Information sending method and device, equipment and medium

Abstract

The invention provides an information sending method and device, equipment and a medium. The method comprises the following steps: when a business object corresponding to a first business client is an information sending object, outputting an information editing page, and inputting business data information on the information editing page; when the information data volume of the service data information is greater than an information data volume threshold value associated with the service data information, obtaining a service key; in response to the information sending operation, acquiring an information receiving address of the information receiving object, and performing information encryption processing on the service data information through the service key to obtain service encryption information corresponding to the service data information; performing key encryption processing on the service key through the public key information corresponding to the information receiving address to obtain a service encryption key, and establishing an encryption mapping relation table between the information receiving address and the service encryption key; and sending the encryption mapping relation table and the service encryption information to an information data processing node. The information sending efficiency can be improved.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to an information sending method, device, equipment and medium. Background Art

[0002] At present, in information sending scenarios (such as email sending scenarios), data information that a sender (such as user A) needs to send to a receiver (such as user B) can be encrypted and decrypted by asymmetric encryption and decryption. For example, when the sender (such as user A) obtains the public key information of the receiver (such as user B), it can directly asymmetrically encrypt the data information to be sent (such as email information X) through the public key information of the receiver (such as user B) to obtain the asymmetrically encrypted email information X. In this way, for the receiver (such as user B), the receiver (such as user B) can asymmetrically decrypt the asymmetrically encrypted email information X through its own private key information to decrypt and obtain the email information X sent by user A to user B.

[0003] However, the inventors have found in practice that if the amount of data information (e.g., email information X) sent by user A to user B is large, when the asymmetric encryption method is used to asymmetrically encrypt the data information (e.g., email information X) to be sent, considering the computational complexity of the asymmetric encryption and decryption method itself, it will take a long time to asymmetrically encrypt the data information (e.g., email information X), so that when user B uses his own private key information to asymmetrically decrypt the asymmetrically encrypted email information X, it will also take a long time to decrypt the data information (e.g., email information X). Based on this, the inventors believe that in this information sending scenario (e.g., email sending scenario), how to improve the efficiency and security of information sending is a technical problem that needs to be solved urgently. Summary of the invention

[0004] The embodiments of the present application provide a method, apparatus, device and medium for sending information, which can improve the efficiency and security of information sending.

[0005] On the one hand, an embodiment of the present application provides a method for sending information, which is executed by a first service client and includes:

[0006] When the business object corresponding to the first business client is an information sending object, an information editing page for editing business data information is output, and the business data information to be sent to the information receiving object is entered on the information editing page;

[0007] When the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, acquiring the business key configured for the business data information; the data volume of the business key is less than or equal to the information data volume threshold;

[0008] In response to the information sending operation for the business data information, the information receiving address of the information receiving object is obtained, and the business data information is encrypted by the business key to obtain the business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object;

[0009] The business key is encrypted by the public key information corresponding to the information receiving address to obtain the business encryption key, and an encryption mapping relationship table between the information receiving address and the business encryption key is established;

[0010] The encrypted mapping relationship table and the business encryption information are sent to the information data processing node in the decentralized information data processing system, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped to the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

[0011] On the other hand, an embodiment of the present application provides an information sending method, which is executed by an information data processing node in a decentralized information data processing system, and the method includes:

[0012] Upon receiving the encrypted mapping relationship table and the business encryption information sent by the first business client corresponding to the business sending object, the encrypted mapping relationship table and the business encryption information are stored; the encrypted mapping relationship table is established based on the mapping relationship between the information receiving address and the business encryption key; the business encryption key is obtained by encrypting the business key with the public key information corresponding to the information receiving address; the information receiving address is determined by the public key information of the information receiving object; the business encryption information corresponding to the business data information is obtained by the first business client encrypting the business data information with the business key configured for the business data information when responding to the information sending operation of the information sending object for the business data information and obtaining the information receiving address of the information receiving object; the business key is obtained when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information; the data volume of the business key is less than or equal to the information data volume threshold; the business data information is the data information to be sent to the information receiving object entered by the information sending object on the information editing page; the information editing page is used to edit the business data information;

[0013] When a first information query request is received from a second business client corresponding to an information receiving object through an information query address, an information receiving address matching the information query address is queried from an encryption mapping relationship table based on the first information query request, and a business encryption key and business encryption information mapped to the queried information receiving address are sent to the second business client corresponding to the information receiving object, so that the second business client decrypts the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypts the business encryption information through the business key to obtain the business data information.

[0014] On the one hand, an embodiment of the present application provides an information sending device, which runs in a first service client and includes:

[0015] An information entry module is used to output an information editing page for editing business data information when the business object corresponding to the first business client is an information sending object, and enter the business data information to be sent to the information receiving object on the information editing page;

[0016] A key acquisition module, used to acquire a business key configured for the business data information when the amount of information data of the business data information is greater than an information data amount threshold associated with the business data information; and the amount of data of the business key is less than or equal to the information data amount threshold;

[0017] An information encryption module, which is used to obtain an information receiving address of an information receiving object in response to an information sending operation for business data information, and to perform information encryption processing on the business data information by using a business key to obtain business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object;

[0018] The key encryption module is used to perform key encryption processing on the business key through the public key information corresponding to the information receiving address, obtain the business encryption key, and establish an encryption mapping relationship table between the information receiving address and the business encryption key;

[0019] An information sending module is used to send an encrypted mapping relationship table and business encryption information to an information data processing node in a decentralized information data processing system, so that when the information data processing node receives a first information query request sent by an information receiving object through a receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped to the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

[0020] On the other hand, an embodiment of the present application provides an information sending device, which runs in an information data processing node in a decentralized information data processing system, and includes:

[0021] An information receiving module is used to store the encrypted mapping relationship table and the business encryption information when receiving the encrypted mapping relationship table and the business encryption information sent by the first business client corresponding to the business sending object; the encrypted mapping relationship table is established based on the mapping relationship between the information receiving address and the business encryption key; the business encryption key is obtained by encrypting the business key with the public key information corresponding to the information receiving address; the information receiving address is determined by the public key information of the information receiving object; the business encryption information corresponding to the business data information is obtained by the first business client encrypting the business data information with the business key configured for the business data information when responding to the information sending operation of the information sending object for the business data information and obtaining the information receiving address of the information receiving object; the business key is obtained when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information; the data volume of the business key is less than or equal to the information data volume threshold; the business data information is the data information to be sent to the information receiving object entered by the information sending object on the information editing page; the information editing page is used to edit the business data information;

[0022] An information sending module is used to, upon receiving a first information query request sent by a second business client corresponding to an information receiving object through a receiving information query address, query an information receiving address matching the receiving information query address from an encryption mapping relationship table based on the first information query request, and send the business encryption key and business encryption information mapped to the queried information receiving address to the second business client corresponding to the information receiving object, so that the second business client decrypts the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypts the business encryption information through the business key to obtain the business data information.

[0023] On one hand, an embodiment of the present application provides a computer device, including a memory and a processor, wherein the memory is connected to the processor, the memory is used to store a computer program, and the processor is used to call the computer program so that the computer device executes the method provided in the above aspect of the embodiment of the present application.

[0024] On one hand, an embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored. The computer program is suitable for being loaded and executed by a processor, so that a computer device with a processor executes the method provided in the above aspect of the embodiment of the present application.

[0025] According to one aspect of the present application, a computer program product or computer program is provided, the computer program product or computer program includes computer instructions, the computer instructions are stored in a computer-readable storage medium. A processor of a computer device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the computer device performs the method provided in the above aspect.

[0026] An embodiment of the present application proposes an information sending mechanism, which can specifically be that when the business object corresponding to the first business client is the information sending object, an information editing page is output, and the information sending object can enter the business data information to be sent to the information receiving object on the information editing page, and when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information (the data volume of the business key is less than or equal to the information data volume threshold), the business key configured for the business data information is obtained, and in response to the information sending operation for the business data information, the information receiving address determined by the public key information of the information receiving object is obtained, and the business data information is encrypted (i.e., symmetric encryption) by the business key to obtain the business encryption information corresponding to the business data information, and at the same time, the business key can be encrypted (i.e., asymmetric encryption) by the public key information corresponding to the information receiving address to obtain the business encryption key. The encrypted mapping relationship table between the information receiving address and the business encryption key is established. At this time, the encrypted mapping relationship table and the business encryption information can be sent to the information data processing node in the decentralized information data processing system to realize the information sending process for the business data information. In this way, when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client can decrypt the business encryption key mapped by the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information by the business key to obtain the business data information. In other words, when the amount of information data of the business data information is too large, the business data information can be symmetrically encrypted by the business key first, and then the business key can be asymmetrically encrypted by the public key information of the information receiving object (recipient). It can be understood that the encryption efficiency of symmetric encryption is greater than that of asymmetric encryption. Therefore, when the amount of information data is too large, it can be first encrypted symmetrically using the business key, and then the business key with a smaller data volume can be encrypted asymmetrically. This can increase the information encryption speed and thus improve the information sending efficiency of the business data information. In addition, the business data information is encrypted and sent in the form of business encryption information, and the business key used to encrypt the business data information is encrypted and sent through the public key information corresponding to the information receiving address. This can ensure the sending security of the business key and business data information. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0028] Figure 1 This is a schematic diagram of a network architecture provided by an embodiment of the present application;

[0029] Figure 2 This is a schematic diagram of a process of information sending provided by an embodiment of the present application;

[0030] Figure 3 This is a schematic diagram of an information receiving process provided by an embodiment of the present application;

[0031] Figure 4 This is a flow diagram of a method for sending information provided by an embodiment of the present application. Figure 1 ;

[0032] Figure 5 is a schematic diagram of an information editing page provided in an embodiment of the present application;

[0033] Figure 6 This is a schematic diagram of an information encryption process provided by an embodiment of the present application. Figure 1 ;

[0034] Figure 7 This is a flow diagram of a method for sending information provided by an embodiment of the present application. Figure 2 ;

[0035] Figure 8 This is a schematic diagram of an information encryption process provided by an embodiment of the present application. Figure 2 ;

[0036] Fig. 9 This is a schematic diagram of an information encryption process provided by an embodiment of the present application. Figure 3 ;

[0037] Fig.10 This is a schematic diagram of a mapping relationship table provided in an embodiment of the present application. Figure 1 ;

[0038] Fig.11 This is a schematic diagram of a mapping relationship table provided in an embodiment of the present application. Figure 2 ;

[0039] Fig.12 This is a schematic diagram of an information processing process provided by an embodiment of the present application. Figure 1 ;

[0040] Fig.13This is a schematic diagram of an information processing process provided by an embodiment of the present application. Figure 2 ;

[0041] Fig.14 This is a schematic diagram of an information processing process provided by an embodiment of the present application. Figure 3 ;

[0042] Fig.15 This is a flow diagram of a method for sending information provided by an embodiment of the present application. Figure 3 ;

[0043] Fig.16 It is a schematic diagram of an interactive process of an information sending method provided in an embodiment of the present application;

[0044] Fig.17 This is a schematic diagram of the structure of an information sending device provided in an embodiment of the present application. Figure 1 ;

[0045] Fig.18 This is a schematic diagram of the structure of an information sending device provided in an embodiment of the present application. Figure 2 ;

[0046] Fig.19 It is a structural diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0047] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0048] See also Figure 1 , Figure 1 Schematic diagram of a network architecture provided by an embodiment of the present application. Figure 1 As shown, the network architecture may include multiple terminal devices (such as Figure 1The terminal device 100a, terminal device 100b, etc., the number of terminal devices is not limited here) and a decentralized information data processing system 200, which includes multiple information data processing nodes. The terminal device 100a and the terminal device 100b may have a communication connection, so that the terminal device 100a can interact with the terminal device 100b through the communication connection. And the terminal device 100a or the terminal device 100b may have a communication connection with any blockchain node, so that the terminal device 100a or the terminal device 100b can interact with the blockchain node through the communication connection. Among them, the above-mentioned communication connection does not limit the connection method, and can be directly or indirectly connected through a wired communication method, or directly or indirectly connected through a wireless communication method, or through other methods, which are not limited in this application.

[0049] Among them, Figure 1 The terminal device 100a and the terminal device 100b shown may include: smart phones, tablet computers, laptop computers, desktop computers, wearable devices (such as smart watches, smart bracelets), smart homes, head-mounted devices, smart car-mounted smart terminals, etc. It should be understood that the terminal device 100a (or the terminal device 100b) may be installed with a service client.

[0050] Optionally, it can be understood that the service client can be configured in any terminal device. For example, the terminal device 100a (or the terminal device 100b) can be configured with a service client to implement interaction with the information data processing node. The service client can be used to implement the sending and receiving of service data information.

[0051] Among them, Figure 1 The terminal device 100a (or terminal device 100b) shown can be associated with a server with a communication connection relationship. The server can be an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, as well as big data and artificial intelligence platforms.

[0052] Among them, the decentralized information data processing system can be a blockchain system or a distributed file system (such as IPFS (InterPlanetary File System)).

[0053] It is understood that the distributed file system may include one or more distributed nodes, which may be used to distribute the data involved in the process of sending and receiving business data information. The information data processing nodes in the decentralized information data processing system 200 may be distributed nodes in the distributed file system.

[0054] It is understandable that blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism and encryption algorithm. It is mainly used to organize data in chronological order and encrypt it into a ledger to make it impossible to be tampered with or forged. At the same time, it can verify, store and update data. Blockchain is essentially a decentralized database in which each node stores an identical blockchain.

