receives the permission parameters set and sent by any student on the student user terminal, and the permission parameters are used to verify whether the institutional user has the permission to access the grade data. If the authorization management node does not receive the permission parameters sent by a student, it can also be assumed that the student allows any institutional user to apply to share his or her grade data.

[0109] In a specific embodiment, receiving permission parameters of one or more institutional user authorization management node users participating in sharing sent by any student user terminal through the grade management system specifically includes: receiving a sharing permission list sent by the student user terminal through the grade management system, wherein the sharing permission list is generated by any student user terminal through the grade management system for one or more institutional users, wherein the sharing permission list includes permission parameters corresponding to each institutional user.

[0110] In this embodiment, each student can generate a sharing permission list of his / her own on the student user terminal, and the sharing permission list includes permission parameters of different institutional users, such as the identity of the institutional users, the access scope of grade data, etc.

[0111] For example, when students set up a shared permission list on the student user side, they first select institutional users who can provide data access permissions, such as selecting an institutional user ID or name. Multiple institutional users can be selected for unified settings, or they can set them separately for each institutional user, and then select the access scope of the grade data corresponding to the institutional user, such as grades for all subjects or professional subjects in college or graduate school. Finally, after confirmation, a shared permission list containing permission parameters can be generated.

[0112] It should be noted that the permission parameters in the sharing permission list are not limited to the above-listed contents. For example, the time range of the access permission can also be set, such as opening the access permission within three months or one year from the current start.

[0113] By receiving a shared permission list containing detailed permission parameters, the authorization management node facilitates fine-grained control over the scope of institutional users' access to grade data, so that different user institutions can have different scopes or levels of access permissions.

[0114] S202: Receive a score access request sent by an institution user terminal, where the score access request is generated by any institution user terminal for any target student.

[0115] In the embodiment of the present application, after the authorization management node has the permission parameters (including default settings) of each student, the institutional user B can apply to obtain the score data of any target student. When the institutional user B needs to obtain the score data of the target student A, it can generate a score access request. In the score access request, it includes the identity of the institutional user B (such as the institutional user ID, name, etc.), the identity of the target student A (such as the student ID, name, etc.) and the specified score data to be obtained (such as all subject scores of a certain student in a certain year).

[0116] S203: querying the authority parameters of the institution user terminal according to the score access request to determine whether the user has the access authority.

[0117] In an embodiment of the present application, after receiving a score access request, the authorization management node first obtains the stored permission parameters of the target student A based on the identity of the target student in the score access request, and then searches the corresponding permission parameters to determine whether the target student A has provided the institution user B with permission to share his or her score data.

[0118] S204: After confirming that the institution user terminal has access rights, generate authorization parameters and decryption parameters.

[0119] In an embodiment of the present application, if the authorization management node determines that institutional user B has the authority to access the target student A's score data, it generates authorization parameters and decryption parameters according to a certain algorithm, wherein the authorization parameters and decryption parameters are exactly the same values, but differ in purpose.

[0120] In a specific embodiment, if it is confirmed that the institutional user terminal has access rights, authorization parameters and decryption parameters are generated, specifically including: when it is confirmed that the institutional user terminal has access rights, authorization parameters and decryption parameters for the institutional user terminal are generated based on the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair.

[0121] The third public key pair is obtained in the following manner. Specifically, after confirming that the institutional user terminal has access rights, before generating authorization parameters and decryption parameters for the institutional user terminal based on the public key of the second public-private key pair and the pre-generated private key of the third public-private key pair, it also specifically includes: receiving the third public key pair sent by the key generation center, wherein the third public-private key pair is generated by the key generation center, and the third public-private key pair includes a public key and a private key.

[0122] That is, before the authorization management node has a session with other terminals, it needs to apply for a third public key pair from the key generation center. The key generation center generates a corresponding third public key pair according to the identity of the requester and sends it to the authorization management node.

[0123] The authorization parameters and decryption parameters generated by the public key of the second public-private key pair and the private key of the third public-private key pair can ensure security during the data sharing process.

[0124] S205: Send the decryption parameters to the institution user terminal.

[0125] After the decryption parameters are generated, they can be sent to the institution user B in advance. The decryption parameters are used by the institution user B to decrypt and obtain the score data of the target student A.

[0126] S206: Send the authorization parameters to the miner node so that the miner node generates a proxy re-encryption key according to the authorization parameters and the proxy re-encryption key parameters, the miner node sends the proxy re-encryption key to the proxy server so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user terminal so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameters are generated for each institution user after any student user terminal sends the permission parameters of one or more institution users participating in the sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network to store.

[0127] In an embodiment of the present application, after the authorization parameters are generated, they need to be sent to the miner node. The miner node uses the authorization parameters and the proxy re-encryption key parameters to generate a proxy re-encryption key, and then sends the proxy re-encryption key to the proxy server. The proxy server uses the proxy re-encryption key to re-encrypt the first encrypted data to obtain the second encrypted data. The proxy server then sends the second encrypted data to the institutional user B, so that it uses the decryption parameters to decrypt the second encrypted data to obtain the target student A's score data, thereby completing the process of sharing the target student A's score data to the institutional user B.

