Information processing method, equipment and medium

Abstract

The invention relates to the technical field of data processing. The invention particularly relates to an information processing method, equipment and a medium. The method comprises the following steps: in response to an access request about target information sent by corresponding first user equipment, obtaining one or more pieces of first target identification information and second target identification information according to target identity information; for each target encryption block, sending an acquisition request about the target encryption block to a corresponding target storage node; receiving one or more target encryption blocks sent by one or more target storage nodes; and sending the one or more target encryption blocks to the first user equipment, so that the first user equipment decrypts each target encryption block by using a first private key corresponding to the first public key, and performs information synthesis on the decrypted one or more target encryption blocks according to an information synthesis rule. The purpose of finely controlling the information viewing range is achieved while the information security is realized in a fragmentation and distributed storage mode.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to an information processing method, device and medium. Background Art

[0002] With the rapid development of information technology, personal information has become an important asset in the digital society. At present, the storage and authorization management of personal information are facing a complex situation. On the one hand, the popularity of Internet services has led to the collection and storage of massive amounts of personal information, and traditional centralized storage methods have dominated, such as corporate databases and cloud storage services. These centralized storage facilities have certain conveniences in data management, but they also expose many security risks. On the other hand, the emergence of blockchain technology has brought new ideas to information management. Some projects have begun to explore the application of blockchain in personal information storage and authorization, but the overall situation is still in the early stages of development and has not yet formed a mature and complete solution.

[0003] In existing technologies, the centralized storage model faces severe security challenges. Data leakage incidents occur frequently. Once the central server is attacked, such as hacker intrusion, internal personnel's illegal operation or system failure, it may lead to large-scale leakage of personal information, causing huge losses to users. At the same time, in terms of authorization management, the existing mechanism is relatively rigid. Users can often only choose whether to authorize from limited options, and it is difficult to perform fine control according to specific needs. Summary of the invention

[0004] In order to solve the above problems, the present application provides an information processing method, device and medium.

[0005] According to one aspect of the present application, there is provided an information processing method, the method comprising: In response to an access request for target information sent by a corresponding first user device, obtaining one or more first target identification information and second target identification information according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of a target encryption block, and the second target identification information includes identification information of a target storage node storing the target encryption block; For each target encryption block, sending an acquisition request for the target encryption block to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; Receiving one or more target encryption blocks sent by one or more target storage nodes, wherein the target encryption blocks include information encrypted using a first public key corresponding to the target identity information; One or more target encryption blocks are sent to the first user device so that the first user device decrypts each target encryption block using the first private key corresponding to the first public key, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule.

[0006] According to one aspect of the present application, a computer device is provided, the device comprising: Processor; and A memory arranged to store computer executable instructions which, when executed, cause the processor to perform the operations of any of the methods described above.

[0007] According to one aspect of the present application, a computer-readable medium storing instructions is provided, wherein when the instructions are executed, the system performs the operation of any of the methods described above.

[0008] Compared with the prior art, the present application fragments the information into multiple information blocks, and in order to improve information security, encrypts the information blocks. In other words, each piece of information includes multiple encryption blocks. And distributed storage is performed, and each encryption block is distributed and stored in different storage nodes to avoid the disadvantages of centralization. Specifically, in response to an access request for target information sent by a first user device, one or more first target identification information and second target identification information are obtained according to the target identity information corresponding to the first user device. The first target identification information includes the identification information of the target encryption block, and the second target identification information includes the identification information of the target storage node storing the target encryption block. For each target encryption block, an acquisition request for the target encryption block is sent to the corresponding target storage node according to the second target identification information corresponding to the target decryption block, so as to obtain one or more target encryption blocks about the target information. After decrypting each target encryption block, the information about the target information that the target identity information has the right to see is synthesized through the information synthesis rule. While achieving information security through fragmentation and distributed storage, the purpose of finely controlling the viewing range of information according to user identity is achieved. BRIEF DESCRIPTION OF THE DRAWINGS

[0009] Other features, objects and advantages of the present application will become more apparent by reading the detailed description of non-limiting embodiments made with reference to the following drawings: Figure 1 A method flow chart showing an information processing method according to an embodiment of the present application; Figure 2 A schematic diagram showing the structure of a network device for information processing according to an embodiment of the present application is shown; Figure 3 An exemplary system is shown that can be used to implement the various embodiments described in this application. DETAILED DESCRIPTION

[0010] The present application is described in further detail below in conjunction with the accompanying drawings.