[0055] For example, Figure 1 The decentralized information data processing system 200 shown can be applied to a blockchain system. A blockchain system refers to a system for sharing data between blockchain nodes. The information data processing node in the decentralized information data processing system 200 can be a blockchain node in the blockchain system. The blockchain system can be deployed with multiple blockchain nodes (referred to as nodes), and the number of deployed blockchain nodes will not be limited here. It can be understood that a blockchain node can be a server connected to a blockchain network or a terminal connected to a blockchain network. The specific form of the blockchain node is not limited here, and each blockchain node can include a hardware layer, an intermediate layer, an operating system layer, and an application layer.

[0056] Among them, blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism, encryption algorithm, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods. Each data block contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. Blockchain can include the underlying blockchain platform, platform product service layer, and application service layer.

[0057] The underlying blockchain platform can include object management, basic services, smart contracts, and operation management processing modules. Among them, the object management module is responsible for the identity information management of all blockchain participants, including maintaining public and private key generation (account management), key management, and the maintenance of the correspondence between the user's real identity and the blockchain address (authority management), etc., and, under authorization, supervises and audits the transactions of certain real identities and provides risk control rule configuration (risk control audit); the basic service module is deployed on all blockchain node devices to verify the validity of business requests, and records valid requests to storage after consensus is reached. For a new business request, the basic service first performs interface adaptation analysis and authentication processing (interface adaptation), and then encrypts the business information through the consensus algorithm (consensus management). The smart contract module is responsible for the registration and issuance of contracts, as well as contract triggering and contract execution. Developers can define the contract logic in a programming language and publish it to the blockchain (contract registration). According to the logic of the contract terms, the key or other events are called to trigger the execution and complete the contract logic. It also provides the function of contract upgrade and cancellation. The operation management module is mainly responsible for the deployment, configuration modification, contract setting, cloud adaptation and real-time status visualization output of the product during the product release process, such as alarm, network management, and node equipment health status management.

[0058] The platform product service layer provides the basic capabilities and implementation framework of typical applications. Developers can superimpose business features based on these basic capabilities to complete the blockchain implementation of business logic. The application service layer provides application services based on blockchain solutions for business participants to use.

[0059] It should be noted that the blockchain network in the embodiments of the present application can be a layered structure or a single-layer structure, and the specific structure of the blockchain network is not limited here.

[0060] It is understood that a smart contract can be deployed in the above-mentioned blockchain network (i.e., blockchain system), and the smart contract can be understood in the blockchain system as a code that can be understood and executed by a blockchain node (such as a consensus node or a business node), which can execute any logic and obtain results. For example, an entity object (such as a user who requests to initiate a business project) can call the on-chain business contract that has been deployed on the consensus node by initiating a contract call request (also referred to as a business request) through the client on the terminal it holds. It should be understood that the blockchain system can include one or more smart contracts, which can be distinguished by contract identifiers (such as identification numbers (Identity document, ID) or names, and can also include contract addresses or contract function names (also referred to as contract method names)), and the contract call request initiated by the client can also carry the identification number or name of the smart contract to specify the smart contract that the blockchain needs to run.

[0061] Among them, the business client can be used to send and receive business data information. For example, the business client of the information sending object can be called the first business client, the business client of the information receiving object can be called the second business client, and the information sending object and the information receiving object can be the same business object. For example, the first business client can display an information editing page, and the information sending object enters the business data information to be sent on the information editing page. The first business client can send the business data information through the information sending mechanism proposed in the technical solution of the present application, and the second business client can obtain the business data information sent by the first business client through the information data processing node in the decentralized information data processing system.

[0062] It should be understood that any two information data processing nodes in a decentralized information data processing system can form a peer-to-peer network, which can use a peer-to-peer protocol, wherein the peer-to-peer protocol is an application layer protocol running on the Transmission Control Protocol (TCP). In a distributed system, any device such as a server, a terminal, etc. can join and become an information data processing node, wherein each information data processing node can include a hardware layer, an intermediate layer, an operating system layer, and an application layer.

[0063] It can be understood that the embodiment of the present application can access any business object (for example, any individual user, any enterprise, any organization, etc.) of the decentralized information data processing system to configure an information data processing node. Therefore, any business node in the business network can have a one-to-one correspondence with the corresponding business object that needs to be accessed in the decentralized information data processing system.

[0064] It can be understood that since each entity object can correspond to an information data processing node, the embodiment of the present application can take the entity object as the above-mentioned enterprise (i.e. the aforementioned enterprise) as an example. At this time, the information data processing node associated with each enterprise can be the same information data processing node.

[0065] To facilitate subsequent understanding and explanation, the embodiment of the present application may refer to an entity object (for example, an individual user, a corporate user, an organization, etc.) having public key information for encrypting business data information and private key information for decrypting business data information as a business object, and the business object can send and receive business data information through a business client.

[0066] Specifically, in an embodiment of the present application, the information sending object can enter the business data information to be sent to the information receiving object on the information editing page displayed on the first business client. When the information data volume of the entered business data information is greater than the information data volume threshold, the first business client obtains the business key configured for the business data information, and when detecting the information sending operation for the business data information, the business data information is encrypted by the business key to obtain the business encryption information corresponding to the business data information, and the business key is encrypted by the public key information corresponding to the information receiving address of the information receiving object to obtain the business encryption key, and an encryption mapping relationship table between the information receiving address and the business encryption key is established, and then the encryption mapping relationship table and the business encryption information are sent as information ciphertext data to the information data processing node in the decentralized information data processing system. The information receiving object can obtain the corresponding business encryption key and business encryption information from the information data processing node through the second business client, and decrypt the business data information through the private key information of the information receiving object, thereby realizing decentralized information sending and receiving.

[0067] It can be seen that in the embodiment of the present application, when the amount of business data information is too large, the business data information is first symmetrically encrypted using the business key, and then the business key with a smaller amount of information data is asymmetrically encrypted using the public key information corresponding to the information receiving address. This can increase the encryption speed of the business data information, thereby improving the efficiency of information sending.

[0068] Similarly, the second business client corresponding to the information receiving object can decrypt the business encryption key mapped to the information receiving address of the information receiving object through the private key information to obtain the business key, and decrypt the business encrypted information through the business key to obtain the business data information. This can be adopted to improve the efficiency and security of information receiving.

[0069] It can be understood that the business key used for symmetric encryption does not need to be negotiated between the information receiving object and the information sending object, but can be configured by the first business client corresponding to the information sending object, and encrypted and sent by the public key information of the information receiving object. This can save the process of obtaining the business key, thereby improving the efficiency of information sending. At the same time, the business key is encrypted by the public key information of the information receiving object, and only the information receiving object can decrypt and obtain it through the private key information, thereby ensuring the security of obtaining the business key, thereby improving the security of information sending.

[0070] It is understood that the computer device involved in the embodiments of the present application can be a server or a terminal device. The server can be an independent physical server, a server cluster or a distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN (Content Delivery Network), and big data and artificial intelligence platforms. Terminals can include but are not limited to mobile phones, computers, intelligent voice interaction devices, smart home appliances, vehicle-mounted terminals, aircraft, etc. The embodiments of the present application can be applied to various scenarios, including but not limited to cloud technology, artificial intelligence, smart transportation, assisted driving, etc.

[0071] Understandably, Figure 1 The possible network architecture of the technical solution of the present application is merely exemplified and does not limit the specific architecture of the technical solution of the present application. That is, the technical solution of the present application can also provide other forms of network architecture.

[0072] For further understanding, please refer to Figure 2 , Figure 2It is a schematic diagram of the process of information sending provided by an embodiment of the present application. In this scenario, an information sending mechanism is proposed to ensure the security and efficiency of information sending. Among them, the process of the information sending mechanism can be: the first business client in the terminal device 20a corresponding to the information sending object a1 outputs an information editing page for editing business data information, and the information sending object can enter the business data information to be sent to the information receiving object on the information editing page; when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the first business client configures (S21) a business key for the business data information (for example, it can be automatically configured when it is detected that the information data volume is greater than the information data volume threshold, or it can be configured when an information encryption operation for the business data information is detected); the first business client can respond to the information sending operation for the business data information , (S22) obtain the information receiving address determined by the public key information of the information receiving object, and encrypt the business data information through the business key to obtain the business encryption information corresponding to the business data information; at this time, (S23) the business key can be encrypted through the public key information corresponding to the information receiving address to obtain the business encryption key, and at the same time, an encryption mapping relationship table between the information receiving address and the business encryption key is established, and the encryption mapping relationship table is used to record the encryption mapping relationship between the information receiving address and the business encryption key; the first business client sends the encryption mapping relationship table and the business encryption information to the information data processing node 21 in the decentralized information data processing system, and the information data processing node stores them.

[0073] For further information, see Figure 3 , Figure 3 : is a schematic diagram of an information receiving process provided by an embodiment of the present application. Among them, the second service client 20b corresponding to the information receiving object a2 can generate a first information query request corresponding to the receiving information query address, and send it (S31) to the information data processing node 21 in the decentralized information data processing system. Figure 2 As can be seen from the example, the information data processing node stores the service encryption key, the encryption mapping relationship table, and the service encryption information sent by the information sending object to the information receiving object through the first service client.

[0074] It can be understood that the information data processing node can (S32) query the information receiving address that matches the receiving information query address from the encryption mapping relationship table based on the first information query request, and obtain (S33) the business encryption key mapped to the queried information receiving address; and obtain (S34) the business encryption information corresponding to the encryption mapping relationship table, and return the business encryption key and business encryption information mapped to the queried information receiving address (S35) to the second business client corresponding to the information receiving object.

[0075] It can be understood that the second business client corresponding to the information receiving object can (S36) decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object, obtain the business key, and decrypt the business encrypted information through the business key (S37), and decrypt to obtain the business data information sent by the information sending object.

[0076] It should be noted that when the business client in the embodiment of the present application obtains the private key information of the corresponding business object, a prompt interface or pop-up window can be displayed on the corresponding client. The prompt interface or pop-up window is used to prompt the business object that it is currently collecting data such as private key information. Only after the business object issues a confirmation operation on the prompt interface or pop-up window (such as the business object confirms the authorization through the business client), the relevant steps of data acquisition are started, otherwise it ends.

[0077] In addition, it can be understood that in the specific implementation of the present application, data such as private key information related to business objects such as users, enterprises, and institutions may be involved. When the above embodiments of the present application are applied to specific products or technologies, it is necessary to obtain the permission or consent of business objects such as users, enterprises, and institutions, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards of the relevant regions.

[0078] It is understood that the above scenarios are only examples and do not constitute a limitation on the application scenarios of the technical solutions provided in the embodiments of the present application. The technical solutions of the present application can also be applied to other scenarios. For example, it is known to those skilled in the art that with the evolution of the system architecture and the emergence of new business scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0079] For further information, see Figure 4 , Figure 4 is a flow chart of a method for sending information provided by an embodiment of the present application, such as Figure 4 As shown, the method can be executed by the computer device mentioned above, and the computer device can be a terminal device configured with a first service client. For example, the terminal device can be the above-mentioned Figure 1Any terminal device in, such as terminal device 100a. The method may specifically include the following steps S101-S105:

[0080] S101. When the business object corresponding to the first business client is an information sending object, an information editing page for editing business data information is output, and business data information to be sent to an information receiving object is entered on the information editing page.

[0081] It can be understood that when the business object is an information sending object of the business data information, the corresponding business client is the first business client. The first business client can be used to enter the business data information to be sent and specify the information receiving object for receiving the business data information. Correspondingly, when the business object is an information receiving object of the business data information, the corresponding business client is the second business client. The second business client can be used to receive the business data information sent by the information sending object.

[0082] The first business client may output an information editing page for editing business data information, and the information sender may enter business data information on the information editing page and specify information recipients, such as inputting information receiving addresses of one or more information recipients.

[0083] It can be understood that when the technical solution of the present application is applied to the email sending and receiving scenario, the edited business data information is the email data information to be sent. At this time, the information sending object can be the email sender, and the information receiving object can be the email receiver. When the technical solution of the present application is applied to the notification sending and receiving scenario (such as the message subscription scenario), the edited business data information is the message data information to be sent (such as the price fluctuation information of a financial product). At this time, the information sending object can be the message pusher, and the information receiving object can be the message subscriber. At this time, there is no limitation on the application scenario of the technical solution of the present application.

[0084] S102: When the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, obtain a business key configured for the business data information.

[0085] Among them, the first business client can detect the amount of information data of the entered business data information, and when it is detected that the amount of information data is greater than the threshold value of the amount of information data, obtain the business key configured for the business data information. The business key can be a randomly generated string, or a string determined based on the business data information (for example, performing a hash calculation on the business data information, and obtaining a string of a specified length from the hash calculation result as the business key), or it can also be configured by the information sending object.

[0086] The business key can be used to encrypt the business data information to realize the encrypted transmission of the business data information. Optionally, the business data information can be encrypted and sent by default. It can also be that the business data information is sent in plain text by default, and when responding to the information encryption operation for the business data information, the business data information is encrypted and sent, that is, the business key is obtained.

[0087] For example, the information editing page includes an information encryption control for business data information. When the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the business key configured for the business data information is obtained in response to a trigger operation on the information encryption control.

[0088] Among them, it can be understood that the information sending scenario is different depending on the number of information receiving objects. When the number of information receiving objects is 1, the information sending scenario is a single information sending scenario; when the number of information receiving objects is greater than 1, the information sending scenario is a group information sending scenario.

[0089] It is understood that the information data volume threshold may be different according to the number of information receiving objects. For example, the data volume of the business key is the target data volume, and the first business client may determine the information data volume threshold associated with the business data information based on the number of information receiving objects and the target data volume. The data volume of the business key is less than or equal to the information data volume threshold.