[0128] In summary, in the above embodiment, the authorization management node first receives the permission parameters sent by each student user terminal. When receiving a grade access request, it can query the permission parameters of the corresponding target student to see whether the institutional user has the authority to access the grade data. On the basis of determining that the institutional user has access to the grade data of the target student, it will generate corresponding authorization parameters and decryption parameters, thereby re-encrypting and decrypting the grade data, which is conducive to safely sharing the grade data from the target user to the institutional user. Therefore, this embodiment can facilitate students to perform fine-grained access control on grade data, and realize privacy protection and data sharing.

[0129] Figure 3 A flowchart of a method for sharing and processing score data provided in the second embodiment of the present application. Figure 2 Based on the embodiment shown in FIG. 1 , the sharing and processing method of the score data is improved. Figure 3 As shown, a method for sharing and processing performance data, applied to an authorization management node of a blockchain network, may include the following steps:

[0130] S301: Receive the permission parameters of one or more institutional users participating in the sharing sent by any student user terminal through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by encrypting the grade data of each student by the teacher user terminal through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network.

[0131] This step may refer to the contents described in the above step S201 and will not be repeated here.

[0132] S302: receiving modified permission parameters sent by any student user terminal, wherein the modified permission parameters are obtained by any student user terminal modifying the permission parameters of one or more institutional users participating in the sharing through the grade management system.

[0133] In an embodiment of the present application, after the authorization management node receives the authority parameters sent by the student user terminal through the grade management system, if the student needs to modify the authority parameters, the student user terminal can reset the modified authority parameters and then send the modified authority parameters to the authorization management node again.

[0134] It is clear that after the authorization management node receives the first permission parameters, the student can modify the previous permission parameters through the student user terminal at any time, or modify them again based on the modified permission parameters, and then send the latest modified permission parameters to the authorization management node.

[0135] S303: Using the modified permission parameters to replace the stored permission parameters.

[0136] In the embodiment of the present application, after receiving the latest modified permission parameters, the authorization management node can replace the previously stored permission parameters, or only modify the modified content part.

[0137] The specific contents of the following steps S304 to S308 can refer to the contents described in the above steps S202 to S206, which will not be repeated here.

[0138] S304: Receive a score access request sent by an institution user terminal, where the score access request is generated by any institution user terminal for any target student.

[0139] S305: Query the authority parameters of the institution user terminal according to the score access request to determine whether it has access rights.

[0140] It should be noted that after receiving the score access request, if the previous permission parameters have been modified, the authorization management node needs to query the latest permission parameters when querying the corresponding permission parameters.

[0141] For example, if institution user B previously had the permission to obtain student user A's grade data, student user A can cancel institution user B's permission to obtain his own grade data after modifying the permission parameters. At this time, when the authorization management node queries the corresponding permission parameters, it can be found that institution user B does not have the permission to access student user A's grade data at this time.

[0142] S306: If it is confirmed that the institution user terminal has access rights, generate authorization parameters and decryption parameters;

[0143] S307: Send the decryption parameters to the institution user terminal;

[0144] S308: Send the authorization parameters to the miner node so that the miner node generates a proxy re-encryption key according to the authorization parameters and the proxy re-encryption key parameters, the miner node sends the proxy re-encryption key to the proxy server so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user terminal so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameters are generated for each institution user after any student user terminal sends the permission parameters of one or more institution users participating in the sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network to the miner node.

[0145] In summary, in the above embodiment, compared with Figure 2 The embodiment shown allows the authorization management node to receive the permission parameters sent by the student user end after modifying the original permission parameters (such as increasing, decreasing or modifying the permissions of the institution user), so that the authorization management node can confirm the access rights of the institution user based on the latest permission parameters, so that the student can dynamically adjust which institution users can access their performance data on the student user end, thereby increasing the flexibility and adaptability of the system.

[0146] Figure 4 A flowchart of a method for sharing and processing performance data provided in the third embodiment of the present application. The method is applied to Figure 1 The proxy server of the blockchain network shown may include the following steps:

[0147] S401: receiving each first encrypted score data sent by the teacher client through the database, wherein each first encrypted score data is obtained by the teacher client encrypting each student's score data through the score management system using the public key of a pre-generated first public-private key pair.

[0148] In an embodiment of the present application, the first encrypted grade data received by the proxy server is obtained in the following manner; the teacher enters the grade data of the students he manages through the teacher client, encrypts it with the public key of the first public-private key pair (i.e., the public key of the teacher client), and then sends the first encrypted grade data to the proxy server through the database.

[0149] Generally speaking, if a teacher wants to send grade data through a teacher client, it needs to be encrypted by the private key of the teacher client, and then the recipient encrypts it by the public key of the teacher client. In this embodiment, in order to reduce the computing pressure of the teacher client and use the proxy re-encryption algorithm, the grade data can be encrypted only by the public key of the teacher client.

[0150] In a specific embodiment, receiving each first encrypted grade data sent by the teacher client through the database specifically includes: receiving each first encrypted grade data sent by the database, wherein each first encrypted data is obtained by the teacher client sending it to the database through the grade management system.

[0151] In this embodiment, the teacher user end encrypts the performance data of each student using the public key of the first public-private key pair to obtain first encrypted performance data, and sends it to the database for storage. The database then forwards the first encrypted performance data to the proxy server of the blockchain. The first encrypted performance data of the proxy server will only be called when the institutional user applies for access and has access rights.