[0011] In a typical configuration of the present application, the terminal, the device of the service network and the trusted party all include one or more processors (eg, a central processing unit (CPU)), an input / output interface, a network interface and a memory.

[0012] Memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash memory. Memory is an example of a computer-readable medium.

[0013] Computer readable media include permanent and non-permanent, removable and non-removable media that can be used to store information by any method or technology. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, Phase-Change Memory (PCM), Programmable Random Access Memory (PRAM), Static Random-Access Memory (SRAM), Dynamic Random Access Memory (DRAM), other types of random access memory (RAM), Read-Only Memory (ROM), Electrically-Erasable Programmable Read-Only Memory (EEPROM), Flash memory or other memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, magnetic cassettes, tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device.

[0014] The devices referred to in this application include but are not limited to terminals, network devices, or devices formed by integrating terminals and network devices through a network. The terminal includes but is not limited to any mobile electronic product that can interact with a user (for example, interact with a user through a touchpad), such as a smart phone, a tablet computer, etc. The mobile electronic product can use any operating system, such as an Android operating system, an iOS operating system, etc. Among them, the network device includes an electronic device that can automatically perform numerical calculations and information processing according to pre-set or stored instructions, and its hardware includes but is not limited to a microprocessor, an application specific integrated circuit (ASIC), a programmable logic device (PLD), a field programmable gate array (FPGA), a digital signal processor (DSP), an embedded device, etc. The network device includes but is not limited to a computer, a network host, a single network server, a plurality of network server sets or a cloud composed of multiple servers; here, the cloud is composed of a large number of computers or network servers based on cloud computing (Cloud Computing), wherein cloud computing is a type of distributed computing, a virtual supercomputer composed of a group of loosely coupled computer sets. The network includes but is not limited to the Internet, wide area network, metropolitan area network, local area network, VPN network, wireless self-organizing network (Ad Hoc network), etc. Preferably, the device may also be a program running on the terminal, network device, or a device formed by integrating the terminal and network device, network device, touch terminal, or network device and touch terminal through a network.

[0015] Of course, those skilled in the art should understand that the above-mentioned devices are only examples, and other existing or future devices that are applicable to the present application should also be included in the scope of protection of the present application and are included here by reference.

[0016] In the description of the present application, “plurality” means two or more, unless otherwise clearly and specifically defined.

[0017] Figure 1An information processing method according to an embodiment of the present application is shown, which is applied to a network device. The method includes steps S11, S12, S13, and S14. In step S11, in response to an access request for target information sent by a corresponding first user device, one or more first target identification information and second target identification information are obtained according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of the target encryption block, and the second target identification information includes identification information of the target storage node storing the target encryption block; in step S12, for each target encryption block, an acquisition request for the target encryption block is sent to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; in step S13, one or more target encryption blocks are received from one or more target storage nodes, wherein the target encryption block includes information encrypted using a first public key corresponding to the target identity information; in step S14, one or more target encryption blocks are sent to the first user device so that the user device decrypts each target encryption block using a first private key corresponding to the first public key, and synthesizes the decrypted one or more target encryption blocks according to an information synthesis rule.

[0018] Specifically, in step S11, in response to the access request for target information sent by the corresponding first user device, one or more first target identification information and second target identification information are obtained according to the target identity information corresponding to the first user device, wherein the first target identification information includes the identification information of the target encryption block, and the second target identification information includes the identification information of the target storage node storing the target encryption block. In some embodiments, the first user device includes but is not limited to the information access party. The user device includes but is not limited to computing devices such as mobile phones, computers, and tablet computers. In some embodiments, the identity information includes but is not limited to digital certificates, biometric information (such as fingerprints, facial image information, etc.). In some embodiments, the target information includes but is not limited to personal information, such as basic personal information, basic personal health information, etc. Of course, those skilled in the art will understand that the target information described above is only an example, and other existing or future target information that may appear is also within the scope of protection of this application if it is applicable to this application, for example, other important information that needs to avoid information leakage. In some embodiments, the encryption block includes but is not limited to an information block encrypted by an encryption algorithm. For the specific encryption process, please refer to the corresponding embodiments below, which will not be repeated here. In this embodiment, one piece of information corresponds to one or more encryption blocks, and each encryption block is stored in a different storage node. This distributed storage method improves information security, avoids centralization risks, and avoids data monopoly problems that are easily caused by centralized storage (for example, a small number of large enterprises or institutions hold a large amount of user information, which may lead to the risk of abusing information advantages and harming user rights). For example, the basic information of user A includes "user A's name, education, age, address, telephone number, and work unit", and the basic information corresponds to encryption block A1, encryption block A2, and encryption block A3, where encryption block A1 is stored in storage node B1, encryption block A2 is stored in storage node B2, and encryption block A3 is stored in storage node B3. The information block corresponding to encryption block A1 includes "user A's name and age", the information block corresponding to encryption block A2 includes "user A's education", and the information block corresponding to encryption block A3 includes "user A's telephone number, address, and work unit". When receiving a request from the first user device to access the basic information of user A (for example, the target information includes the basic information of user A), the first target identification information A1, the first target identification information A2, and each second target identification information B1, the second target identification information B2 are obtained according to the target identity information corresponding to the first user device. In some embodiments, the network device obtains one or more first target identification information corresponding to the target user identity information and the second target identification information corresponding to each first target identification information by verifying the target user identity information. For the specific introduction of this part, please refer to the corresponding embodiment below, which will not be repeated here.