[0090] For example, the relevant business personnel may set the initial data volume threshold corresponding to the target data volume based on the empirical value, and use the product of the initial data volume threshold and the number of objects of the information receiving object as the information data volume threshold. Alternatively, the relevant business personnel may configure the corresponding relationship between different object numbers and the information data volume threshold according to the number of objects of the information receiving object, and determine the information data volume threshold associated with the business data information based on the object relationship.

[0091] It can be understood that due to the low efficiency of asymmetric encryption, if the information data volume of the business data information is large, it will take a long time to asymmetric encrypt the business data information. Therefore, when the information data volume of the business data information is greater than the information data volume threshold, it can be symmetrically encrypted, and then the information receiving address with less data volume can be asymmetrically encrypted. However, the number of objects of information receiving objects is equal to the number of encryption times of the business key. When the number of objects of information receiving objects is too large, the number of encryption times of the business key will also be too large, that is, the total amount of encrypted data at this time is equal to the number of objects of information receiving objects multiplied by the amount of data of the business key. Therefore, the amount of encrypted data at this time may also be too much, and asymmetric encryption of the business key at this time will also affect the efficiency of information transmission.

[0092] Therefore, when determining the threshold of information data volume, for a single information transmission scenario, it can be determined based on the data volume of the business key. Correspondingly, for a group information transmission scenario, it can be determined comprehensively based on the data volume of the business key and the number of information receiving objects, so that the determination of the threshold of information data volume is more reliable, and then a more appropriate encryption method for business data information can be adaptively determined.

[0093] That is, the first service client can detect the number of information receiving objects in real time to determine the information data volume threshold associated with the service data information, and judge whether the information data volume of the service data information at this time is greater than the information data volume threshold.

[0094] For example, Figure 5 As shown, Figure 5 1 is a schematic diagram of an information editing page provided by an embodiment of the present application; wherein (1) an information editing page can be displayed on a first business client, the information editing page includes an input area 1 for business data information and an input area 2 for an information receiving object, the first business object can enter business data information in the input area 1 of the information editing page, and specify the information receiving object in the input area 2 of the information editing page, and the information editing page includes an information sending control (such as Figure 5 The "Send" control in the message sending control may be triggered to enable the first service client to respond to the message sending operation for the service data information. At this time, the service data information may be encrypted and sent.

[0095] Optionally, (2) the information editing page may also include an information encryption control for business data information (such as Figure 5 In the "Encryption" control), after the information encryption control is triggered, the business data information can be encrypted and sent in response to the trigger operation of the information sending control.

[0096] For example, the encrypted transmission of the business data information may be, upon detecting that the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, obtaining the business key configured for the business data information, and performing information encryption processing on the business data information by using the business key. For another example, upon detecting that the information data volume of the business data information is less than or equal to the information data volume threshold associated with the business data information, performing information encryption processing on the business data information by using the public key information of the information receiving object.

[0097] Optionally, the information editing page may also include an information timing control for the business data information (such as Figure 5 The "timing" control in the message can be triggered to send business data information on a regular basis.

[0098] S103 . In response to the information sending operation for the business data information, obtain the information receiving address of the information receiving object, and encrypt the business data information using the business key to obtain the business encryption information corresponding to the business data information.

[0099] The information receiving address is determined by the public key information of the information receiving object.

[0100] It can be understood that, when the first service client detects the information sending operation for the service data information, it can determine the information receiving object designated at this time to obtain the information receiving address of the information receiving object.

[0101] The business data information can be encrypted by the business key to obtain the business encrypted information. The information encryption process at this time is symmetric encryption.

[0102] Wherein, obtaining the information receiving address of the information receiving object may be: obtaining the public key information of the information receiving object; and using the public key information of the information receiving object as the information receiving address.

[0103] Alternatively, obtaining the information receiving address of the information receiving object may be: obtaining the public key information of the information receiving object; performing a hash calculation on the public key information of the information receiving object to obtain a hash calculation result corresponding to the public key information of the information receiving object; and determining the information receiving address based on the hash calculation result. For example, the public key address determined by the hash calculation result is used as the information receiving address.

[0104] It can be understood that one business object corresponds to one information processing address, and the information processing address is determined based on the public key information of the business object. When a business object is an information sending object, the information processing address of the business object is the information sending address. When a business object is an information receiving object, the information processing address of the business object is the information receiving address. For example, in the email sending and receiving scenario, the information processing address determined by the public key information of the business object is the email address of the business object, and emails can be sent and received through the information processing address. In this way, there is no need to send and receive emails through a certain email service provider, which avoids the unavailability of the mailbox due to the mailbox service provider and the loss of email data.

[0105] S104. Perform key encryption processing on the service key through the public key information corresponding to the information receiving address to obtain the service encryption key, and establish an encryption mapping relationship table between the information receiving address and the service encryption key.

[0106] The business key can be encrypted using the public key information corresponding to the information receiving object to obtain the business encryption key for the information receiving object, and the encryption mapping relationship between the information receiving address and the business encryption key can be recorded.

[0107] It can be understood that one information receiving object corresponds to one public key information, so after the business key is encrypted, one information receiving object corresponds to one business encryption key. When there are multiple information receiving objects, the encrypted mapping relationship records the mapping relationship between the information receiving address of each information receiving object and the corresponding business encryption key. Each information receiving object can obtain the business encryption key corresponding to each information receiving object from the mapping relationship according to its own information receiving address, and then obtain the business data information.

[0108] For example, Figure 6 As shown, Figure 6 : This is a schematic diagram of an information encryption process provided by an embodiment of the present application; wherein, the information receiving object includes information receiving objects a1-a3, and when the amount of information in the business data information is greater than the information data amount threshold, a business key is obtained, and in response to an information sending operation for the business data information, the information receiving address b1 of the information receiving object a1, the information receiving address b2 of the information receiving object a2, and the information receiving address b3 of the information receiving object a3 are obtained, and the business data information is encrypted through the business key (S61) to obtain the business encryption information corresponding to the business data information; the business key is encrypted through the public key information c1 corresponding to the information receiving address b1 (S621) to obtain the business encryption key d1, and the business key is encrypted through the public key information c2 corresponding to the information receiving address b2 The business encryption key d2 is obtained by performing key encryption processing (S622), and the business key is encrypted through the public key information c3 corresponding to the information receiving address b3 to obtain the business encryption key d3; a mapping relationship e1 between the information receiving address b1 and the business encryption key d1 is established (S631), a mapping relationship e2 between the information receiving address b2 and the business encryption key d2 is established (S632), and a mapping relationship e3 between the information receiving address b3 and the business encryption key d3 is established (S633); an encrypted mapping relationship table between the information receiving address and the business encryption key is established (S64) according to the mapping relationships e1-e3; the business encryption keys d1-d3, the encrypted mapping relationship table, and the business encryption information are sent to the information data processing node as the business sending data corresponding to the business data information.

[0109] S105: Send the encrypted mapping relationship table and the service encryption information to the information data processing node in the decentralized information data processing system.

[0110] Among them, the encrypted mapping relationship table and the business encryption information can be sent to the information data processing node as the information ciphertext data of the business data information for storage, completing a business data information sending process. The centralized information data processing system can be a blockchain system or a distributed system. That is, the business client can broadcast the information ciphertext data of the business data information to the centralized information data processing system.

[0111] Among them, the information receiving object can obtain the business encryption key and business encryption information determined by the public key information of the information sending object and sent by the information sending object to the information receiving object from the information data processing node through the second business client (that is, obtain the information ciphertext data sent by the information sending object), so that the information sending object can decrypt the business encryption key determined by the public key information of the information sending object through its own private key information to obtain the business key, and encrypt the business encryption information through the business key to obtain the business data information sent by the information sending object, thereby completing a business data information receiving process.

[0112] Among them, the second business client can obtain the business encryption key and business encryption information determined by the public key information of the information sending object from the information data processing node by means of a query request. For example, the second business client can generate a first information query request for a receiving information query address (such as an information receiving address corresponding to the business receiving object) and send it to the information data processing node. When the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, based on the first information query request, it queries the information receiving address matching the receiving information query address from the encryption mapping relationship table, and sends the business encryption key and business encryption information mapped to the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

[0113] Among them, the second business client can obtain the business encryption key and business encryption information determined by the public key information of the information sending object by synchronizing the data stored in the information data processing node. For example, the decentralized information data processing system is a blockchain system, the information data processing node is a blockchain node, and the information data processing node is used to link the received encryption mapping relationship table and business encryption information to the blockchain. The second business client can synchronize the business block on the blockchain with the information data processing node, and read the business encryption key and business encryption information determined by the public key information of the information sending object from the synchronized business block.

[0114] Among them, taking the application in the email sending and receiving scenario as an example, the original centralized email system can be changed to a decentralized email system. The email sending and receiving process can be completed through the information data processing node in the decentralized email system. That is, the email sending object sends the email ciphertext data (or email plaintext data) to the decentralized email system, and the email ciphertext data is stored by the information data processing node in the decentralized email system, and the email receiving object obtains the email ciphertext data (or email plaintext data) through the information data processing node. Through the decentralized email system, the efficiency of information sending can be improved while ensuring the safe sending and receiving of email data. And in the email mass sending scenario, compared with the method of encrypting the email data information through the public key information of each information receiving object respectively, and uploading the encryption results corresponding to each information receiving object to the decentralized email system respectively, the technical solution of the present application can realize a one-time upload of email data information through an encrypted mapping relationship table. That is, by recording the encryption mapping relationship corresponding to each information receiving object through the encryption mapping relationship table, uploading the encryption mapping relationship table can realize uploading of the encryption result corresponding to each information receiving object, which can reduce the number of data uploads and reduce the waste of storage resources on the decentralized mail system.

[0115] Among them, it can be understood that when the business object performs key pair generation processing on the business client and obtains a public key information and a private key information, it means that the business object has completed the email registration on the business client. At this time, the information processing address determined by the public key information of the business object can be used as the email address of the business object. The private key information of the business object is properly stored, such as encrypted storage, on the terminal device corresponding to the business client. The public key information of the business object is handed over to possible contacts through reliable online or offline means for subsequent use as an email address. In addition, the generation of a key pair through an asymmetric encryption algorithm indicates the completion of the user registration of the business object on the business client, that is, the user registration process (i.e., generating a key pair, securely storing the private key information on the terminal device, and providing the public key information to other business objects) can be completed offline.

[0116] In addition, when the business object opens the business client, the business client can log in through user authorization (the authorization process varies according to the hardware and operating system, such as verifying biometric information), or log in by email by obtaining the locally encrypted private key information for decryption. If the decryption is successful, the email list interface of the business client will be entered normally. If the encryption fails to obtain the locally encrypted private key information, the login failure will be prompted.

[0117] It can be understood that when the business object successfully enters the business client, it has obtained the private key information for successful decryption. The business client can use the private key information to try to decrypt the client ciphertext data cached in the business client. If the decryption is successful, the decrypted client data (such as the email title list) will be displayed to the business object. When the business object clicks on the corresponding email, it will enter the corresponding email original page. In other words, the client data cached by the business client is the email information viewed by the last login to the business client. These client data can be symmetrically encrypted using the private key information. When the business client logs in next time, these client ciphertext data can be decrypted using the private key information to view the email information viewed by the last login to the business client.

[0118] In addition, each time the business client logs in, the full amount of mail data (such as mail data sent by the business object, or mail data sent to the business object by other business objects) can be re-pulled from the information data processing node.

[0119] It can be understood that the technical solution of the present application can be applied to the scenario where the amount of email data to be sent is too large in mass email and single email. In this case, a combination of asymmetric encryption and symmetric encryption can be used to improve the data encryption efficiency and information sending efficiency. In other words, the appropriate encryption method can be adaptively selected according to the amount of information data of the business data information to be sent to encrypt and send the business data information.

[0120] An embodiment of the present application proposes an information sending mechanism, which may specifically be that when the business object corresponding to the first business client is the information sending object, an information editing page is output, and the information sending object can enter the business data information to be sent to the information receiving object on the information editing page, and when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the business key configured for the business data information is obtained, and in response to the information sending operation for the business data information, the information receiving address determined by the public key information of the information receiving object is obtained, and the business data information is encrypted (i.e., symmetric encryption) by the business key to obtain the business encryption information corresponding to the business data information, and at the same time, the business key can be encrypted (i.e., asymmetric encryption) by the public key information corresponding to the information receiving address to obtain the business encryption key, and establish the information receiving address and the information receiving address. The encrypted mapping relationship table between the business encryption keys, at this time, the encrypted mapping relationship table and the business encryption information can be sent to the information data processing node in the decentralized information data processing system to realize the information sending process for the business data information. In this way, when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client can decrypt the business encryption key mapped by the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information by the business key to obtain the business data information. In other words, when the amount of information data of the business data information is too large, the business data information can be symmetrically encrypted by the business key first, and then the business key can be asymmetrically encrypted by the public key information of the information receiving object (recipient). It can be understood that the encryption efficiency of symmetric encryption is greater than that of asymmetric encryption. Therefore, when the amount of information data is too large, it can be first encrypted symmetrically using the business key, and then the business key with a smaller data volume can be encrypted asymmetrically. This can increase the information encryption speed and thus improve the information sending efficiency of the business data information. In addition, the business data information is encrypted and sent in the form of business encryption information, and the business key used to encrypt the business data information is encrypted and sent through the public key information corresponding to the information receiving address. This can ensure the sending security of the business key and business data information.