[0152] Using a database to transfer the first encrypted data can reduce the storage pressure on the teacher user side, and the database deployed on a cloud server can provide sufficient storage space.

[0153] S402: Receive the proxy re-encryption key sent by the miner node, where the proxy re-encryption key is generated by the miner node using the authorization parameters and the proxy re-encryption key parameters; the authorization parameters are generated by any institutional user terminal for a score access request for any target student, and the institutional user terminal sends the score access request to the authorization management node. The authorization management node queries the authority parameters of the institutional user terminal according to the score access request to determine whether it has access rights. If the authorization management node confirms that the institutional user terminal has access rights, it generates authorization parameters and decryption parameters, where the authorization parameters are sent by the authorization management node to the miner node, and the decryption parameters are sent by the authorization management node to the institutional user terminal; the proxy re-encryption key parameters are generated for each institutional user after any student user terminal sends the authority parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the score management system, where the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network.

[0154] In an embodiment of the present application, each institutional user has a corresponding proxy re-encryption key, and the proxy re-encryption key is generated by the miner node through the authorization parameters and proxy re-encryption key parameters for each institutional user, and is used to re-encrypt the first encrypted performance data.

[0155] For example, the proxy server receives the first encrypted score data containing the score data of the target student A sent by the teacher client. When the institutional user B applies for access to the score data of the target student A and has access rights, the miner node generates a proxy re-encryption key for the institutional user B and sends it to the proxy server.

[0156] S403: After re-encrypting the first encrypted score data of the target student using the proxy re-encryption key, the second encrypted score data of the target student is obtained.

[0157] In the embodiment of the present application, after receiving the proxy re-encryption key for the institution user B, the proxy server will re-encrypt the first encrypted performance data using the proxy re-encryption key to obtain the second encrypted performance data.

[0158] S404: Send the second encrypted score data to the institution user end, so that the institution user end uses the pre-generated private key of the second public-private key pair and decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0159] In an embodiment of the present application, after obtaining the second encrypted score data, the proxy server sends it to the institutional user B or the institutional user's unified receiving terminal, so that only the institutional user B can decrypt the second encrypted score data using the decryption parameters and his own private key to obtain the score data of the target student A.

[0160] In summary, in the above embodiment, the proxy server re-encrypts the stored first encrypted score data through the proxy re-encryption key of the miner node to obtain the second encrypted score data. This step is the re-encryption process of the proxy re-encryption technology, which can convert the score data encrypted by the public key of the target student A into encrypted data decrypted by the private key of the institutional user B, thereby realizing flexible sharing of score data while ensuring data privacy.

[0161] Figure 5 This is a flowchart of a method for sharing and processing performance data provided in the fourth embodiment of the present application. The method is applied to Figure 1 The miner node of the blockchain network shown may include the following steps:

[0162] S501: Receive the proxy re-encryption key parameters sent by any student user terminal, wherein the proxy re-encryption key parameters are generated for each institutional user after any student user terminal sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, wherein the first encrypted grade data is obtained by encrypting the grade data of each student by the teacher user terminal through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network.

[0163] In an embodiment of the present application, the miner node will receive the proxy re-encryption key parameters sent by any student user terminal in advance. The proxy re-encryption key parameters are generated by the performance management system through the public key of the first public-private key pair and the public key of the second public-private key pair (i.e., the institutional user). That is, for different institutional users, the corresponding proxy re-encryption key parameters will also be different.

[0164] For any student, in his / her access permission list, each institutional user with access permission will have a corresponding proxy re-encryption key parameter.

[0165] S502: Receive the authorization parameters sent by the authorization management node of the blockchain network, where the authorization parameters are generated by any institutional user terminal for a score access request for any target student. The institutional user terminal sends the score access request to the authorization management node, and the authorization management node queries the authority parameters of the institutional user terminal based on the score access request to determine whether it has access rights. If the authorization management node confirms that the institutional user terminal has access rights, it generates the authorization parameters and decryption parameters; the decryption parameters are sent by the authorization management node to the institutional user terminal.

[0166] In the embodiment of the present application, the authorization parameter is generated by the private key of the authorization management node and the public key of the institutional user applying for access when the authorization management node determines that the institutional user has applied for access and has access rights.

[0167] S503: Generate a proxy re-encryption key using the authorization parameters and the proxy re-encryption key parameters.

[0168] In an embodiment of the present application, the proxy re-encryption key is obtained through the authorization parameter and the proxy re-encryption key parameter.

[0169] Specifically, the proxy re-encryption key parameters are parameters about the public key of the first public-private key pair and the public key of the second public-private key pair, and the authorization parameters are parameters about the public key of the second public-private key pair and the private key of the third public-private key pair. Therefore, the proxy re-encryption key is an encryption key generated based on the public key of the first public-private key pair, the public key of the second public-private key pair, and the private key of the third public-private key pair.

[0170] S504: Send the proxy re-encryption key to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; send the second encrypted score data to the institution user end, so that the institution user end uses the pre-generated private key of the second public-private key pair and decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0171] In the embodiment of the present application, after generating the proxy re-encryption key, the miner node sends it to the proxy server, so that it uses the proxy re-encryption key to re-encrypt the first encrypted performance data.

[0172] Generally speaking, steps S501 to S504 can realize the basic functions of the miner node, that is, generating and forwarding the proxy re-encryption key. Considering the verification of the correctness of the score data by the institutional user, the miner node can also participate in the following two steps.