[0019] In step S12, for each target encryption block, a request for obtaining the target encryption block is sent to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the request for obtaining includes the first target identification information of the target encryption block. In some embodiments, the second target identification information includes the node identification information of the target storage node storing the corresponding target encryption block, so as to determine to which storage node the request for obtaining which encryption block is sent based on the second target identification information. For example, the target encryption block A1 is stored in the target storage node B1, the second target identification information of the target storage node B1 includes B1, and the first target identification information of the target encryption block A1 includes A1. According to the second target identification information B1, a request for obtaining the target encryption block A1 is sent to the target storage node B1, wherein the request for obtaining includes the first target identification information A1. In some embodiments, each storage node stores more than one encryption block, therefore, after receiving the request for obtaining the target encryption block A1 sent by the first user device, the target storage node B1 obtains the target encryption block A1 according to the first target identification information A1 of the target encryption block A1, and provides the target encryption block A1 to the network device.

[0020] In step S13, one or more target encryption blocks sent by one or more target storage nodes are received, wherein the target encryption block includes information encrypted using the first public key corresponding to the target identity information. In some embodiments, in order to further improve information security, not only is the information fragmented and distributedly stored, but also a hybrid encryption algorithm is used for each information block to obtain an encryption block. In some embodiments, the first public key corresponding to the target identity information includes but is not limited to the first public key of the first user device corresponding to the target identity information. For example, the first user device publishes its first public key so that the network device obtains the first public key of the first user device, and associates the first public key with the identity information of the first user device, so as to encrypt a certain information block based on the first public key corresponding to the identity information to obtain an encryption block. By using the first public key to encrypt the information block to obtain an encryption block, the first user device corresponding to the target identity information has a first private key corresponding to the first public key.

[0021] In step S14, one or more target encryption blocks are sent to the first user device so that the first user device uses the first private key corresponding to the first public key to decrypt each target encryption block, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule. For example, after obtaining one or more target encryption blocks, the network device sends the one or more target encryption blocks to the first user device, and the first user device has the first private key corresponding to the first public key used to encrypt the target encryption block, so that the first user device uses the first private key to decrypt each target encryption block. In some embodiments, the one or more target encryption blocks include the first target encryption block, and the one or more decrypted target encryption blocks are synthesized according to the information synthesis rule, including: arranging the first target encryption block at the starting position of the information to synthesize the information. The one or more target encryption blocks include the first target encryption block, for example, the first target encryption block corresponds to the position identification information, so that the first user device identifies the first target encryption block, and after decryption, the first target encryption block is arranged at the starting position of the information. In some embodiments, the information synthesis rule includes but is not limited to placing the first target encryption block at the starting position, and other target encryption blocks can be randomly arranged. In some embodiments, the first target encryption block is but is not limited to an encryption block including a name. For example, put the name at the beginning of the information.