[0121] For further information, see Figure 7 , Figure 7 is a flow chart of a method for sending information provided by an embodiment of the present application, such as Figure 7As shown, the method can be executed by the computer device mentioned above, and the computer device can be a terminal device configured with a first service client. For example, the terminal device can be the above-mentioned Figure 1 Any terminal device in, such as terminal device 100a. The method may specifically include the following steps S201-S205:

[0122] S201. When the business object corresponding to the first business client is an information sending object, an information editing page for editing business data information is output, and business data information to be sent to the information receiving object is entered on the information editing page.

[0123] S202: When the amount of information of the business data information is greater than the threshold of the amount of information associated with the business data information, in response to the triggering operation of the information encryption control, obtain the business key configured for the business data information. The specific implementation of steps S201-S202 can refer to the relevant description of the above embodiment, which will not be repeated here.

[0124] S203, in response to the information sending operation for the business data information, obtain N information receiving addresses of N information receiving objects, and encrypt the business data information using the business key to obtain business encryption information corresponding to the business data information.

[0125] The information receiving address is determined by the public key information of the information receiving object. The method for obtaining the information receiving address can refer to the relevant description of the above embodiment, which will not be repeated here.

[0126] The information receiving object may be one or more. N is a positive integer.

[0127] It can be understood that when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the encryption method for the business data information is symmetric encryption.

[0128] Optionally, when the information data volume of the business data information is less than or equal to an information data volume threshold associated with the business data information, the encryption method for the business data information may be asymmetric encryption. That is, in response to an information sending operation for business data information (optionally, before the information sending operation is detected, it may also be necessary for the information sending object to trigger an information encryption control, and the first business client needs to respond to the trigger operation), obtain the information receiving address of the information receiving object; encrypt the business data information through the public key information corresponding to the information receiving address to obtain the reference business encryption information corresponding to the business data information, and establish a reference encryption mapping relationship table between the information receiving address and the reference business encryption information; send the reference encryption mapping relationship table (as information ciphertext data) to the information data processing node, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the reference encryption mapping relationship table based on the first information query request, and sends the reference business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the reference business encryption information mapped by the queried information receiving address according to the private key information of the information receiving object, and decrypt to obtain the business data information.

[0129] It can be understood that at this time, the reference encryption mapping table records the mapping relationship between the information receiving address of each information receiving object and the corresponding reference business encryption information. Each information receiving object can obtain the reference business encryption information corresponding to each information receiving object from the mapping relationship according to its own information receiving address, and then obtain the business data information.

[0130] Among them, the information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object. Therefore, the business data information is encrypted by the public key information corresponding to the information receiving address to obtain the reference business encryption information corresponding to the business data information, and the reference encryption mapping relationship table between the information receiving address and the reference business encryption information is established, which can be: the business data information is encrypted by the public key information corresponding to the first information receiving address to obtain the first reference business encryption information corresponding to the business data information; the business data information is encrypted by the public key information corresponding to the second information receiving address to obtain the second reference business encryption information corresponding to the business data information; a first reference mapping relationship is established between the first information receiving address and the first reference business encryption information, and a second reference mapping relationship is established between the second information receiving address and the second reference business encryption information; the reference encryption mapping relationship table is determined based on the first reference mapping relationship and the second reference mapping relationship.

[0131] It can be understood that when the information receiving object includes three or more information receiving objects, the process of establishing the reference encryption mapping relationship table is the same as the above process.

[0132] S204. Perform key encryption processing on the business key using the public key information corresponding to the N information receiving addresses to obtain N business encryption keys, and establish an encryption mapping relationship table between the N information receiving addresses and the N business encryption keys.

[0133] Wherein, when the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object, establishing an encrypted mapping relationship table may be: performing key encryption processing on the business key through the public key information corresponding to the first information receiving address to obtain a first business encryption key corresponding to the business key; performing key encryption processing on the business key through the public key information corresponding to the second information receiving address to obtain a second business encryption key corresponding to the business key; establishing a first mapping relationship between the first information receiving address and the first business encryption key, and establishing a second mapping relationship between the second information receiving address and the second business encryption key; determining an encrypted mapping relationship table based on the first mapping relationship and the second mapping relationship. The encrypted mapping relationship table includes mapping relationships between N information receiving addresses and corresponding business encryption keys among the N business encryption keys.

[0134] It can be understood that when the information receiving object includes three or more information receiving objects, the process of establishing the encryption mapping relationship table is the same as the above process.

[0135] For example, Figure 8-Figure 9 As shown, Figure 8-Figure 9 is a schematic diagram of an information encryption process provided by an embodiment of the present application; wherein, Figure 8 , obtain the information data volume of the business data information, and determine whether the information data volume is greater than the information data volume threshold; when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, obtain the business key configured for the business data information; when sending the business data information, encrypt the business data information with the business key (1.1) to obtain the business encryption information corresponding to the business data information, and encrypt the business key with the public key information corresponding to the information receiving address (1.2) to obtain the business encryption key, (1.3) establish an encryption mapping relationship table between the information receiving address and the business encryption key, and The business encryption key, the encryption mapping relationship table, and the business encryption information are sent (1.4) to the information data processing node in the decentralized information data processing system; when the information data volume of the business data information is less than or equal to the information data volume threshold associated with the business data information, and when the business data information is sent, the business data information is encrypted (2.1) by the public key information corresponding to the information receiving address to obtain the reference business encryption information corresponding to the business data information, and a reference encryption mapping relationship table between the information receiving address and the reference business encryption information is established (2.2), and the reference encryption mapping relationship table is sent (2.3) to the information data processing node.

[0136] Among them, Fig. 9The information receiving objects include information receiving objects a1-a3. When the amount of information in the business data information is less than or equal to the information data amount threshold, in response to the information sending operation for the business data information, the information receiving address b1 of the information receiving object a1, the information receiving address b2 of the information receiving object a2, and the information receiving address b3 of the information receiving object a3 are obtained; the business data information is encrypted with a key through the public key information c1 corresponding to the information receiving address b1 (S911), and the reference business encryption information f1 is obtained; the business data information is encrypted with a key through the public key information c2 corresponding to the information receiving address b2 (S912), and the reference business encryption information f2 is obtained; the business data information is encrypted with a key through the public key information c3 corresponding to the information receiving address b3 (S914), and the reference business encryption information f2 is obtained. 3. Perform key encryption processing on the business data information (S913) to obtain reference business encryption information f3; establish (S921) a reference mapping relationship g1 between the information receiving address b1 and the reference business encryption information f1, establish (S922) a reference mapping relationship g2 between the information receiving address b2 and the reference business encryption information f2, and establish (S923) a reference mapping relationship g3 between the information receiving address b3 and the reference business encryption information f3; establish (S93) a reference encryption mapping relationship table between the information receiving address and the reference business encryption information according to the reference mapping relationships g1-g3; the reference encryption mapping relationship table is sent to the information data processing node as the business sending data (i.e., the information ciphertext data) corresponding to the business data information.

[0137] S205: Send the encrypted mapping relationship table and the business encryption information to the information data processing node in the decentralized information data processing system.

[0138] Among them, when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encryption mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped by the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

[0139] It can be understood that for single-message scenarios or group-message scenarios, and for whether the encryption method for business data information is asymmetric encryption or symmetric encryption, the process and principle of the second business client (or the first business client) obtaining the data sent by the information sending object to the information receiving object from the information data processing node are the same.

[0140] It can be understood that the information receiving object can be the information sending object. If the information receiving object includes the information sending object, the information receiving address includes the reference receiving address determined by the public key information of the information sending object (i.e., the information processing address of the information sending object). In this case, the first service client is also the second service client.

[0141] Among them, the way for the second business client to obtain data information sent by other business objects (which may include business object a) to the information sending object (such as business object a) from the information data processing node may be: generating a first information query request based on a reference receiving address; sending the first information query request to the information data processing node, so that when the information data processing node queries the information receiving address that matches the receiving information query address (that is, the information receiving address of the information receiving object) from the encryption mapping relationship table, and queries the business encryption key and business encryption information mapped to the information receiving address that matches the receiving information query address, it generates a first query success prompt message for the first information query request; when receiving the first query success prompt message returned by the information data processing node, based on the first query success prompt message, obtain the business encryption key and business encryption information mapped to the information receiving address that matches the receiving information query address from the information data processing node.

[0142] Among them, it can be understood that the second business client can continuously query the information data processing node for the latest data information sent by other business objects to the information receiving object (such as business object a), that is, the first information query request can carry the query time period. The information data processing node can query whether there is an information receiving address that matches the received information query address from the encryption mapping relationship table associated with the query time period, and when the information receiving address that matches the received information query address is queried, the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address are obtained. The business data information sent by other business objects (including the business receiving object) to the business receiving object can be determined by the business encryption key and business encryption information mapped to the information receiving address of the business receiving object.

[0143] For example, the second business client may periodically generate a first information query request, and the query time period in the first information query request is a time period corresponding to a period. Alternatively, the second business client may generate a first information query request in response to an information collection operation. The query time period corresponding to the first information query request is a time period consisting of the maximum receiving time corresponding to the business data information received in the second business client and the response time of the information collection operation. Alternatively, the query time period may be specified by the business object corresponding to the second business client.

[0144] It can be understood that the encryption mapping relationship table associated with the query time period is the encryption mapping relationship table corresponding to the business data information whose sending time (such as the response time of the information sending operation for the business data information) belongs to the query time period. In other words, the second business client can determine whether other business objects send business data information to the information receiving object through the first business client within the query time period based on the first information query request, and obtain the business encryption key and business encryption information mapped to the information receiving address of the information receiving object sent within the query time period from the information data processing node.

[0145] It can be understood that the information data processing node can perform distributed storage of the received business encryption key, encryption mapping relationship table, and business encryption information, such as storing the business encryption key, encryption mapping relationship table, and business encryption information by some information data processing nodes. Therefore, when the information data processing node obtains the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address, it first returns the first query success prompt information to the second business client. The first query success prompt information includes the node address of the information data processing node. Based on the first query success prompt information, the second business client can obtain the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address from the information data processing node corresponding to the node address. For example, information data processing nodes 1-3 all query the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address, and all return the first query success prompt information to the second business client. The second business client can select the information data processing node with the nearest network address from the information data processing nodes 1-3 based on the node address in the first query success prompt information to obtain the queried business encryption key and business encryption information mapped to the information receiving address that matches the received information query address.

[0146] It can be understood that when the second business client obtains the business encryption key and business encryption information mapped to the information receiving address matching the information receiving query address, the business encryption key can be decrypted by the second business client to obtain the business key, and the business encryption information can be decrypted by the business key to obtain the business data information.

[0147] It can be understood that the encrypted mapping relationship table associated with the query time period may include an encrypted mapping relationship table that records the mapping relationship between the information receiving address and the business encryption key, and may also include a reference encrypted mapping relationship table that records the mapping relationship between the information receiving address and the reference business encryption information. Therefore, when the information data processing node obtains the reference encrypted mapping relationship table, it queries the information receiving address that matches the received information query address from the reference encrypted mapping relationship table, and when the information receiving address that matches the received information query address is queried, it obtains the reference business encryption information mapped to the queried information receiving address. At this time, the information data processing node can return the first query success prompt information to the second business data client, and the second business data client obtains the reference business encryption information mapped to the queried information receiving address from the information data processing node based on the first query success prompt information, and decrypts the reference business encryption information through the private key information of the information receiving object to obtain the business data information.

[0148] That is to say, when the information receiving object queries the information data processing node for data information sent to the information receiving object by other business objects, a first information query request can be generated based on the query time period and the receiving information query address. The information data processing node can query the information receiving address that matches the receiving information query address from the encryption mapping relationship table associated with the query time period to obtain the business encryption key and business encryption information mapped to the information receiving address that matches the receiving information query address. The business encryption key and business encryption information mapped to the information receiving address that matches the receiving information query address are the data information that the information receiving object should receive from the information data processing node. Therefore, the receiving information query address of a business object is used to query the data information that the business object should receive, that is, to obtain the business data information sent to the business object by other business objects.

[0149] For example, the encryption mapping relationship table associated with the query time period includes encryption mapping relationship table 1 and reference encryption mapping relationship table 1, encryption mapping relationship table 1 includes mapping relationship 1 corresponding to information receiving address 1 and business encryption key 1, and mapping relationship 2 corresponding to information receiving address 2 and business encryption key 2; reference encryption mapping relationship table 1 includes reference mapping relationship 1 corresponding to information receiving address 1 and reference business encryption information 1, and reference mapping relationship 2 corresponding to information receiving address 2 and reference business encryption information 2; if the received information query address is information receiving address 1, when information receiving address 1 is queried from encryption mapping relationship table 1, business encryption key 1 mapped to information receiving address 1 and business encryption information corresponding to encryption mapping relationship table 1 are obtained based on mapping relationship 1, and when information receiving address 1 is queried from reference encryption mapping relationship table 1, reference business encryption information 1 mapped to information receiving address 1 is obtained based on reference mapping relationship 1. When the second business client obtains the business encryption key 1 mapped by the information receiving address 1 and the business encryption information corresponding to the encryption mapping relationship table 1, it can determine the business data information corresponding to the encryption mapping relationship table 1 through the private key information of the business object corresponding to the second business client, that is, the business data information sent by the business sending object to the business object corresponding to the second business client within the query time period; and when the reference business encryption information 1 mapped by the information receiving address 1 is obtained, the business data information corresponding to the encryption mapping relationship table 2 can be determined through the private key information of the business object corresponding to the second business client, that is, the business data information sent by the business sending object to the business object corresponding to the second business client within the query time period.

[0150] It can be understood that the information processing address of the information receiving object is the information receiving address for the business data information. When the encrypted mapping relationship table is sent to the information data processing node, it is also equivalent to sending the information receiving address of the business data information to the information data processing node. In this way, the second business client can query whether the information receiving address of the business data information contains the received information query address through the received information query address to obtain the corresponding received data information.