[0173] S505: receiving a first hash value sent by the teacher user terminal, wherein the first hash value is obtained by the teacher user terminal performing a hash operation on the grade data;

[0174] In the embodiment of the present application, the first hash value received by the miner node is the hash value obtained by hashing the original performance data. Due to the uniqueness and irreversibility of the hash operation, the hash value corresponding to the original performance data is unique.

[0175] S506: Forward the first hash value to the institutional user end, so that the institutional user end uses the pre-generated private key of the second public-private key pair and decryption parameters to decrypt the second encrypted score data, and after obtaining the score data of the target student, perform a hash operation on the decrypted score data to obtain a second hash value. The institutional user end compares the first hash value with the second hash value to obtain a verification result.

[0176] In an embodiment of the present application, the miner node forwards the received first hash value to the institutional user end, so that after the institutional user end shares the performance data, it can perform a hash operation on it to obtain a second hash value. If the first hash value is the same as the second hash value, it means that the shared performance data is the same as the original performance data, thereby verifying the security of the performance data transmission.

[0177] It should be noted that when the miner node forwards the first hash value, considering the security caused by data leakage, the first hash value needs to be encrypted during the transmission process.

[0178] In summary, in the above embodiment, the miner node can generate a proxy re-encryption key based on the authorization parameters and the proxy re-encryption key parameters, and send it to the proxy server for re-encrypting the first encrypted performance data. Moreover, the miner node also acts as a forwarding node for the first hash value, which can provide protection for verifying the transmission authenticity of the performance data.

[0179] Figure 6 This is an interactive signaling diagram of a method for sharing and processing performance data provided in the fifth embodiment of the present application. Figure 6 As shown, the interactive signaling diagram includes a score management system with a student user terminal and a teacher user terminal, an authorization management node, a miner node, a proxy server and an institution user terminal.

[0180] The interactive process of a method for sharing and processing performance data is as follows:

[0181] In the grade management system, the teacher user terminal encrypts the grade data of each student through the grade management system using the public key of the pre-generated first public-private key pair to obtain each first encrypted grade data; then the teacher user terminal uploads each first encrypted grade data to the proxy server of the blockchain network through the database for storage.

[0182] In this application embodiment, the pre-generated first public-private key pair is the key pair returned by the grade management system when it sends a request to the key generation center. The first public-private key pair includes a public key and a private key. In the grade management system, both the teacher user terminal and the student user terminal can use the first public-private key pair for encryption and decryption when sending data.

[0183] In the grade management system, any student user terminal sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage, and generates proxy re-encryption key parameters for each institutional user; then the student user terminal sends the proxy re-encryption key parameters to the miner node of the blockchain network.

[0184] In this embodiment of the application, the proxy re-encryption key parameter is generated by the private key of the first public-private key pair and the public key of the second public-private key pair.

[0185] In the institution user terminal, when a user of an institution user terminal wants to access the grade data of any target student, a grade access request for the target student will be generated; then the institution user terminal sends the grade access request to the authorization management node.

[0186] In this application embodiment, the score access request includes the identity of the institutional user, the identity of the target student, and the scope of access data, etc.

[0187] In the authorization management node, the authorization management node queries the authority parameters of the institution user terminal according to the score access request to determine whether the institution user terminal has access rights; after confirming that the institution user terminal has access rights, the authorization management node generates authorization parameters and decryption parameters according to its own private key and the public key of the institution user terminal, and then sends the decryption parameters to the institution user terminal and sends the authorization parameters to the miner node.

[0188] In this application embodiment, judging whether there is access permission is to determine whether the target student's sharing permission list includes the institutional user who applies for access and whether the access data range matches.

[0189] The authorization parameter and the decryption parameter are the same encryption and decryption key, which is generated by the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair.

[0190] The pre-generated third public-private key pair is a key pair returned by the authorization management node when it sends a request to the key generation center. The third public-private key pair includes a public key and a private key.

[0191] In the miner node, the miner node uses the authorization parameters and the proxy re-encryption key parameters to generate the proxy re-encryption key, and then sends the proxy re-encryption key to the proxy server.

[0192] In this application embodiment, the generation of the proxy re-encryption key is the core, which can convert the performance data encrypted by the target student's public key into encrypted data decrypted by the institution user's private key.

[0193] In the proxy server, the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; then the proxy server sends the second encrypted score data to the institution user end.

[0194] In the institutional user terminal, the institutional user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters previously received from the authorization management node to decrypt the second encrypted score data to obtain the score data of the target student.

[0195] In this application embodiment, the pre-generated second public-private key pair is a key pair returned by a request sent by the institutional user end applying for access to the key generation center, and the second public-private key pair includes a public key and a private key.

[0196] Figure 7 This is a schematic diagram of a structure of a performance data sharing processing device provided in the sixth embodiment of the present application. The device may be in the form of software and / or hardware. Figure 7 As shown, a shared processing device for performance data is applied to an authorization management node of a blockchain network, comprising:

[0197] The authority parameter receiving module 71 is used to receive the authority parameters of one or more institutional users participating in the sharing sent by any student user end through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair to encrypt the grade data of each student, and upload each first encrypted grade data to the proxy server of the blockchain network;

[0198] The score access request receiving module 72 is used to receive a score access request sent by an institution user terminal. The score access request is generated by any institution user terminal for any target student.