[0022] In some embodiments, step S11 includes: receiving an access request for target information sent by a corresponding first user device, wherein the access request includes target identity information; if the target identity information is verified, obtaining one or more first target identification information and second target identification information according to the target identity information. In some embodiments, the identity information includes but is not limited to digital certificates, facial image information, etc. In some embodiments, an identity information whitelist is set in the network device. For example, if the target identity information is in the whitelist, it is determined that the target identity information is verified to avoid information access by malicious access parties. In some embodiments, each piece of information corresponds to an identity whitelist, and the identity whitelist corresponding to the target information is obtained from the database according to the target identification information of the target information, and it is verified whether the target identity information is in the whitelist. In some embodiments, in order to further improve the security of the information, the acquisition path of the encryption block (for example, the first identification information of the encryption block and the second identification information of the storage node where the encryption block is located) is recorded through the encrypted authorization token, and the authorization token is associated with the identity information, and the target authorization token is obtained based on the target identity information, thereby obtaining the first target identification information and the second target identification information. In other embodiments, the identity information is directly associated with the corresponding first identification information and second identification information, so as to obtain the first target identification information and the second target identification information based on the target identity information. For the specific description of this part, please refer to the following corresponding embodiments, which will not be repeated here.

[0023] In some embodiments, the access request also includes target identification information of the target information, and obtaining one or more first target identification information and second target identification information according to the target identification information includes: obtaining multiple authorization tokens corresponding to the target information from a database according to the target identification information, wherein there is a mapping relationship between the target identification information and the multiple authorization tokens; obtaining a target authorization token corresponding to the target identity information from multiple authorization tokens according to the target identity information, wherein there is a mapping relationship between the target identity information and the target authorization token, and the target authorization token is the authorization information encrypted by the second public key, and the second public key includes the public key corresponding to the network device; using the second private key corresponding to the second public key to decrypt the target authorization token to obtain the decrypted target authorization token, wherein the target authorization token includes one or more first target identification information and second target identification information corresponding to the target identity information. For example, in order to further improve the security of information, the acquisition path of the encryption block (for example, the first identification information of the encryption block and the second identification information of the storage node where the encryption block is located) is recorded through the encrypted authorization token, and the target authorization token is obtained based on the target identity information by associating the authorization token with the identity information, thereby obtaining the first target identification information and the second target identification information. For example, the target identification information includes but is not limited to the information ID, so that multiple authorization tokens corresponding to the target information can be queried based on the target identification information. For example, the target information includes the basic information of user A, "user A's name, education, age, address, telephone number, and work unit". The target information corresponds to multiple authorization tokens (for example, P1, P2, and P3), and there is a mapping relationship between each authorization token and the corresponding identity information. For example, there is a mapping relationship between authorization token P1 and identity information U1, there is a mapping relationship between authorization token P2 and identity information U2, and there is a mapping relationship between authorization token P3 and identity information U3. According to the target identity information (for example, a digital certificate or facial image information, etc.), the target authorization token (for example, P2) that has a mapping relationship with the target identity information is determined from the multiple authorization tokens corresponding to the target information. In some embodiments, the authorization token records the first identification information of the encryption block that can be obtained by the corresponding permission condition, and the second identification information of the storage node that stores each encryption block. In order to improve information security, the authorization token is the authorization information encrypted by the second public key. For example, the second public key uses the public key of the network device, so that the authorization token can be decrypted by the network device using the corresponding second private key to obtain the decrypted target authorization token, thereby obtaining one or more first target identification information and second target identification information corresponding to the target identity information, and then obtaining one or more target encryption blocks corresponding to the target identity information of the first user device.