[0151] Similarly, the information processing address of the information sending object is the information sending address for the business data information. For example, the reference receiving address determined by the public key information of the information sending object is the information sending address of the information sending object. When the information data volume of the business data information is greater than the information data volume threshold, the public key information of the information sending object is used to perform key encryption processing on the business key to obtain a reference business encryption key; at this time, the encryption mapping relationship table includes the mapping relationship between the information sending address of the information sending object and the reference business encryption key. In other words, when the encryption mapping relationship table is sent to the information data processing node, it is also equivalent to sending the information sending address of the business data information to the information data processing node. In this way, the first business client can query whether the information sending address of the business data information is the sending information query address by sending the information query address to obtain the data information sent by itself. Therefore, the sending information query address of a business object is used to query the data information sent by the business object, that is, to obtain the business data information sent by the business object.

[0152] That is to say, the first business client can use the reference receiving address as the sending information query address, and generate a second information query request based on the sending information query address; send the second information query request to the information data processing node, so that when the information data processing node queries the information sending address that matches the sending information query address from the encryption mapping relationship table, and queries the reference business encryption key and business encryption information mapped to the information sending address that matches the sending information query address, it generates a second query success prompt message for the second information query request; when receiving the second query success prompt message returned by the information data processing node, based on the second query success prompt message, obtain the reference business encryption key and business encryption information mapped to the information sending address that matches the sending information query address from the information data processing node.

[0153] The second information query request may carry a query time period. The information data processing node may query whether there is an information sending address that matches the information query sending address from the encryption mapping relationship table associated with the query time period, and when an information sending address that matches the information query sending address is queried, the reference business encryption key and business encryption information mapped to the information sending address that matches the information query sending address are obtained. The business data information sent by the business receiving object to other business objects may be determined by the reference business encryption key and business encryption information mapped to the information sending address of the business sending object.

[0154] For example, the first service client may generate a first information query request in response to an information collection operation. The query time period corresponding to the first information query request may be used to indicate to pull the full amount of data information sent by the service object corresponding to the first service client. Alternatively, the query time period may be specified by the service object corresponding to the first service client.

[0155] Similarly, when the amount of information data of the business data information is less than or equal to the information data amount threshold, the public key information of the information sending object is used to encrypt the business data information to obtain reference business encryption information; at this time, the encryption mapping relationship table includes the mapping relationship between the information sending address of the information sending object and the reference business encryption information.

[0156] It can be understood that the information data processing node can query whether there is an information sending address that matches the information sending query address from the encryption mapping relationship table associated with the query time period, and when the information sending address that matches the information sending query address is queried, the reference business encryption information mapped to the information sending address that matches the information sending query address is obtained. The business data information sent by the business receiving object to other business objects can be determined through the reference business encryption information mapped to the information sending address of the business sending object.

[0157] For example, Fig.10 As shown, Fig.10It is a schematic diagram of a mapping relationship table provided in an embodiment of the present application; wherein, the encrypted mapping relationship table 1 includes the mapping relationship between the information sending address and the reference business encryption key, the mapping relationship between the information receiving address 1 and the business encryption key 1, the mapping relationship between the information receiving address 2 and the business encryption key 2,..., the mapping relationship between the information receiving address m and the business encryption key m. It can be understood that when the information data processing node receives a second information query request, and the encryption mapping relationship table associated with the query time period indicated by the second information query request includes the encryption mapping relationship table 1, based on the second information query request, the information sending address matching the sending information query address is queried in the encryption mapping relationship table 1, if the information sending address is an information sending address matching the sending information query address, then based on the encryption mapping relationship table 1, the reference business encryption key mapped to the information sending address and the business encryption information 1 corresponding to the encryption mapping relationship table 1 are obtained; when the information data processing node receives a first information query request, and the encryption mapping relationship table associated with the query time period indicated by the first information query request includes the encryption mapping relationship table 1, based on the first information query request, the information receiving address matching the receiving information query address is queried in the encryption mapping relationship table 1, if the information receiving address is an information receiving address 2 matching the receiving information query address, then based on the encryption mapping relationship table 1, the business encryption key 2 mapped to the information receiving address 2 and the business encryption information 1 corresponding to the encryption mapping relationship table 1 are obtained.

[0158] For example, Fig.11 As shown, Fig.11It is a schematic diagram of a mapping relationship table provided in an embodiment of the present application; wherein, the reference encrypted mapping relationship table 1 includes the mapping relationship between the information sending address and the reference business encryption information 1, the mapping relationship between the information receiving address 1 and the reference business encryption information 2, the mapping relationship between the information receiving address 2 and the reference business encryption information 3,..., the mapping relationship between the information receiving address m and the reference business encryption information m+1. It can be understood that when the information data processing node receives a second information query request, and the encryption mapping relationship table associated with the query time period indicated by the second information query request includes the reference encryption mapping relationship table 1, based on the second information query request, the information sending address matching the sending information query address is queried in the reference encryption mapping relationship table 1, if the information sending address is the information sending address matching the sending information query address, then the reference business encryption information 1 mapped by the information sending address is obtained based on the reference encryption mapping relationship table 1; when the information data processing node receives a first information query request, and the encryption mapping relationship table associated with the query time period indicated by the first information query request includes the reference encryption mapping relationship table 1, based on the first information query request, the information receiving address matching the receiving information query address is queried in the reference encryption mapping relationship table 1, if the information receiving address is the information receiving address 2 matching the receiving information query address, then the reference business encryption information 3 mapped by the information receiving address 2 is obtained based on the reference encryption mapping relationship table 1.

[0159] Among them, the information data processing node can be a blockchain node, and the information data processing node can be used to link the received encrypted mapping relationship table and business encryption information to the blockchain. Therefore, the information receiving object can also obtain the data information to be received by synchronizing the blockchain.

[0160] For example, if the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object. At this time, the first business client is the second business client. The second business client uses the information processing address of the business object corresponding to the second business client as the receiving information query address, and can synchronize the business block on the blockchain to the information data processing node; in the encrypted mapping relationship table included in the synchronized business block, query the information receiving address that matches the receiving information query address, and when the information receiving address that matches the receiving information query address is queried, obtain the business encryption key and business encryption information mapped to the information receiving address that matches the receiving information query address from the synchronized business block.

[0161] That is to say, every time a business block is synchronized, the second business client can query whether there is data information to be received in the synchronized business block, and obtain the data information to be received from the synchronized business block (that is, the business encryption key and business encryption information mapped by the information receiving address that matches the receiving information query address, or the reference business encryption information mapped by the information receiving address that matches the receiving information query address) to obtain the business data information sent by the first business client.

[0162] Similarly, the first business client will also synchronize the business block on the blockchain from the information data processing node. When the first business client needs to query the data information sent by the first business client, the information processing address of the business object corresponding to the first business client can be used as the sending information query address, and the sent data information (i.e., the reference business encryption key and business encryption information mapped by the information sending address matching the sending information query address, or the reference business encryption information mapped by the information sending address matching the sending information query address) can be obtained from the synchronized business block to obtain the business data information sent by the first business client.

[0163] For example, Fig.12 As shown, Fig.12 It is a schematic diagram of an information processing process provided by an embodiment of the present application; taking the application of the technical solution of the present application in the email sending and receiving scenario as an example, the business client is an email client; the email client a responds to the email sending trigger operation of the information sending object (such as business object a), outputs an email editing page for editing email data information, and business object a enters the email data information to be sent to the information receiving object (such as business object bc) on the email editing page; in response to the email sending operation for the email data information (triggering the "Send" control), obtains the information receiving address of the business object bc (that is, the information processing address of the business object bc), and encrypts the email data information through the public key information corresponding to the information receiving address of the business object bc, obtains the email ciphertext data for sending, and sends the email ciphertext data to the information data processing node in the decentralized information data processing system. The information receiving address and the information sending address (that is, the information processing address of the business object a) are recorded in the email ciphertext data.

[0164] At this time, business object b can use email client b to use its own information processing address as the receiving information query address to generate a first information query request 1, and send the first information query request 1 to the information data processing node to obtain the email ciphertext data associated with the information receiving address that matches the receiving information query address.

[0165] Correspondingly, the business object c can use its own information processing address as the receiving information query address through the email client c to generate a first information query request 2, and send the first information query request 2 to the information data processing node to obtain the email ciphertext data associated with the information receiving address that matches the receiving information query address.

[0166] Among them, performing information encryption processing on the email data information to obtain the email ciphertext data for sending can be, when the information data volume of the email data information is greater than the information data volume threshold associated with the email data information, obtaining the business key configured for the email data information, performing information encryption processing on the email data information through the business key to obtain the email encryption information corresponding to the email data information, performing key encryption processing on the business key through the public key information corresponding to the information receiving address bc of the business object bc to obtain the business encryption key bc, establishing a mapping relationship bc between the information receiving address bc and the business encryption key bc, and performing key encryption processing on the business key through the public key information corresponding to the information sending address a of the business object a to obtain the reference business encryption key a, establishing a mapping relationship a between the information sending address a and the reference business encryption key a, determining the encryption mapping relationship table based on the mapping relationship ac, and using the encryption mapping relationship table and the email encryption information as the email ciphertext data.

[0167] Among them, the information encryption processing of the email data information to obtain the email ciphertext data for sending can be, when the information data volume of the email data information is less than or equal to the information data volume threshold associated with the email data information, the email data information is key-encrypted through the public key information corresponding to the information receiving address bc of the business object bc to obtain reference email encryption information bc, and a mapping relationship bc between the information receiving address and the reference email encryption information bc is established; and the email data information is key-encrypted through the public key information corresponding to the information sending address a of the business object a to obtain reference email encryption information a, and a mapping relationship a between the information sending address a and the reference email encryption information a is established, and a reference encryption mapping relationship table is determined based on the mapping relationship ac, and the reference encryption mapping relationship table is used as the email ciphertext data.

[0168] For example, Figure 13-14 As shown, Figure 13-14 is a schematic diagram of an information processing process provided by an embodiment of the present application; wherein, Fig.13, take the process of business object b obtaining the email ciphertext data associated with the information receiving address matching the received information query address as an example; the email client b corresponding to the business object b generates a first information query request 1, (S131) ​​sends the first information query request 1 to the information data processing node (such as information data processing node 13a-13c) in the decentralized information data processing system, and the information data processing node 13a-c queries the information receiving address matching the received information query address from the encryption mapping relationship table associated with the query time period indicated by the first information query request 1 (S132). If the information receiving address queried by the information data processing node 13a-13b matches the received information query address, the email ciphertext data associated with the queried information receiving address is obtained, and (S133) a first query success prompt message is generated; the information data processing node 13a -13b returns the first query success prompt information (S134) to the email client b corresponding to the business object b; the email client b corresponding to the business object b selects any information data processing node (such as information data processing node 13a) from the information data processing nodes 13a-13b, and sends (S135) a first information acquisition request to the information data processing node 13a based on the first query success prompt information returned by the information data processing node a; the information data processing node 13a returns (S136) the email ciphertext data associated with the queried information receiving address (for example, the business encryption key and email encryption information mapped to the queried information receiving address that matches the received information query address, or the reference email encryption information mapped to the queried information receiving address that matches the received information query address) to the email client b corresponding to the business object b based on the first information acquisition request.

[0169] That is, the mail client can obtain the latest received mail data in the above manner, and when the mail data information is obtained by decrypting the mail ciphertext data, it prompts the business object that a new mail has arrived.

[0170] It can be understood that when the decentralized information data processing system is a blockchain system or a distributed system, the above method can be used to obtain data information from the information data processing node.

[0171] Optionally, when the decentralized information data processing system is a blockchain system, the process of obtaining the email ciphertext data associated with the information receiving address matching the information receiving query address may also be as follows: Fig.14; Wherein, the information data processing node is used to maintain the blockchain, and the information data processing node (such as the information data processing node 13a) links the received email ciphertext data to the blockchain. The email client b corresponding to the business object b can synchronize (S141) the business block from the blockchain through the information data processing node. The email client b corresponding to the business object b can obtain (S142) the email ciphertext data associated with the information receiving address that matches the received information query address from the synchronized business block. That is, the email client b corresponding to the business object b can determine the encrypted mapping relationship table associated with the query time period from the synchronized business block, and query the information receiving address that matches the received information query address from the determined encrypted mapping relationship table.

[0172] It can be understood that the process of business object a obtaining the email ciphertext data associated with the information sending address matching the information sending query address is the same as the process of business object bc obtaining the email ciphertext data associated with the information receiving address matching the information receiving query address.

[0173] It can be understood that when the business data information is sent in plain text, such as when the business data information is email data information, it is sent in email plain text data, and the email plain text data includes the information sending address, email data information and information receiving address. The information data processing node can query the information receiving address that matches the information query address from the email plain text data associated with the query time period (i.e., the email plain text data sent within the query time period), and return the email data information corresponding to the information receiving address that matches the information query address to the second business client.

[0174] That is to say, the information data processing node can obtain the email data associated with the query time period indicated by the business object, the email data includes email plaintext data (i.e., information plaintext data) and email ciphertext data, and query the data information sent to the business object from the email plaintext data and the email ciphertext data respectively.