[0199] The access permission determination module 73 is used to query the permission parameters of the institution user terminal according to the score access request to determine whether it has the access permission.

[0200] The parameter generation module 74 is used to generate authorization parameters and decryption parameters after confirming that the institution user terminal has access rights.

[0201] The decryption parameter sending module 75 is used to send the decryption parameters to the institution user terminal.

[0202] The authorization parameter sending module 76 is used to send the authorization parameters to the miner node so that the miner node generates a proxy re-encryption key according to the authorization parameters and the proxy re-encryption key parameters. The miner node sends the proxy re-encryption key to the proxy server so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user terminal so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameter to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameter is generated for each institutional user after any student user terminal sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameter is sent by any student user terminal to the miner node of the blockchain network.

[0203] In another embodiment, the permission parameter receiving module 71 is specifically used to receive a shared permission list sent by a student user terminal through a grade management system, wherein the shared permission list is generated by any student user terminal through the grade management system for one or more institutional users, and the shared permission list includes permission parameters corresponding to each institutional user.

[0204] In another embodiment, the generation module 74 is specifically used to generate authorization parameters and decryption parameters for the institutional user terminal based on the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair after confirming that the institutional user terminal has access rights.

[0205] In another embodiment, the performance data sharing processing device further includes:

[0206] The public key pair receiving module is used to receive a third public key pair sent by a key generation center, wherein the third public-private key pair is generated by the key generation center and includes a public key and a private key.

[0207] In another embodiment, the performance data sharing processing device further includes:

[0208] The permission parameter updating module is used to receive the modified permission parameters sent by any student user end, wherein the modified permission parameters are obtained by any student user end modifying the permission parameters of one or more institutional users participating in the sharing through the grade management system;

[0209] The replacement module is used to replace the stored permission parameters with the modified permission parameters.

[0210] In another embodiment, the performance management system, blockchain network and database are deployed on a cloud server.

[0211] Figure 8 This is a schematic diagram of a structure of a performance data sharing processing device provided in the seventh embodiment of the present application. The device may be in the form of software and / or hardware. Figure 8 As shown, a shared processing device for score data is applied to a proxy server of a blockchain network, comprising:

[0212] The encrypted grade data receiving module 81 is used to receive each first encrypted grade data sent by the teacher user terminal through the database, wherein each first encrypted grade data is obtained by the teacher user terminal encrypting each student's grade data using the public key of the pre-generated first public-private key pair through the grade management system.

[0213] The proxy re-encryption key receiving module 82 is used to receive the proxy re-encryption key sent by the miner node, wherein the proxy re-encryption key is generated by the miner node using the authorization parameters and the proxy re-encryption key parameters; the authorization parameters are generated by any institutional user terminal for a score access request for any target student, and the institutional user terminal sends the score access request to the authorization management node. The authorization management node queries the authority parameters of the institutional user terminal according to the score access request to determine whether it has access rights. If the authorization management node confirms that the institutional user terminal has access rights, it generates authorization parameters and decryption parameters, wherein the authorization parameters are sent by the authorization management node to the miner node, and the decryption parameters are sent by the authorization management node to the institutional user terminal; the proxy re-encryption key parameters are generated for each institutional user after any student user terminal sends the authority parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network.

[0214] The re-encryption module 83 is used to re-encrypt the first encrypted score data of the target student using a proxy re-encryption key to obtain the second encrypted score data of the target student.

[0215] The encrypted score data sending module 84 is used to send the second encrypted score data to the institution user end, so that the institution user end uses the pre-generated private key of the second public-private key pair and decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

[0216] In another embodiment, the encrypted grade data receiving module 81 is specifically used to receive each first encrypted grade data sent by the database, wherein each first encrypted data is obtained by the teacher user terminal sending it to the database through the grade management system.

[0217] Fig. 9 This is a schematic diagram of a performance data sharing and processing device provided in the eighth embodiment of the present application. The device may be in the form of software and / or hardware. Fig. 9 As shown, a shared processing device for performance data is applied to a miner node of a blockchain network, comprising:

[0218] The proxy re-encryption key parameter receiving module 91 is used to receive the proxy re-encryption key parameters sent by any student user terminal, wherein the proxy re-encryption key parameters are generated for each institutional user after any student user terminal sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, wherein the first encrypted grade data is obtained by encrypting the grade data of each student by the teacher user terminal through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network.

[0219] The authorization parameter receiving module 92 is used to receive the authorization parameters sent by the authorization management node of the blockchain network, wherein the authorization parameters are generated by any institutional user terminal for a score access request for any target student. The institutional user terminal sends the score access request to the authorization management node, and the authorization management node queries the authority parameters of the institutional user terminal according to the score access request to determine whether it has access rights; if the authorization management node confirms that the institutional user terminal has access rights, it generates the authorization parameters and decryption parameters; wherein the decryption parameters are sent by the authorization management node to the institutional user terminal.

[0220] The proxy re-encryption key generation module 93 is used to generate a proxy re-encryption key using the authorization parameters and the proxy re-encryption key parameters.