[0024] In some embodiments, the method further includes step S15 (not shown), in which an authorization request for target information sent by a second user device is received, wherein the target information includes multiple information blocks, and the authorization request includes one or more identity information and information blocks corresponding to each identity information; for one or more information blocks corresponding to each identity information, each information block is encrypted using the first public key corresponding to the identity information to obtain one or more encryption blocks corresponding to each identity information in the one or more identity information, and the first identification information of each encryption block is generated; for one or more encryption blocks corresponding to each identity information, the storage node of each encryption block is determined, the second identification information of each storage node is generated, and the encryption block is sent to the corresponding storage node for storage; for each identity information, the one or more first identification information and the second identification information corresponding to the identity information are encrypted using the second public key to obtain the authorization token corresponding to each identity information in the one or more identity information; and a mapping relationship between the target identification information and the corresponding multiple authorization tokens, and a mapping relationship between each identity information and the authorization token corresponding to the identity information is established in the database. In some embodiments, the second user device includes but is not limited to an authorization node, for example, the authorization rule for a certain piece of information is set by the second user device. For example, the second user corresponding to the second user device divides the target information into multiple information blocks at the second user device end, and sets one or more information blocks corresponding to each identity information. In some embodiments, the information block is encrypted by the corresponding first public key to obtain an encrypted block, and the first public key includes the public key corresponding to the identity information corresponding to the information block, and the identity information corresponds to the first user device, so the first public key includes the public key of the corresponding first user device. In some embodiments, the same information block may be encrypted by multiple first public keys to obtain multiple encrypted blocks. For example, information block A1 is encrypted by the first public keys of multiple first user devices, and each encryption obtains an encrypted block. In some embodiments, the storage node of each encrypted block can be randomly determined. For example, the storage node of a certain encrypted block is randomly determined from multiple storage nodes. In some embodiments, for each identity information, after generating the first identification information of one or more encrypted blocks corresponding to the identity information and the second identification information of the storage node storing each encrypted block, the second public key is used to encrypt the one or more first identification information and the second identification information corresponding to the identity information to obtain an encrypted authorization token. Establish a mapping relationship between the target identification information and the corresponding multiple authorization tokens, as well as a mapping relationship between each identity information and the authorization token corresponding to the identity information, so as to query the multiple authorization tokens corresponding to the target information based on the target identification information of the target information, and then query the target authorization token from the multiple authorization tokens corresponding to the target information based on the target identity information.

[0025] In some embodiments, the access request also includes target identification information of the target information, and step S11 includes: obtaining multiple first identification information corresponding to the target information from the database according to the target identification information, each first identification information corresponds to the second identification information, wherein the target information includes multiple information blocks, each information block is encrypted by one or more first public keys to obtain one or more encrypted blocks, the target identification information and the identity information corresponding to the one or more first public keys have a mapping relationship, the multiple information blocks include the target information block, and each target information block is encrypted using the first public key corresponding to the target identity information; if the target identity information exists in one or more identity information corresponding to the target identification information, it is determined that the target identity information meets the target authority condition, and one or more first target identification information is determined from the multiple first identification information according to the target identity information, wherein there is a mapping relationship between the one or more first target identification information and the target identity information, and each first target identification information corresponds to the second target identification information. In some embodiments, a piece of information includes multiple information blocks, each information block is encrypted using one or more first public keys, and an encrypted block corresponding to each first public key in the one or more first public keys is obtained. Each encryption block corresponds to the first identification information. In other words, there is a mapping relationship between the identification information of each piece of information and the multiple first identification information of the multiple encryption blocks corresponding to the piece of information, so as to determine the multiple first identification information corresponding to the target information based on the target identification information of the target information. In some embodiments, each first user device corresponds to identity information, and the first user device can publish its own first public key. The network device obtains the first public key, encrypts the information block that the identity information has the authority to obtain based on the first public key, obtains the encryption block, and establishes a mapping relationship between the identity information and the first identification information of the encryption block obtained based on the first public key. For example, the multiple information blocks corresponding to the target information include the target encryption block encrypted using the first public key corresponding to the target identity information. According to the target identity information, one or more first target identification information that have a mapping relationship with the target identity information can be determined from the multiple first identification information.

[0026] In some embodiments, the method further includes step S16 (not shown), in which an authorization request for target information sent by a second user device is received, wherein the target information includes multiple information blocks, and the authorization request includes one or more identity information and information blocks corresponding to each identity information; for the one or more information blocks corresponding to each identity information, each information block is encrypted using the first public key corresponding to the identity information to obtain one or more encryption blocks corresponding to each identity information in the one or more identity information, and the first identification information of each encryption block is generated; for the one or more encryption blocks corresponding to each identity information, the storage node of each encryption block is determined, the second identification information of each storage node is generated, and the encryption block is sent to the corresponding storage node for storage; a mapping relationship between the target identification information and the corresponding multiple first identification information, a mapping relationship between each first identification information and the corresponding second identification information, and a mapping relationship between each identity information and the first identification information corresponding to the identity information is established in the database. For example, the second user corresponding to the second user device divides the target information into multiple information blocks at the second user device end, and sets one or more information blocks corresponding to each identity information. In some embodiments, the information block is encrypted by the corresponding first public key to obtain an encrypted block, the first public key includes the public key corresponding to the identity information corresponding to the information block, and the identity information corresponds to the first user device, so the first public key includes the public key of the corresponding first user device. In some embodiments, the same information block may be encrypted by multiple first public keys to obtain multiple encrypted blocks. For example, the information block A1 is encrypted by the first public keys of multiple first user devices, and each encryption obtains an encrypted block. In some embodiments, the storage node of each encrypted block can be randomly determined. For example, the storage node of a certain encrypted block is randomly determined from multiple storage nodes. A mapping relationship between the target identification information and the corresponding multiple first identification information, a mapping relationship between each first identification information and the corresponding second identification information, and a mapping relationship between each identity information and the first identification information corresponding to the identity information are established, so as to query the multiple first identification information corresponding to the target information and the second identification information corresponding to each first identification information based on the target identification information of the target information, and then query the first target identification information and the second target identification information corresponding to each first target identification information from the multiple first identification information corresponding to the target information based on the target identity information.