[0175] An embodiment of the present application proposes an information sending mechanism, which may specifically be that when the business object corresponding to the first business client is the information sending object, an information editing page is output, and the information sending object can enter the business data information to be sent to the information receiving object on the information editing page, and when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the business key configured for the business data information is obtained, and in response to the information sending operation for the business data information, the information receiving address determined by the public key information of the information receiving object is obtained, and the business data information is encrypted (i.e., symmetric encryption) by the business key to obtain the business encryption information corresponding to the business data information, and at the same time, the business key can be encrypted (i.e., asymmetric encryption) by the public key information corresponding to the information receiving address to obtain the business encryption key, and establish the information receiving address and the information receiving address. The encrypted mapping relationship table between the business encryption keys, at this time, the encrypted mapping relationship table and the business encryption information can be sent to the information data processing node in the decentralized information data processing system to realize the information sending process for the business data information. In this way, when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client can decrypt the business encryption key mapped by the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information by the business key to obtain the business data information. In other words, when the amount of information data of the business data information is too large, the business data information can be symmetrically encrypted by the business key first, and then the business key can be asymmetrically encrypted by the public key information of the information receiving object (recipient). It can be understood that the encryption efficiency of symmetric encryption is greater than that of asymmetric encryption. Therefore, when the amount of information data is too large, it can be first encrypted symmetrically using the business key, and then the business key with a smaller data volume can be encrypted asymmetrically. This can increase the information encryption speed, and thus improve the information sending efficiency of business data information in single-message scenarios or group-message scenarios; in addition, the business data information is encrypted and sent in the form of business encryption information, and the business key used to encrypt the business data information is encrypted and sent using the public key information corresponding to the information receiving address. This can ensure the sending security of the business key and business data information.

[0176] For further information, see Fig.15 , Fig.15 is a flow chart of a method for sending information provided by an embodiment of the present application, such as Fig.15As shown, the method can be executed by the computer device mentioned above, and the computer device can be an information data processing node. For example, the information data processing node can be the above Figure 1 Any information data processing node in the decentralized information data processing system 200 shown. The method may specifically include the following steps S301-S302:

[0177] S301. When receiving an encrypted mapping relationship table and service encryption information sent by a first service client corresponding to a service sending object, the encrypted mapping relationship table and the service encryption information are stored.

[0178] Among them, the encryption mapping relationship table is established based on the mapping relationship between the information receiving address and the business encryption key. The business encryption key is obtained by encrypting the business key with the public key information corresponding to the information receiving address. The information receiving address is determined by the public key information of the information receiving object. The business encryption information corresponding to the business data information is obtained by the first business client encrypting the business data information with the business key configured for the business data information when responding to the information sending operation of the information sending object for the business data information and obtaining the information receiving address of the information receiving object. The business key is obtained when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information. The business data information is the data information to be sent to the information receiving object entered by the information sending object on the information editing page. The information editing page is used to edit the business data information. Among them, the specific description related to the first business client can refer to the relevant description of the above embodiment, which will not be repeated here.

[0179] S302. When a first information query request is received from a second business client corresponding to an information receiving object through an information query address, an information receiving address matching the information query address is queried from an encryption mapping relationship table based on the first information query request, and the business encryption key and business encryption information mapped to the queried information receiving address are sent to the second business client corresponding to the information receiving object.

[0180] Wherein, based on the first information query request, querying the information receiving address matching the received information query address from the encrypted mapping relationship table, and sending the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object may be: based on the first information query request, querying the information receiving address matching the received information query address from the encrypted mapping relationship table; when the business encryption key and business encryption information mapped by the information receiving address matching the received information query address are queried, generating the first query success prompt information for the first information query request; returning the first query success prompt information to the second business client corresponding to the information receiving object, so that the second business client obtains the business encryption key and business encryption information mapped by the queried information receiving address matching the received information query address from the information data processing node based on the first query success prompt information. Wherein, the specific description related to the second business client can refer to the relevant description of the above embodiment, which is not repeated here.

[0181] Optionally, the information data processing node may store the encrypted mapping relationship table and the business encryption information in a distributed storage or on a blockchain. At this time, the second business client may obtain the business encryption key and business encryption information mapped to the information receiving address matching the received information query address in a manner that, upon receiving the data synchronization request sent by the second business client corresponding to the information receiving object, the information data processing node synchronizes the business block on the blockchain to the second business client corresponding to the information receiving object, so that the second business client corresponding to the information receiving object obtains the business encryption key and business encryption information mapped to the information receiving address matching the received information query address from the synchronized business block.

[0182] The specific process of the second service client (or the first service client) acquiring data information from the information data processing node can refer to the relevant description of the above embodiment, which will not be repeated here.

[0183] For example, Fig.16 As shown, Fig.16161. The terminal device a corresponding to the business client a outputs an information editing page for editing business data information when the business object a corresponding to the business client a is the information sending object; S162. The business client a enters the business data information to be sent to the information receiving object on the information editing page; S163. When the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the business client a obtains the business key configured for the business data information; S164. The business client a obtains the information receiving address of the information receiving object in response to the information sending operation for the business data information, and performs information encryption processing on the business data information through the business key to obtain the business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object; S165. The business client a performs key encryption processing on the business key through the public key information corresponding to the information receiving address to obtain the business encryption key, and establishes an encryption mapping relationship table between the information receiving address and the business encryption key; S166. The business client a sends the encryption mapping relationship table and the business encryption information to the decentralized information data. The information data processing node in the data processing system; S167, the information data processing node stores the encryption mapping relationship table and the business encryption information; S168, the business client b corresponding to the business object b (that is, the information receiving object specified by the business object a) generates a first information query request corresponding to the receiving information query address through the terminal device b; S169, the business client b sends the first information query request to the information data processing node; S1610, the information data processing node queries the information receiving address matching the receiving information query address from the encryption mapping relationship table based on the first information query request, and obtains the queried information receiving address The information data processing node generates a business encryption key and business encryption information mapped to the address; S1611, the information data processing node generates a first query success prompt message; S1612, the information data processing node returns the first query success prompt message to the business client b; S1613, the business client b generates a first information acquisition request based on the first query success prompt message; S1614, the business client b sends the first information acquisition request to the information data processing node; S1615, the information data processing node returns the business encryption key and business encryption information mapped to the queried information receiving address to the business client b based on the first information acquisition request.

[0184] An embodiment of the present application proposes an information sending mechanism, which can be specifically that a first business client can output an information editing page, and an information sending object corresponding to the first business client can enter business data information to be sent to an information receiving object on the information editing page, and when the information data volume of the business data information is greater than an information data volume threshold associated with the business data information, obtain a business key configured for the business data information, and in response to an information sending operation for the business data information, obtain an information receiving address determined by the public key information of the information receiving object, and perform information encryption processing (i.e., symmetric encryption) on the business data information through the business key to obtain business encryption information corresponding to the business data information, and at the same time, the business key can be encrypted (i.e., asymmetric encryption) through the public key information corresponding to the information receiving address to obtain a business encryption key, and establish an encryption relationship between the information receiving address and the business encryption key. The encrypted mapping relationship table is a table of encrypted mapping relationships. At this time, the encrypted mapping relationship table and the business encryption information can be sent to the information data processing node in the decentralized information data processing system, and the information data processing node stores the information to realize the information sending process for the business data information. In this way, when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client can decrypt the business encryption key mapped by the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information by the business key to obtain the business data information. In other words, when the amount of information data of the business data information is too large, the business data information can be symmetrically encrypted by the business key first, and then the business key can be asymmetrically encrypted by the public key information of the information receiving object (recipient). It can be understood that the encryption efficiency of symmetric encryption is greater than that of asymmetric encryption. Therefore, when the amount of information data is too large, it can be first encrypted symmetrically using the business key, and then the business key with a smaller data volume can be encrypted asymmetrically. This can increase the information encryption speed, and thus improve the information sending efficiency of business data information in single-message scenarios or group-message scenarios; in addition, the business data information is encrypted and sent in the form of business encryption information, and the business key used to encrypt the business data information is encrypted and sent using the public key information corresponding to the information receiving address. This can ensure the sending security of the business key and business data information.

[0185] For further information, see Fig.17 , Fig.17 Schematic diagram of the structure of an information sending device provided in an embodiment of the present application. Fig.17As shown, the information sending device 1 can be applied to a computer device. It should be understood that the information sending device 1 can be a computer program (including program code) running in a computer device, for example, the information sending device 1 can be an application software; it can be understood that the information sending device 1 can be used to execute the corresponding steps of the method provided in the embodiment of the present application. Fig.17 As shown, the information sending device 1 may include: an information input module 11, a key acquisition module 12, an information encryption module 13, a key encryption module 14, and an information sending module 15; wherein:

[0186] An information input module 11 is used to output an information editing page for editing business data information when the business object corresponding to the first business client is an information sending object, and to input the business data information to be sent to the information receiving object on the information editing page;

[0187] The key acquisition module 12 is used to acquire the business key configured for the business data information when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information;

[0188] The information encryption module 13 is used to obtain the information receiving address of the information receiving object in response to the information sending operation for the business data information, and perform information encryption processing on the business data information by using the business key to obtain the business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object;

[0189] The key encryption module 14 is used to perform key encryption processing on the service key through the public key information corresponding to the information receiving address, obtain the service encryption key, and establish an encryption mapping relationship table between the information receiving address and the service encryption key;

[0190] The information sending module 15 is used to send the encrypted mapping relationship table and the business encryption information to the information data processing node in the decentralized information data processing system, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped to the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

[0191] Wherein, if the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object;

[0192] The information sending module 15 also includes:

[0193] The request generating unit 151 is used to generate a first information query request based on the reference receiving address;

[0194] The request sending unit 152 is used to send the first information query request to the information data processing node, so that when the information data processing node finds an information receiving address matching the received information query address from the encryption mapping relationship table, and finds the business encryption key and business encryption information mapped to the information receiving address matching the received information query address, it generates a first query success prompt message for the first information query request;

[0195] The information acquisition unit 153 is used to obtain the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address from the information data processing node based on the first query success prompt information returned by the information data processing node.

[0196] The information data processing node is used to upload the received encrypted mapping relationship table and business encryption information to the blockchain; if the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object;

[0197] The information sending module 15 also includes:

[0198] A data synchronization unit 154, used to synchronize the business blocks on the blockchain to the information data processing node;

[0199] The information query unit 155 is used to query the information receiving address matching the received information query address in the encrypted mapping relationship table included in the synchronized business block,

[0200] The information query unit 155 is further used to obtain the service encryption key and service encryption information mapped to the information receiving address matching the received information query address from the synchronized service block when the information receiving address matching the received information query address is queried.

[0201] The reference receiving address determined by the public key information of the information sending object is the information sending address of the information sending object; the public key information of the information sending object is used to perform key encryption processing on the service key to obtain the reference service encryption key; the encryption mapping relationship table includes the mapping relationship between the information sending address of the information sending object and the reference service encryption key;

[0202] The information sending module 15 also includes:

[0203] The request generating unit 151 is used to use the reference receiving address as the sending information query address, and generate a second information query request based on the sending information query address;

[0204] The request sending unit 152 is used to send the second information query request to the information data processing node, so that when the information data processing node finds an information sending address that matches the information query sending address from the encryption mapping relationship table, and finds a reference business encryption key and business encryption information mapped to the information sending address that matches the information query sending address, the second query success prompt information for the second information query request is generated;

[0205] The information acquisition unit 153 is used to obtain the reference business encryption key and business encryption information mapped to the information sending address that matches the information query address from the information data processing node based on the second query success prompt information returned by the information data processing node.

[0206] The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object;

[0207] The information encryption module 13 includes:

[0208] The key encryption unit 131 is used to perform key encryption processing on the service key through the public key information corresponding to the first information receiving address to obtain a first service encryption key corresponding to the service key;

[0209] The key encryption unit 131 is further used to perform key encryption processing on the service key through the public key information corresponding to the second information receiving address to obtain a second service encryption key corresponding to the service key;

[0210] A relationship establishing unit 132, configured to establish a first mapping relationship between a first information receiving address and a first service encryption key, and to establish a second mapping relationship between a second information receiving address and a second service encryption key;

[0211] The relationship establishing unit 132 is further configured to determine an encrypted mapping relationship table based on the first mapping relationship and the second mapping relationship.

[0212] Among them, the information editing page includes information encryption controls for business data information;

[0213] The key acquisition module 12 is specifically used for:

[0214] When the information data volume of the business data information is greater than an information data volume threshold associated with the business data information, in response to a trigger operation on the information encryption control, a business key configured for the business data information is acquired.

[0215] Among them, the information encryption module 13 includes:

[0216] An address acquisition unit 133 is used to acquire public key information of an information receiving object;

[0217] The address obtaining unit 133 is further configured to use the public key information of the information receiving object as the information receiving address.

[0218] Wherein, obtaining the information receiving address of the information receiving object includes:

[0219] An address acquisition unit 133 is used to acquire public key information of an information receiving object;

[0220] The address acquisition unit 133 is further used to perform hash calculation on the public key information of the information receiving object to obtain the hash calculation result corresponding to the public key information of the information receiving object;

[0221] The address obtaining unit 133 is further configured to determine the information receiving address based on the hash calculation result.

[0222] Among them, the data volume of the business key is the target data volume;

[0223] The key acquisition module 12 also includes:

[0224] The threshold determination unit 121 is used to determine the information data volume threshold associated with the business data information based on the object number of the information receiving object and the target data volume.

[0225] The key acquisition module 12 further includes:

[0226] A receiving address acquiring unit 122, configured to acquire an information receiving address of an information receiving object in response to an information sending operation for the business data information when the information data volume of the business data information is less than or equal to the information data volume threshold;

[0227] The information encryption unit 123 is used to perform information encryption processing on the service data information by using the public key information corresponding to the information receiving address, obtain the reference service encryption information corresponding to the service data information, and establish a reference encryption mapping relationship table between the information receiving address and the reference service encryption information;

[0228] The information encryption unit 123 is also used to send the reference encryption mapping relationship table to the information data processing node, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the reference encryption mapping relationship table based on the first information query request, and sends the reference business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the reference business encryption information mapped by the queried information receiving address according to the private key information of the information receiving object, and decrypt to obtain the business data information.