[0221] The proxy re-encryption key sending module 94 is used to send the proxy re-encryption key to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; and send the second encrypted score data to the institution user end, so that the institution user end uses the pre-generated private key and decryption parameters of the second public-private key pair to decrypt the second encrypted score data to obtain the score data of the target student.

[0222] In another embodiment, the performance data sharing processing device further includes:

[0223] A hash value receiving module 95 is used to receive a first hash value sent by a teacher user terminal, wherein the first hash value is obtained by the teacher user terminal performing a hash operation on the grade data;

[0224] The hash value sending module 96 is used to forward the first hash value to the institutional user end, so that the institutional user end uses the pre-generated private key and decryption parameters of the second public-private key pair to decrypt the second encrypted score data, and after obtaining the score data of the target student, performs a hash operation on the decrypted score data to obtain the second hash value. The institutional user end compares the first hash value with the second hash value to obtain a verification result.

[0225] The above-mentioned embodiments provide a shared processing device for performance data respectively applied to the authorization management node, proxy server and miner node of the blockchain network, and its implementation principle and the technical effects produced are the same as the aforementioned shared processing method embodiment for performance data respectively applied to the authorization management node, proxy server and miner node of the blockchain network. For the sake of brief description, for matters not mentioned in the device embodiment, reference may be made to the corresponding content in the aforementioned shared processing method embodiment.

[0226] Fig.10 The hardware structure diagram of an authorization management node provided in the ninth embodiment of the present application is applied in a blockchain network. Fig.10 As shown, this embodiment provides an authorization management node, including: at least one processor 1001, and a memory 1002 communicatively connected to the at least one processor 1001; the memory 1002 stores computer execution instructions; the processor 1001 executes the computer execution instructions stored in the memory 1002, so as to implement the shared processing method of the performance data described in any of the previous embodiments.

[0227] Accordingly, for the hardware structure of proxy servers and miner nodes, you can refer to Fig.10 The description of the hardware structure of the authorization management node in the above will not be repeated here. The following only describes the hardware structure diagram of the authorization management node.

[0228] Fig.10 The authorization management node shown also includes a communication interface 1003 and a communication bus 1004, wherein the processor 1001, the memory 1002 and the communication interface 1003 are connected to each other via the communication bus 1004. The communication bus 1004 can be divided into an address bus, a data bus, a control bus, etc. Fig.10 In the figure, only one thick line is used to represent the communication bus 1004, but it does not mean that there is only one communication bus 1004 or one type of communication bus 1004. The processor 1001 may also be called a controller, and there is no limitation on the name.

[0229] In the embodiment of the present application, the memory 1002 stores instructions that can be executed by at least one processor 1001. The at least one processor 1001 can execute the sharing processing method of the score data discussed above by executing the instructions stored in the memory 1002. The processor 1001 can implement Fig.10 The functions of each module in the device shown.

[0230] Among them, processor 1001 is the control center of the device, and can use various interfaces and lines to connect various parts of the entire control device. By running or executing instructions stored in memory 1002 and calling data stored in memory 1002, various functions of the device and processing data, the device can be monitored as a whole.

[0231] In one possible design, the processor 1001 may include one or more processing units, and the processor 1001 may integrate an application processor and a modem processor, wherein the application processor mainly processes an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communications. It is understandable that the modem processor may not be integrated into the processor 1001. In some embodiments, the processor 1001 and the memory 1002 may be implemented on the same chip or on separate chips.

[0232] Processor 1001 may be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor, an application-specific integrated circuit, a field programmable gate array or other programmable logic device, a discrete gate or transistor logic device, a discrete hardware component, and may implement or execute the various methods, steps, and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the shared processing method disclosed in the embodiments of the present application may be directly embodied as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0233] The memory 1002 is a non-volatile computer-readable storage medium that can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The memory 1002 may include at least one type of storage medium, such as a flash memory, a hard disk, a multimedia card, a card-type memory, a random access memory (Random Access Memory, RAM), a static random access memory (Static Random Access Memory, SRAM), a programmable read-only memory (Programmable Read Only Memory, PROM), a read-only memory (Read Only Memory, ROM), an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a magnetic memory, a disk, an optical disk, etc. The memory 1002 is any other medium that can be used to carry or store a desired program code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. The memory 1002 in the embodiment of the present application can also be a circuit or any other device that can realize a storage function, for storing program instructions and / or data.

[0234] By designing and programming the processor 1001, the code corresponding to the method for sharing the score data described in the above embodiment can be fixed into the chip, so that the chip can execute the steps of the method for sharing the score data described in the above embodiment when running. How to design and program the processor 1001 is a technology known to those skilled in the art and will not be described in detail here.

[0235] The present application embodiment also provides a computer-readable storage medium, in which a computer-executable instruction is stored, and when the computer-executable instruction is executed by a processor, it is used to implement the shared processing method of the score data described in any of the above embodiments, so it will not be described in detail here. In addition, the description of the beneficial effects of the same method will not be described in detail. For technical details not disclosed in the computer storage medium embodiment involved in the present invention, please refer to the description of the method embodiment of the present invention.

[0236] An embodiment of the present application also provides a computer program product, which includes a computer program. When the computer program is executed by a processor, it implements the method for sharing and processing performance data described in any of the above embodiments.