[0027] In some embodiments, in order to improve the security of information transmission. In the interaction process between the user device and the network device, and between the storage node and the network device, the SSL / TLS protocol is used for encrypted communication, and the authenticity and integrity of the source of the information are ensured by digital signature technology. In some embodiments, the method also includes step S17 (not shown), in which the database is synchronously updated and recorded in the blockchain. For example, the mapping relationship between the target identification information and the corresponding multiple authorization tokens in the database, and the mapping relationship between each identity information and the authorization token corresponding to the identity information, or the mapping relationship between the target identification information and the corresponding multiple first identification information, the mapping relationship between each first identification information and the corresponding second identification information, and the mapping relationship between each identity information and the first identification information corresponding to the identity information are synchronously updated and recorded in the blockchain. It is convenient to trace information.

[0028] Figure 2 A schematic diagram of the structure of a network device according to an embodiment of the present application is shown, the device includes a first module, a second module, and a third module, the first module is used to respond to an access request for target information sent by a corresponding first user device, and obtain one or more first target identification information and second target identification information according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of the target encryption block, and the second target identification information includes identification information of the target storage node storing the target encryption block; the first module is used to send an acquisition request for each target encryption block to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; the third module is used to receive one or more target encryption blocks sent by one or more target storage nodes, wherein the target encryption block includes information encrypted using the first public key corresponding to the target identity information; the fourth module is used to send one or more target encryption blocks to the first user device, so that the first user device uses the first private key corresponding to the first public key to decrypt each target encryption block, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule.

[0029] Here, the specific implementations corresponding to module 11, module 12, module 13, and module 14 are the same or similar to the specific embodiments of step S11, step S12, step S13, and step S14, and are therefore not repeated here and are included herein by reference.

[0030] In addition to the methods and devices described in the above embodiments, the present application also provides a computer-readable storage medium, which stores computer code. When the computer code is executed, the method described in any of the preceding items is executed.

[0031] The present application also provides a computer program product. When the computer program product is executed by a computer device, the method described in any of the preceding items is executed.

[0032] The present application also provides a computer device, the computer device comprising: one or more processors; a memory for storing one or more computer programs; When the one or more computer programs are executed by the one or more processors, the one or more processors are caused to implement the method as described in any of the preceding items.

[0033] Figure 3 An exemplary system that can be used to implement various embodiments described in this application is shown; like Figure 3 In some embodiments shown, the system 300 can be used as any of the devices in the various described embodiments. In some embodiments, the system 300 may include one or more computer-readable media (e.g., system memory or NVM / storage device 320) with instructions and one or more processors (e.g., (one or more) processors 305) coupled to the one or more computer-readable media and configured to execute instructions to implement modules to perform the actions described in this application.

[0034] For one embodiment, system control module 310 may include any suitable interface controller to provide any suitable interface to at least one of processor(s) 305 and / or any suitable device or component in communication with system control module 310 .

[0035] The system control module 310 may include a memory controller module 330 to provide an interface to the system memory 315. The memory controller module 330 may be a hardware module, a software module, and / or a firmware module.

[0036] The system memory 315 may be used, for example, to load and store data and / or instructions for the system 300. For one embodiment, the system memory 315 may include any suitable volatile memory, such as a suitable DRAM. In some embodiments, the system memory 315 may include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0037] For one embodiment, system control module 310 may include one or more input / output (I / O) controllers to provide interfaces to NVM / storage device 320 and communication interface(s) 325 .

[0038] For example, NVM / storage device 320 may be used to store data and / or instructions. NVM / storage device 320 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable non-volatile storage device(s) (e.g., one or more hard disk drives (HDDs), one or more compact disk (CD) drives, and / or one or more digital versatile disk (DVD) drives).