[0229] The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object;

[0230] The information encryption unit 123 includes:

[0231] The information encryption subunit 1231 is used to perform key encryption processing on the service data information through the public key information corresponding to the first information receiving address to obtain the first reference service encryption information corresponding to the service data information;

[0232] The information encryption subunit 1231 is further used to perform key encryption processing on the service data information through the public key information corresponding to the second information receiving address to obtain the second reference service encryption information corresponding to the service data information;

[0233] The relationship establishing subunit 1232 is used to establish a first reference mapping relationship between the first information receiving address and the first reference service encryption information, and to establish a second reference mapping relationship between the second information receiving address and the second reference service encryption information;

[0234] The relationship establishing subunit 1232 is further configured to determine a reference encrypted mapping relationship table based on the first reference mapping relationship and the second reference mapping relationship.

[0235] The specific implementation of the information input module 11, the key acquisition module 12, the information encryption module 13, the key encryption module 14, and the information sending module 15 can refer to the relevant description in the above embodiment, and will not be further described here. It should be understood that the description of the beneficial effects obtained by adopting the same method will not be repeated.

[0236] For further information, see Fig.18 , Fig.18 Schematic diagram of the structure of an information sending device provided in an embodiment of the present application. Fig.18As shown, the information sending device 2 can be applied to a computer device. It should be understood that the information sending device 2 can be a computer program (including program code) running in a computer device, for example, the information sending device 2 can be an application software; it can be understood that the information sending device 2 can be used to execute the corresponding steps of the method provided in the embodiment of the present application. Fig.18 As shown, the information sending device 2 may include: an information receiving module 21 and an information sending module 22; wherein:

[0237] The information receiving module 21 is used to store the encrypted mapping relationship table and the business encryption information when receiving the encrypted mapping relationship table and the business encryption information sent by the first business client corresponding to the business sending object; the encrypted mapping relationship table is established based on the mapping relationship between the information receiving address and the business encryption key; the business encryption key is obtained by encrypting the business key with the public key information corresponding to the information receiving address; the information receiving address is determined by the public key information of the information receiving object; the business encryption information corresponding to the business data information is obtained by the first business client encrypting the business data information with the business key configured for the business data information when responding to the information sending operation of the information sending object for the business data information and obtaining the information receiving address of the information receiving object; the business key is obtained when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information; the business data information is the data information to be sent to the information receiving object entered by the information sending object on the information editing page; the information editing page is used to edit the business data information;

[0238] The information sending module 22 is used to, when receiving a first information query request sent by the second business client corresponding to the information receiving object through the receiving information query address, query the information receiving address matching the receiving information query address from the encryption mapping relationship table based on the first information query request, and send the business encryption key and business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object, so that the second business client decrypts the business encryption key mapped by the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypts the business encryption information through the business key to obtain the business data information.

[0239] The information sending module 22 includes:

[0240] An address query unit 221 is used to query an information receiving address matching the received information query address from the encrypted mapping relationship table based on the first information query request;

[0241] The prompt information generating unit 222 is used to generate a first query success prompt information for the first information query request when the service encryption key and service encryption information mapped to the information receiving address matching the information query receiving address are queried;

[0242] The information return unit 223 is used to return the first query success prompt information to the second business client corresponding to the information receiving object, so that the second business client obtains the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address from the information data processing node based on the first query success prompt information.

[0243] The specific implementation of the information receiving module 21 and the information sending module 22 can refer to the relevant description in the above embodiment, which will not be described in detail here. It should be understood that the description of the beneficial effects obtained by adopting the same method will not be described in detail either.

[0244] For further information, see Fig.19 , Fig.19 Schematic diagram of the structure of a computer device provided in an embodiment of the present application. Fig.19 As shown, the computer device 1900 can be a business terminal or a server, which will not be limited here. For ease of understanding, this application takes the computer device as a server as an example. The computer device 1900 may include: a processor 1901, a network interface 1904 and a memory 1905. In addition, the computer device 1900 may also include: a user interface 1903, and at least one communication bus 1902. Among them, the communication bus 1902 is used to realize the connection and communication between these components. Among them, the user interface 1903 may also include a standard wired interface and a wireless interface. The network interface 1904 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1905 may be a high-speed RAM memory or a non-volatile memory (non-volatile memory), such as at least one disk storage. The memory 1905 may optionally be at least one storage device located away from the aforementioned processor 1901. As Fig.19 As shown, the memory 1905 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and a device control application.

[0245] The network interface 1904 in the computer device 1900 can also provide a network data interaction function. Fig.19In the computer device 1900 shown in the figure, the network interface 1904 can provide a network data interaction function; the user interface 1903 is mainly used to provide an input interface for the user; and the processor 1901 can be used to call the device control application stored in the memory 1905 to execute the above Figure 4 , Figure 7 and Fig.15 The description of the information sending method in the corresponding embodiment can also be performed as described above. Fig.17 In the corresponding embodiment, the information sending device 1 and Fig.18 The description of the information sending device 2 in the corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated here either.

[0246] In a possible implementation, the memory 1905 is used to store program instructions. The processor 1901 may call the program instructions to perform the following steps:

[0247] When the business object corresponding to the first business client is an information sending object, an information editing page for editing business data information is output, and the business data information to be sent to the information receiving object is entered on the information editing page;

[0248] When the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, acquiring the business key configured for the business data information;

[0249] In response to the information sending operation for the business data information, the information receiving address of the information receiving object is obtained, and the business data information is encrypted by the business key to obtain the business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object;

[0250] The business key is encrypted by the public key information corresponding to the information receiving address to obtain the business encryption key, and an encryption mapping relationship table between the information receiving address and the business encryption key is established;

[0251] The encrypted mapping relationship table and the business encryption information are sent to the information data processing node in the decentralized information data processing system, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key and business encryption information mapped to the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

[0252] Wherein, if the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object;

[0253] The processor 1901 is further configured to:

[0254] generating a first information query request based on the reference receiving address;

[0255] Sending the first information query request to the information data processing node, so that when the information data processing node finds an information receiving address matching the information query receiving address from the encryption mapping relationship table and finds the business encryption key and business encryption information mapped to the information receiving address matching the information query receiving address, it generates first query success prompt information for the first information query request;

[0256] When the first query success prompt information returned by the information data processing node is received, based on the first query success prompt information, the business encryption key and business encryption information mapped to the queried information receiving address that matches the received information query address are obtained from the information data processing node.

[0257] The information data processing node is used to upload the received encrypted mapping relationship table and business encryption information to the blockchain; if the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object;

[0258] The processor 1901 is further configured to:

[0259] Synchronize the business blocks on the blockchain to the information data processing node;

[0260] In the encrypted mapping relationship table included in the synchronized business block, search for the information receiving address that matches the information receiving query address.

[0261] When an information receiving address matching the information receiving query address is found, a service encryption key and service encryption information mapped to the information receiving address matching the information receiving query address are obtained from the synchronized service block.

[0262] The reference receiving address determined by the public key information of the information sending object is the information sending address of the information sending object; the public key information of the information sending object is used to perform key encryption processing on the service key to obtain the reference service encryption key; the encryption mapping relationship table includes the mapping relationship between the information sending address of the information sending object and the reference service encryption key;

[0263] The processor 1901 is further configured to:

[0264] Using the reference receiving address as the sending information query address, and generating a second information query request based on the sending information query address;

[0265] Sending the second information query request to the information data processing node, so that when the information data processing node finds an information sending address that matches the information query sending address from the encryption mapping relationship table, and finds a reference business encryption key and business encryption information mapped to the information sending address that matches the information query sending address, generates second query success prompt information for the second information query request;

[0266] When receiving the second query success prompt information returned by the information data processing node, based on the second query success prompt information, obtain the reference business encryption key and business encryption information mapped to the queried information sending address that matches the sending information query address from the information data processing node.

[0267] The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object;

[0268] When the processor 1901 is used to perform key encryption processing on the service key through the public key information corresponding to the information receiving address, obtain the service encryption key, and establish an encryption mapping relationship table between the information receiving address and the service encryption key, it is specifically used to:

[0269] Performing key encryption processing on the business key using the public key information corresponding to the first information receiving address to obtain a first business encryption key corresponding to the business key;

[0270] Perform key encryption processing on the business key using the public key information corresponding to the second information receiving address to obtain a second business encryption key corresponding to the business key;

[0271] Establishing a first mapping relationship between a first information receiving address and a first service encryption key, and establishing a second mapping relationship between a second information receiving address and a second service encryption key;

[0272] An encrypted mapping relationship table is determined based on the first mapping relationship and the second mapping relationship.

[0273] Among them, the information editing page includes information encryption controls for business data information;

[0274] When the information data volume of the business data information is greater than the information data volume threshold associated with the business data information, the processor 1901 is specifically configured to:

[0275] When the information data volume of the business data information is greater than an information data volume threshold associated with the business data information, in response to a trigger operation on the information encryption control, a business key configured for the business data information is acquired.

[0276] Wherein, when the processor 1901 is used to obtain the information receiving address of the information receiving object, it is specifically used to:

[0277] Obtain the public key information of the information receiving object;

[0278] The public key information of the information receiving object is used as the information receiving address.

[0279] Wherein, when the processor 1901 is used to obtain the information receiving address of the information receiving object, it is specifically used to:

[0280] Obtain the public key information of the information receiving object;

[0281] Performing hash calculation on the public key information of the information receiving object to obtain a hash calculation result corresponding to the public key information of the information receiving object;

[0282] The information receiving address is determined based on the hash calculation result.

[0283] Among them, the data volume of the business key is the target data volume;

[0284] The processor 1901 is further configured to:

[0285] Based on the number of objects of the information receiving objects and the target data volume, a threshold value of the information data volume associated with the business data information is determined.

[0286] The processor 1901 is further configured to:

[0287] When the information data volume of the business data information is less than or equal to the information data volume threshold, in response to the information sending operation for the business data information, obtaining the information receiving address of the information receiving object;

[0288] The service data information is encrypted by the public key information corresponding to the information receiving address to obtain the reference service encryption information corresponding to the service data information, and a reference encryption mapping relationship table between the information receiving address and the reference service encryption information is established;

[0289] The reference encrypted mapping relationship table is sent to the information data processing node, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the reference encrypted mapping relationship table based on the first information query request, and sends the reference business encrypted information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the reference business encrypted information mapped by the queried information receiving address according to the private key information of the information receiving object, and decrypt to obtain the business data information.

[0290] The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object;

[0291] When the processor 1901 is used to perform information encryption processing on the service data information through the public key information corresponding to the information receiving address, obtain the reference service encryption information corresponding to the service data information, and establish a reference encryption mapping relationship table between the information receiving address and the reference service encryption information, it is specifically used to:

[0292] Performing key encryption processing on the business data information through the public key information corresponding to the first information receiving address to obtain first reference business encryption information corresponding to the business data information;

[0293] Performing key encryption processing on the business data information through the public key information corresponding to the second information receiving address to obtain second reference business encryption information corresponding to the business data information;

[0294] Establishing a first reference mapping relationship between a first information receiving address and first reference service encryption information, and establishing a second reference mapping relationship between a second information receiving address and second reference service encryption information;

[0295] A reference encrypted mapping relationship table is determined based on the first reference mapping relationship and the second reference mapping relationship.

[0296] In a possible implementation, the memory 1905 is used to store program instructions. The processor 1901 may call the program instructions to perform the following steps:

[0297] The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object;

[0298] The service data information is encrypted by the public key information corresponding to the information receiving address to obtain the reference service encryption information corresponding to the service data information, and a reference encryption mapping relationship table between the information receiving address and the reference service encryption information is established, including:

[0299] Performing key encryption processing on the business data information through the public key information corresponding to the first information receiving address to obtain first reference business encryption information corresponding to the business data information;

[0300] Performing key encryption processing on the business data information through the public key information corresponding to the second information receiving address to obtain second reference business encryption information corresponding to the business data information;

[0301] Establishing a first reference mapping relationship between a first information receiving address and first reference service encryption information, and establishing a second reference mapping relationship between a second information receiving address and second reference service encryption information;

[0302] A reference encrypted mapping relationship table is determined based on the first reference mapping relationship and the second reference mapping relationship.

[0303] Wherein, when the processor 1901 is used to query the information receiving address matching the received information query address from the encryption mapping relationship table based on the first information query request, and send the service encryption key and service encryption information mapped by the queried information receiving address to the second service client corresponding to the information receiving object, it is specifically used to:

[0304] Based on the first information query request, query the encrypted mapping table for an information receiving address that matches the information query receiving address;

[0305] When the service encryption key and service encryption information mapped to the information receiving address matching the information query receiving address are queried, generating first query success prompt information for the first information query request;

[0306] The first query success prompt information is returned to the second business client corresponding to the information receiving object, so that the second business client obtains the business encryption key and business encryption information mapped to the information receiving address that matches the received information query address from the information data processing node based on the first query success prompt information.

[0307] In a specific implementation, the device, processor, memory, etc. described in the embodiments of the present application can execute the implementation described in the above method embodiments, and can also execute the implementation described in the embodiments of the present application, which will not be repeated here.