[0237] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0238] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0239] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0240] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0241] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

Claims

1. A method for sharing and processing performance data, characterized in that: Applied to an authorization management node of a blockchain network, the method comprises: Receiving the permission parameters of one or more institutional users participating in the sharing sent by any student user end through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by encrypting the grade data of each student by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network; Receiving a score access request sent by an institution user terminal, wherein the score access request is generated by any institution user terminal for any target student; querying the authority parameters of the institution user terminal according to the score access request to determine whether the institution user terminal has access authority; If it is confirmed that the institution user terminal has access rights, authorization parameters and decryption parameters are generated; Sending the decryption parameters to the institution's user terminal; The authorization parameter is sent to the miner node, so that the miner node generates a proxy re-encryption key according to the authorization parameter and the proxy re-encryption key parameter, the miner node sends the proxy re-encryption key to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user end, so that the institution user end uses the pre-generated private key of the second public-private key pair and the decryption parameter to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameter is generated for each institution user after any student user end sends the permission parameters of one or more institution users participating in sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameter is sent by any student user end to the miner node of the blockchain network.

2. The method according to claim 1, characterized in that The receiving of permission parameters of one or more institution users participating in sharing sent by any student user terminal through the score management system includes: Receive a sharing permission list sent by a student user terminal through the grade management system, wherein the sharing permission list is generated by any student user terminal for one or more institutional users through the grade management system, wherein the sharing permission list includes permission parameters corresponding to each institutional user.

3. The method according to claim 1, characterized in that If it is confirmed that the institution user terminal has access rights, the authorization parameters and decryption parameters are generated, including: After confirming that the institutional user terminal has access rights, authorization parameters and decryption parameters for the institutional user terminal are generated based on the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair.

4. The method according to claim 3, characterized in that After confirming that the institution user terminal has access rights, before generating authorization parameters and decryption parameters for the institution user terminal according to the public key of the second public-private key pair and the private key of the pre-generated third public-private key pair, the method further includes: A third public key pair sent by a key generation center is received, wherein the third public-private key pair is generated by the key generation center, and the third public-private key pair includes a public key and a private key.

5. The method according to claim 1, characterized in that After receiving the permission parameters of one or more institution users participating in the sharing sent by any student user terminal through the score management system, the method further includes: Receiving modified permission parameters sent by any student user terminal, wherein the modified permission parameters are obtained by any student user terminal modifying the permission parameters of one or more institution users participating in the sharing through the grade management system; The modified permission parameters are used to replace the stored permission parameters.

6. The method according to any one of claims 1 to 5, characterized in that: The performance management system, the blockchain network and the database are deployed on a cloud server.

7. A method for sharing and processing performance data, characterized in that: Applied to a proxy server, the method comprises: Receiving each first encrypted score data sent by the teacher user end through the database, wherein the first encrypted score data is obtained by the teacher user end encrypting the score data of each student through the score management system using the public key of the pre-generated first public-private key pair; Receive a proxy re-encryption key sent by a miner node, wherein the proxy re-encryption key is generated by the miner node using authorization parameters and proxy re-encryption key parameters; the authorization parameters are generated by any institution user terminal for a grade access request for any target student, the institution user terminal sends the grade access request to the authorization management node, the authorization management node queries the authority parameters of the institution user terminal according to the grade access request to determine whether it has access rights, and if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters, wherein the authorization parameters are sent by the authorization management node to the miner node, and the decryption parameters are sent by the authorization management node to the institution user terminal; the proxy re-encryption key parameters are generated for each institution user after any student user terminal sends the authority parameters of one or more institution users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network; After re-encrypting the first encrypted score data of the target student using the proxy re-encryption key, the second encrypted score data of the target student is obtained; The second encrypted score data is sent to the institution user terminal, so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

8. The method according to claim 7, characterized in that The receiving of each first encrypted score data sent by the teacher client through the database includes: Receive each first encrypted grade data sent by the database, wherein the first encrypted data is obtained by the teacher user end sending it to the database through the grade management system.

9. A method for sharing and processing performance data, characterized in that: Applied to a miner node of a blockchain network, the method comprises: Receive a proxy re-encryption key parameter sent by any student client, wherein the proxy re-encryption key parameter is generated for each institutional user after any student client sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, wherein the first encrypted grade data is obtained by the instructor client encrypting the grade data of each student through the grade management system using the public key of the pre-generated first public-private key pair, and uploading each first encrypted grade data to the proxy server of the blockchain network; Receiving authorization parameters sent by an authorization management node of a blockchain network, wherein the authorization parameters are generated for any institution user terminal to generate a score access request for any target student, the institution user terminal sends the score access request to the authorization management node, and the authorization management node queries the authority parameters of the institution user terminal according to the score access request to determine whether it has access rights; if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters; wherein the decryption parameters are sent by the authorization management node to the institution user terminal; generating a proxy re-encryption key using the authorization parameter and the proxy re-encryption key parameter; The proxy re-encryption key is sent to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; the second encrypted score data is sent to the institution user terminal, so that the institution user terminal uses the private key of the pre-generated second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

10. The method according to claim 9, characterized in that The method further comprises: Receiving a first hash value sent by a teacher client, wherein the first hash value is obtained by performing a hash operation on the grade data by the teacher client; The first hash value is forwarded to the institutional user end, so that the institutional user end uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data. After obtaining the score data of the target student, a hash operation is performed on the decrypted score data to obtain a second hash value. The institutional user end compares the first hash value with the second hash value to obtain a verification result.