[0039] NVM / storage device 320 may include storage resources that are physically part of the device on which system 300 is installed, or it may be accessible to the device without being part of the device. For example, NVM / storage device 320 may be accessed over a network via communication interface(s) 325.

[0040] Communication interface(s) 325 may provide an interface for system 300 to communicate over one or more networks and / or with any other suitable devices. System 300 may wirelessly communicate with one or more components of a wireless network in accordance with any of one or more wireless network standards and / or protocols.

[0041] For one embodiment, at least one of the processor(s) 305 may be packaged together with the logic of one or more controllers of the system control module 310 (e.g., the memory controller module 330). For one embodiment, at least one of the processor(s) 305 may be packaged together with the logic of one or more controllers of the system control module 310 to form a system-in-package (SiP). For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with the logic of one or more controllers of the system control module 310. For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with the logic of one or more controllers of the system control module 310 to form a system on chip (SoC).

[0042] In various embodiments, the system 300 may be, but is not limited to: a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, the system 300 may have more or fewer components and / or a different architecture. For example, in some embodiments, the system 300 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touch screen display), a non-volatile memory port, multiple antennas, a graphics chip, an application specific integrated circuit (ASIC), and a speaker.

[0043] It should be noted that the present application can be implemented in software and / or a combination of software and hardware, for example, it can be implemented using an application-specific integrated circuit (ASIC), a general-purpose computer or any other similar hardware device. In one embodiment, the software program of the present application can be executed by a processor to implement the steps or functions described above. Similarly, the software program of the present application (including related data structures) can be stored in a computer-readable recording medium, for example, a RAM memory, a magnetic or optical drive or a floppy disk and the like. In addition, some steps or functions of the present application can be implemented using hardware, for example, as a circuit that cooperates with a processor to perform various steps or functions.

[0044] In addition, a part of the present application may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present application through the operation of the computer. Those skilled in the art should understand that the existence of computer program instructions in computer-readable media includes but is not limited to source files, executable files, installation package files, etc., and accordingly, the way in which computer program instructions are executed by a computer includes but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium accessible to the computer.

[0045] Communication media include media by which communication signals containing, for example, computer readable instructions, data structures, program modules, or other data are transmitted from one system to another. Communication media may include guided transmission media such as cables and wires (e.g., fiber optic, coaxial, etc.) and wireless (unguided transmission) media that can propagate energy waves, such as acoustic, electromagnetic, RF, microwave, and infrared. Computer readable instructions, data structures, program modules, or other data may be embodied as a modulated data signal in, for example, a wireless medium such as a carrier wave or similar mechanism such as embodied as part of spread spectrum technology. The term "modulated data signal" refers to a signal whose one or more characteristics are changed or set in such a manner as to encode information in the signal. Modulation may be analog, digital, or a hybrid modulation technique.

[0046] By way of example and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory, such as random access memory (RAM, DRAM, SRAM); and non-volatile memory, such as flash memory, various read-only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic / ferroelectric memories (MRAM, FeRAM); and magnetic and optical storage devices (hard disks, magnetic tapes, CDs, DVDs); or other media now known or later developed that can store computer-readable information / data for use with a computer system.

[0047] Here, according to an embodiment of the present application, a device is included, which includes a memory for storing computer program instructions and a processor for executing the program instructions, wherein, when the computer program instructions are executed by the processor, the device is triggered to run the methods and / or technical solutions based on the aforementioned multiple embodiments of the present application.

[0048] It is obvious to those skilled in the art that the present application is not limited to the details of the above exemplary embodiments, and that the present application can be implemented in other specific forms without departing from the spirit or essential features of the present application.

Claims

1. An information processing method, characterized in that: Applied to a network device, the method includes: In response to an access request for target information sent by a corresponding first user device, acquiring one or more first target identification information and second target identification information according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of a target encryption block, and the second target identification information includes identification information of a target storage node storing the target encryption block; For each target encryption block, sending an acquisition request for the target encryption block to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; Receiving one or more target encryption blocks sent by one or more target storage nodes, wherein the target encryption blocks include information encrypted using a first public key corresponding to the target identity information; The one or more target encryption blocks are sent to the first user device so that the first user device uses the first private key corresponding to the first public key to decrypt each target encryption block, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule.