[0308] In addition, it should be pointed out here that: the embodiment of the present application also provides a computer-readable storage medium, and the computer-readable storage medium stores a computer program executed by the information sending device 1 and the information sending device 2 mentioned above, and the computer program includes computer instructions. When the processor executes the computer instructions, it can execute the above-mentioned Figure 4 , Figure 7 and Fig.15 The description of the information sending method in the corresponding embodiment will therefore not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the computer-readable storage medium embodiment involved in this application, please refer to the description of the method embodiment of this application. As an example, computer instructions can be deployed on a computing device for execution, or on multiple computing devices located at one location, or on multiple computing devices distributed at multiple locations and interconnected by a communication network. Multiple computing devices distributed at multiple locations and interconnected by a communication network can constitute a blockchain system.

[0309] In addition, it should be noted that: the embodiment of the present application also provides a computer program product or a computer program, which may include computer instructions, and the computer instructions may be stored in a computer-readable storage medium. The processor of the computer device reads the computer instructions from the computer-readable storage medium, and the processor may execute the computer instructions, so that the computer device executes the above Figure 4 , Figure 7 and Fig.15 The description of the information sending method in the corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the computer program product or computer program embodiment involved in this application, please refer to the description of the method embodiment of this application.

[0310] It should be noted that, for the above-mentioned various method embodiments, for the sake of simplicity of description, they are all expressed as a series of action combinations, but those skilled in the art should be aware that this application is not limited by the order of the actions described, because according to this application, some steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily required by this application.

[0311] The steps in the method of the embodiment of the present application can be adjusted in order, combined and deleted according to actual needs.

[0312] The modules in the device of the embodiment of the present application can be merged, divided and deleted according to actual needs.

[0313] Those skilled in the art can understand that all or part of the processes in the above-mentioned embodiments can be implemented by instructing related hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, and when the program is executed, it can include the processes of the embodiments of the above-mentioned methods. The storage medium can be a magnetic disk, an optical disk, a read-only memory (ROM) or a random access memory (RAM), etc.

[0314] The above disclosure is only the preferred embodiment of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims

1. A method for sending information, characterized in that: The method is performed by a first service client, and the method includes: When the business object corresponding to the first business client is an information sending object, outputting an information editing page for editing business data information, and entering the business data information to be sent to the information receiving object on the information editing page; When the information data volume of the service data information is greater than the information data volume threshold associated with the service data information, acquiring a service key configured for the service data information; the data volume of the service key is less than or equal to the information data volume threshold; In response to the information sending operation for the business data information, an information receiving address of the information receiving object is obtained, and the business data information is encrypted by the business key to obtain the business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object; The service key is encrypted by the public key information corresponding to the information receiving address to obtain the service encryption key, and an encryption mapping relationship table between the information receiving address and the service encryption key is established; The encrypted mapping relationship table and the business encryption information are sent to an information data processing node in a decentralized information data processing system, so that when the information data processing node receives a first information query request sent by the information receiving object through a receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key mapped to the queried information receiving address and the business encryption information to the second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

2. The method according to claim 1, characterized in that If the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object; The method further comprises: generating the first information query request based on the reference receiving address; Sending the first information query request to the information data processing node, so that when the information data processing node finds an information receiving address matching the information query receiving address from the encryption mapping relationship table, and finds the business encryption key and the business encryption information mapped to the information receiving address matching the information query receiving address, generates first query success prompt information for the first information query request; Upon receiving the first query success prompt information returned by the information data processing node, based on the first query success prompt information, obtain from the information data processing node the business encryption key and the business encryption information mapped to the queried information receiving address that matches the received information query address.

3. The method according to claim 1, characterized in that The information data processing node is used to upload the received encrypted mapping relationship table and the business encryption information to the blockchain; if the information receiving object includes the information sending object, the information receiving address includes a reference receiving address determined by the public key information of the information sending object; The method further comprises: Synchronizing the business blocks on the blockchain to the information data processing node; In the encrypted mapping relationship table included in the synchronized service block, an information receiving address matching the information receiving query address is searched, When an information receiving address matching the information receiving query address is found, a service encryption key and the service encryption information mapped to the information receiving address matching the information receiving query address are obtained from the synchronized service block.

4. The method according to claim 1, characterized in that: The reference receiving address determined by the public key information of the information sending object is the information sending address of the information sending object; the public key information of the information sending object is used to perform key encryption processing on the service key to obtain a reference service encryption key; the encryption mapping relationship table includes a mapping relationship between the information sending address of the information sending object and the reference service encryption key; The method further comprises: Using the reference receiving address as a sending information query address, and generating a second information query request based on the sending information query address; Sending the second information query request to the information data processing node, so that when the information data processing node finds an information sending address matching the information query sending address from the encryption mapping relationship table, and finds a reference business encryption key and the business encryption information mapped to the information sending address matching the information query sending address, generates second query success prompt information for the second information query request; Upon receiving the second query success prompt information returned by the information data processing node, based on the second query success prompt information, obtain from the information data processing node the reference business encryption key and the business encryption information mapped to the queried information sending address that matches the sending information query address.

5. The method according to claim 1, characterized in that The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object; The process of performing key encryption processing on the service key through the public key information corresponding to the information receiving address to obtain the service encryption key and establishing an encryption mapping relationship table between the information receiving address and the service encryption key includes: Performing key encryption processing on the business key by using the public key information corresponding to the first information receiving address to obtain a first business encryption key corresponding to the business key; Perform key encryption processing on the business key using the public key information corresponding to the second information receiving address to obtain a second business encryption key corresponding to the business key; Establishing a first mapping relationship between the first information receiving address and the first service encryption key, and establishing a second mapping relationship between the second information receiving address and the second service encryption key; The encrypted mapping relationship table is determined based on the first mapping relationship and the second mapping relationship.

6. The method according to claim 1, characterized in that The information editing page includes an information encryption control for the business data information; When the information data volume of the service data information is greater than the information data volume threshold associated with the service data information, acquiring the service key configured for the service data information includes: When the information data volume of the business data information is greater than an information data volume threshold associated with the business data information, in response to a trigger operation on the information encryption control, a business key configured for the business data information is acquired.

7. The method according to claim 1, characterized in that The obtaining the information receiving address of the information receiving object includes: Obtaining public key information of the information receiving object; The public key information of the information receiving object is used as the information receiving address.

8. The method according to claim 1, characterized in that The obtaining the information receiving address of the information receiving object includes: Obtaining public key information of the information receiving object; Performing hash calculation on the public key information of the information receiving object to obtain a hash calculation result corresponding to the public key information of the information receiving object; The information receiving address is determined based on the hash calculation result.

9. The method according to claim 1, characterized in that: The data volume of the business key is the target data volume; The method further comprises: Based on the number of objects of the information receiving objects and the target data volume, an information data volume threshold value associated with the business data information is determined.

10. The method according to claim 1, characterized in that The method further comprises: When the information data volume of the service data information is less than or equal to the information data volume threshold, in response to an information sending operation for the service data information, acquiring an information receiving address of the information receiving object; Performing information encryption processing on the service data information through the public key information corresponding to the information receiving address, obtaining reference service encryption information corresponding to the service data information, and establishing a reference encryption mapping relationship table between the information receiving address and the reference service encryption information; The reference encrypted mapping relationship table is sent to the information data processing node, so that when the information data processing node receives the first information query request sent by the information receiving object through the receiving information query address, it queries the information receiving address matching the receiving information query address from the reference encrypted mapping relationship table based on the first information query request, and sends the reference business encryption information mapped by the queried information receiving address to the second business client corresponding to the information receiving object; the second business client is used to decrypt the reference business encryption information mapped by the queried information receiving address according to the private key information of the information receiving object, and decrypt to obtain the business data information.

11. The method according to claim 10, characterized in that The information receiving object includes a first information receiving object and a second information receiving object; the information receiving address includes: a first information receiving address determined by the public key information of the first information receiving object and a second information receiving address determined by the public key information of the second information receiving object; The information encryption processing is performed on the service data information by using the public key information corresponding to the information receiving address to obtain the reference service encryption information corresponding to the service data information, and a reference encryption mapping relationship table between the information receiving address and the reference service encryption information is established, including: Performing key encryption processing on the service data information by using the public key information corresponding to the first information receiving address to obtain first reference service encryption information corresponding to the service data information; Performing key encryption processing on the service data information by using the public key information corresponding to the second information receiving address to obtain second reference service encryption information corresponding to the service data information; Establishing a first reference mapping relationship between the first information receiving address and the first reference service encrypted information, and establishing a second reference mapping relationship between the second information receiving address and the second reference service encrypted information; The reference encrypted mapping relationship table is determined based on the first reference mapping relationship and the second reference mapping relationship.

12. A method for sending information, characterized in that: The method is performed by an information data processing node in a decentralized information data processing system, and the method includes: Upon receiving the encryption mapping relationship table and the service encryption information sent by the first service client corresponding to the service sending object, the encryption mapping relationship table and the service encryption information are stored; the encryption mapping relationship table is established based on the mapping relationship between the information receiving address and the service encryption key; the service encryption key is obtained by encrypting the service key with the public key information corresponding to the information receiving address; the information receiving address is determined by the public key information of the information receiving object; the service encryption information corresponding to the service data information is obtained by the first service client, in response to the information sending operation of the information sending object for the service data information, encrypting the service data information with the service key configured for the service data information when the information receiving address of the information receiving object is obtained; the service key is obtained when the information data volume of the service data information is greater than the information data volume threshold associated with the service data information; the data volume of the service key is less than or equal to the information data volume threshold; the service data information is the data information to be sent to the information receiving object entered by the information sending object on the information editing page; the information editing page is used to edit the service data information; Upon receiving a first information query request sent by the second business client corresponding to the information receiving object through the information query receiving address, the information receiving address matching the information query receiving address is queried from the encryption mapping relationship table based on the first information query request, and the business encryption key mapped to the queried information receiving address and the business encryption information are sent to the second business client corresponding to the information receiving object, so that the second business client decrypts the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypts the business encryption information through the business key to obtain the business data information.

13. The method according to claim 12, characterized in that The method of querying the information receiving address matching the information receiving query address from the encryption mapping relationship table based on the first information query request, and sending the service encryption key mapped by the queried information receiving address and the service encryption information to the second service client corresponding to the information receiving object includes: Based on the first information query request, query the encrypted mapping table for an information receiving address that matches the received information query address; When the service encryption key mapped to the information receiving address matching the information receiving query address and the service encryption information are queried, generating first query success prompt information for the first information query request; The first query success prompt information is returned to the second business client corresponding to the information receiving object, so that the second business client obtains the business encryption key and the business encryption information mapped to the information receiving address that matches the received information query address from the information data processing node based on the first query success prompt information.

14. An information sending device, characterized in that: The device runs in a first service client, and includes: An information entry module, configured to output an information editing page for editing business data information when the business object corresponding to the first business client is an information sending object, and to enter the business data information to be sent to the information receiving object on the information editing page; A key acquisition module, configured to acquire a business key configured for the business data information when the information data volume of the business data information is greater than an information data volume threshold associated with the business data information; and the data volume of the business key is less than or equal to the information data volume threshold; an information encryption module, configured to obtain, in response to an information sending operation for the business data information, an information receiving address of the information receiving object, and perform information encryption processing on the business data information by using the business key to obtain business encryption information corresponding to the business data information; the information receiving address is determined by the public key information of the information receiving object; A key encryption module, used to perform key encryption processing on the business key through the public key information corresponding to the information receiving address, obtain the business encryption key, and establish an encryption mapping relationship table between the information receiving address and the business encryption key; An information sending module is used to send the encrypted mapping relationship table and the business encryption information to an information data processing node in a decentralized information data processing system, so that when the information data processing node receives a first information query request sent by the information receiving object through a receiving information query address, it queries the information receiving address matching the receiving information query address from the encrypted mapping relationship table based on the first information query request, and sends the business encryption key mapped to the queried information receiving address and the business encryption information to a second business client corresponding to the information receiving object; the second business client is used to decrypt the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypt the business encryption information through the business key to obtain the business data information.

15. An information sending device, characterized in that: The device runs in an information data processing node in a decentralized information data processing system, and the device includes: An information receiving module, configured to store the encrypted mapping relationship table and the business encryption information when receiving the encrypted mapping relationship table and the business encryption information sent by the first business client corresponding to the business sending object; the encrypted mapping relationship table is established based on the mapping relationship between the information receiving address and the business encryption key; the business encryption key is obtained by encrypting the business key with the public key information corresponding to the information receiving address; the information receiving address is determined by the public key information of the information receiving object; the business encryption information corresponding to the business data information is obtained by the first business client, in response to the information sending operation of the information sending object for the business data information and obtaining the information receiving address of the information receiving object, encrypting the business data information with the business key configured for the business data information; the business key is obtained when the information data volume of the business data information is greater than the information data volume threshold associated with the business data information; the data volume of the business key is less than or equal to the information data volume threshold; the business data information is the data information to be sent to the information receiving object entered by the information sending object on the information editing page; the information editing page is used to edit the business data information; An information sending module is used to, upon receiving a first information query request sent by a second business client corresponding to the information receiving object through a receiving information query address, query an information receiving address matching the receiving information query address from the encryption mapping relationship table based on the first information query request, and send the business encryption key mapped to the queried information receiving address and the business encryption information to the second business client corresponding to the information receiving object, so that the second business client decrypts the business encryption key mapped to the queried information receiving address according to the private key information of the information receiving object to obtain the business key, and decrypts the business encryption information through the business key to obtain the business data information.

16. A computer device, characterized in that: including memory and processor; The memory is connected to the processor, the memory is used to store a computer program, and the processor is used to call the computer program so that the computer device executes the method according to any one of claims 1 to 13.

17. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is suitable for being loaded and executed by a processor, so that a computer device having the processor executes the method according to any one of claims 1 to 13.

18. A computer program product, characterized in that The method comprises a computer program / instruction, which implements the method according to any one of claims 1 to 13 when executed by a processor.

Images