11. A device for sharing and processing performance data, characterized in that: Authorization management nodes applied to blockchain networks include: The permission parameter receiving module is used to receive the permission parameters of one or more institutional users participating in the sharing sent by any student user end through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, and the first encrypted grade data is obtained by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair to encrypt the grade data of each student, and upload each first encrypted grade data to the proxy server of the blockchain network; A score access request receiving module, used to receive a score access request sent by an institution user terminal, wherein the score access request is generated by any institution user terminal for any target student; An access authority determination module, used to query the authority parameters of the institution user terminal according to the score access request to determine whether it has access authority; A parameter generation module, used to generate authorization parameters and decryption parameters after confirming that the institution user terminal has access rights; A decryption parameter sending module, used for sending the decryption parameters to the institution user terminal; An authorization parameter sending module is used to send the authorization parameter to a miner node so that the miner node generates a proxy re-encryption key according to the authorization parameter and the proxy re-encryption key parameter. The miner node sends the proxy re-encryption key to a proxy server so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student, and sends the second encrypted score data to the institution user terminal so that the institution user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameter to decrypt the second encrypted score data to obtain the score data of the target student; wherein the proxy re-encryption key parameter is generated for each institution user after any student user terminal sends the permission parameters of one or more institution users participating in sharing to the authorization management node of the blockchain network for storage through the score management system, wherein the proxy re-encryption key parameter is sent by any student user terminal to the miner node of the blockchain network.

12. A device for sharing and processing performance data, characterized in that: Applicable to proxy servers, including: The encrypted grade data receiving module is used to receive each first encrypted grade data sent by the teacher user terminal through the database, wherein the first encrypted grade data is obtained by the teacher user terminal encrypting the grade data of each student through the grade management system using the public key of the pre-generated first public-private key pair; A proxy re-encryption key receiving module is used to receive a proxy re-encryption key sent by a miner node, wherein the proxy re-encryption key is generated by the miner node using authorization parameters and proxy re-encryption key parameters; the authorization parameters are generated by any institution user terminal for a grade access request for any target student, the institution user terminal sends the grade access request to the authorization management node, the authorization management node queries the authority parameters of the institution user terminal according to the grade access request to determine whether it has access rights, and if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters, wherein the authorization parameters are sent by the authorization management node to the miner node, and the decryption parameters are sent by the authorization management node to the institution user terminal; the proxy re-encryption key parameters are generated for each institution user after any student user terminal sends the authority parameters of one or more institution users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system, wherein the proxy re-encryption key parameters are sent by any student user terminal to the miner node of the blockchain network; A re-encryption module, used to re-encrypt the first encrypted score data of the target student using the proxy re-encryption key to obtain the second encrypted score data of the target student; The encrypted score data sending module is used to send the second encrypted score data to the institutional user terminal, so that the institutional user terminal uses the pre-generated private key of the second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

13. A device for sharing and processing performance data, characterized in that: Miner nodes used in blockchain networks include: The proxy re-encryption key parameter receiving module is used to receive the proxy re-encryption key parameter sent by any student user end, wherein the proxy re-encryption key parameter is generated for each institutional user after the student user end sends the permission parameters of one or more institutional users participating in the sharing to the authorization management node of the blockchain network for storage through the grade management system; wherein the proxy server of the blockchain network stores the first encrypted grade data, wherein the first encrypted grade data is obtained by the teacher user end through the grade management system using the public key of the pre-generated first public-private key pair to encrypt the grade data of each student, and upload each first encrypted grade data to the proxy server of the blockchain network; An authorization parameter receiving module is used to receive authorization parameters sent by an authorization management node of a blockchain network, wherein the authorization parameters are generated by any institution user terminal for a score access request for any target student, the institution user terminal sends the score access request to the authorization management node, and the authorization management node queries the authority parameters of the institution user terminal according to the score access request to determine whether it has access rights; if the authorization management node confirms that the institution user terminal has access rights, it generates authorization parameters and decryption parameters; wherein the decryption parameters are sent by the authorization management node to the institution user terminal; a proxy re-encryption key generation module, configured to generate a proxy re-encryption key using the authorization parameter and the proxy re-encryption key parameter; The proxy re-encryption key sending module is used to send the proxy re-encryption key to the proxy server, so that the proxy server uses the proxy re-encryption key to re-encrypt the first encrypted score data of the target student to obtain the second encrypted score data of the target student; and send the second encrypted score data to the institution user terminal, so that the institution user terminal uses the private key of the pre-generated second public-private key pair and the decryption parameters to decrypt the second encrypted score data to obtain the score data of the target student.

14. An authorization management node, characterized in that: Applied in a blockchain network, comprising: at least one processor, and a memory communicatively connected to the at least one processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 6.

15. A proxy server, characterized in that: include: at least one processor, and a memory communicatively coupled to the at least one processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to claim 7 or 8.

16. A miner node, characterized in that: Applied in a blockchain network, comprising: at least one processor, and a memory communicatively connected to the at least one processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to claim 9 or 10.

17. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the method according to any one of claims 1 to 6, the method according to claim 7 or 8, or the method according to claim 9 or 10.

18. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 6, the method according to claim 7 or 8, or the method according to claim 9 or 10 is implemented.

Images