2. The method according to claim 1, characterized in that: The step of obtaining, in response to an access request for target information sent by a corresponding first user device, one or more first target identification information and second target identification information according to target identity information corresponding to the first user device includes: receiving an access request for target information sent by a corresponding first user device, wherein the access request includes target identity information; If the target identity information is verified, one or more first target identification information and second target identification information are obtained according to the target identity information.

3. The method according to claim 2, characterized in that The access request also includes target identification information of the target information, and acquiring one or more first target identification information and second target identification information according to the target identification information includes: Acquire multiple authorization tokens corresponding to the target information from a database according to the target identification information, wherein a mapping relationship exists between the target identification information and the multiple authorization tokens; Obtaining a target authorization token corresponding to the target identity information from the multiple authorization tokens according to the target identity information, wherein a mapping relationship exists between the target identity information and the target authorization token, and the target authorization token is authorization information encrypted by a second public key, and the second public key includes a public key corresponding to the network device; The target authorization token is decrypted using a second private key corresponding to the second public key to obtain a decrypted target authorization token, wherein the target authorization token includes one or more first target identification information and second target identification information corresponding to the target identity information.

4. The method according to claim 3, characterized in that The method further comprises: receiving an authorization request for the target information sent by a second user equipment, wherein the target information includes a plurality of information blocks, and the authorization request includes one or more identity information and an information block corresponding to each identity information; For one or more information blocks corresponding to each identity information, encrypt each information block using the first public key corresponding to the identity information to obtain one or more encrypted blocks corresponding to each identity information in the one or more identity information, and generate first identification information for each encrypted block; For one or more encrypted blocks corresponding to each piece of identity information, determine a storage node for each encrypted block, generate second identification information for each storage node, and send the encrypted block to the corresponding storage node for storage; For each piece of identity information, encrypt one or more first identification information and second identification information corresponding to the identity information using the second public key to obtain an authorization token corresponding to each piece of identity information in the one or more pieces of identity information; A mapping relationship between the target identification information and the corresponding multiple authorization tokens, as well as a mapping relationship between each identity information and the authorization token corresponding to the identity information is established in the database.

5. The method according to claim 2, characterized in that: The access request also includes target identification information of the target information, and acquiring one or more first target identification information and second target identification information according to the target identification information includes: Acquire multiple first identification information corresponding to the target information from a database according to the target identification information, each first identification information corresponds to second identification information, wherein the target information includes multiple information blocks, each information block is encrypted by one or more first public keys to obtain one or more encrypted blocks, there is a mapping relationship between the target identification information and the identity information corresponding to the one or more first public keys, the multiple information blocks include a target information block, and each of the target information blocks is encrypted by using the first public key corresponding to the target identity information; If the target identity information exists in one or more identity information corresponding to the target identification information, it is determined that the target identity information meets the target authority condition, and one or more first target identification information is determined from the multiple first identification information according to the target identity information, wherein there is a mapping relationship between the one or more first target identification information and the target identity information, and each first target identification information corresponds to second target identification information.

6. The method according to claim 5, characterized in that The method further comprises: receiving an authorization request for the target information sent by a second user equipment, wherein the target information includes a plurality of information blocks, and the authorization request includes one or more identity information and an information block corresponding to each identity information; For one or more information blocks corresponding to each identity information, encrypt each information block using the first public key corresponding to the identity information to obtain one or more encrypted blocks corresponding to each identity information in the one or more identity information, and generate first identification information for each encrypted block; For one or more encrypted blocks corresponding to each piece of identity information, determine a storage node for each encrypted block, generate second identification information for each storage node, and send the encrypted block to the corresponding storage node for storage; A mapping relationship between the target identification information and the corresponding multiple first identification information, a mapping relationship between each first identification information and the corresponding second identification information, and a mapping relationship between each identity information and the first identification information corresponding to the identity information are established in the database.

7. The method according to claim 1, characterized in that The one or more target encryption blocks include a first target encryption block, and synthesizing information on the one or more decrypted target encryption blocks according to an information synthesis rule includes: The first target encryption block is arranged at the beginning position of the information to synthesize the information.

8. The method according to claim 4 or 6, characterized in that: The method further comprises: The database synchronization update is recorded in the blockchain.

9. A computer device for information processing, comprising a memory, a processor and a computer program stored in the memory, characterized in that: The processor executes the computer program to implement the steps of the method according to any one of claims 1 to 8.

10. A computer-readable storage medium having a computer program / instruction stored thereon, characterized in that: When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 8 are implemented.

Images