An information processing method, device and medium

Abstract

The application relates to the technical field of data processing. In particular, the application relates to an information processing method, device and medium. The method comprises the following steps: in response to an access request about target information sent by a corresponding first user equipment, obtaining one or more first target identification information and second target identification information according to target identity information; for each target encryption block, sending an acquisition request about the target encryption block to a corresponding target storage node; receiving one or more target encryption blocks sent by one or more target storage nodes; and sending the one or more target encryption blocks to the first user equipment, so that the first user equipment uses a first private key corresponding to a first public key to decrypt each target encryption block, and performs information synthesis on the decrypted one or more target encryption blocks according to an information synthesis rule. Through the fragmentation and distributed storage mode, information security is realized, and the purpose of fine control of the information viewing range is achieved.

Description

Technical Field

[0001] The present application relates to the field of data processing technology, and in particular to an information processing method, device and medium. Background Art

[0002] With the rapid development of information technology, personal information has become a vital asset in the digital society. Currently, the storage and authorization management of personal information face a complex landscape. On the one hand, the widespread use of internet services has led to the collection and storage of massive amounts of personal information, with traditional centralized storage methods, such as enterprise databases and cloud storage services, dominating. While these centralized storage facilities offer certain conveniences for data management, they also expose numerous security risks. On the other hand, the emergence of blockchain technology has brought new insights to information management. Some projects have begun exploring the application of blockchain in the storage and authorization of personal information, but overall, this approach is still in its early stages, and mature, comprehensive solutions have yet to emerge.

[0003] In existing technologies, centralized storage models face severe security challenges. Data leaks are frequent. Once a central server is attacked, such as by hackers, insider misuse, or system failures, it can lead to large-scale leakage of personal information, causing significant losses to users. Furthermore, existing mechanisms for authorization management are relatively rigid, with users often limited to choosing whether to authorize data from a limited set of options, making it difficult to implement precise control based on specific needs. Summary of the Invention

[0004] In order to solve the above problems, the present application provides an information processing method, device and medium.

[0005] According to one aspect of the present application, there is provided an information processing method, the method comprising:

[0006] In response to an access request for target information sent by a corresponding first user device, obtaining one or more first target identification information and second target identification information according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of a target encryption block, and the second target identification information includes identification information of a target storage node storing the target encryption block;

[0007] For each target encryption block, sending an acquisition request for the target encryption block to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block;

[0008] Receiving one or more target encrypted blocks sent by one or more target storage nodes, wherein the target encrypted blocks include information encrypted using a first public key corresponding to the target identity information;

[0009] The one or more target encryption blocks are sent to the first user device so that the first user device decrypts each target encryption block using the first private key corresponding to the first public key, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule.

[0010] According to one aspect of the present application, a computer device is provided, the device comprising:

[0011] processor; and

[0012] A memory arranged to store computer executable instructions which, when executed, cause the processor to perform the operations of any of the methods described above.

[0013] According to one aspect of the present application, a computer-readable medium storing instructions is provided. When the instructions are executed, the system performs the operations of any of the methods described above.

[0014] Compared to the prior art, the present application fragments information into multiple information blocks and, to improve information security, encrypts each block. In other words, each piece of information includes multiple encrypted blocks. Distributed storage is then implemented, with each encrypted block stored on different storage nodes, avoiding the drawbacks of centralization. Specifically, in response to an access request for target information sent by a first user device, one or more first target identification information and second target identification information are obtained based on the target identity information corresponding to the first user device. The first target identification information includes identification information for the target encryption block, and the second target identification information includes identification information for the target storage node storing the target encryption block. For each target encryption block, a request is sent to the corresponding target storage node based on the second target identification information corresponding to the target decryption block, in order to obtain one or more target encryption blocks related to the target information. After decrypting each target encryption block, information about the target information that the target identity information is authorized to view is synthesized using information synthesis rules. While achieving information security through fragmentation and distributed storage, the scope of information viewing is precisely controlled based on user identity. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] Other features, objects and advantages of the present application will become more apparent upon reading the detailed description of non-limiting embodiments made with reference to the following drawings:

[0016] Figure 1 A flowchart showing an information processing method according to an embodiment of the present application is shown;

[0017] Figure 2 A schematic structural diagram of a network device for information processing according to an embodiment of the present application is shown;

[0018] Figure 3 An exemplary system is shown that can be used to implement the various embodiments described in this application. DETAILED DESCRIPTION

[0019] The present application is described in further detail below with reference to the accompanying drawings.

[0020] In a typical configuration of the present application, the terminal, the device of the service network, and the trusted party each include one or more processors (eg, a central processing unit (CPU)), an input / output interface, a network interface, and a memory.

[0021] Memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash memory. Memory is an example of a computer-readable medium.

[0022] Computer-readable media include both permanent and non-permanent, removable and non-removable media that can be implemented using any method or technology to store information. Information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase-change memory (PCM), programmable random access memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technologies, compact disc read-only memory (CD-ROM), digital versatile disc (DVD) or other optical storage, magnetic cassettes, magnetic tape, disk storage or other magnetic storage devices, or any other non-transmission medium that can be used to store information that can be accessed by a computing device.

[0023] The devices referred to in this application include, but are not limited to, terminals, network devices, or devices formed by integrating terminals and network devices via a network. The terminals include, but are not limited to, any mobile electronic product that can interact with a user (e.g., through a touchpad), such as a smartphone, a tablet computer, etc. The mobile electronic product can use any operating system, such as the Android operating system, the iOS operating system, etc. The network device includes an electronic device that can automatically perform numerical calculations and information processing according to pre-set or stored instructions, and its hardware includes, but is not limited to, a microprocessor, an application-specific integrated circuit (ASIC), a programmable logic device (PLD), a field programmable gate array (FPGA), a digital signal processor (DSP), an embedded device, etc. The network device includes, but is not limited to, a computer, a network host, a single network server, a set of multiple network servers, or a cloud consisting of multiple servers; herein, a cloud is composed of a large number of computers or network servers based on cloud computing. Cloud computing is a type of distributed computing, a virtual supercomputer composed of a group of loosely coupled computers. The network includes but is not limited to the Internet, a wide area network, a metropolitan area network, a local area network, a VPN network, a wireless self-organizing network (Ad Hoc network), etc. Preferably, the device may also be a program running on the terminal, the network device, or a device formed by integrating the terminal and the network device, the network device, the touch terminal, or the network device and the touch terminal via a network.

[0024] Of course, those skilled in the art should understand that the above-mentioned devices are only examples, and other existing or future devices that are applicable to this application should also be included in the scope of protection of this application and are included here by reference.

[0025] In the description of the present application, “plurality” means two or more, unless otherwise clearly defined.

[0026] Figure 1An information processing method according to an embodiment of the present application is shown, which is applied to a network device. The method includes steps S11, S12, S13, and S14. In step S11, in response to an access request regarding target information sent by the corresponding first user device, one or more first target identification information and second target identification information are obtained according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of the target encryption block, and the second target identification information includes identification information of the target storage node storing the target encryption block; in step S12, for each target encryption block, an acquisition request regarding the target encryption block is sent to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; in step S13, one or more target encryption blocks sent by one or more target storage nodes are received, wherein the target encryption block includes information encrypted using the first public key corresponding to the target identity information; in step S14, the one or more target encryption blocks are sent to the first user device, so that the user device uses the first private key corresponding to the first public key to decrypt each target encryption block, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule.

[0027] Specifically, in step S11, in response to an access request for target information sent by a corresponding first user device, one or more first target identification information and second target identification information are obtained based on the target identity information corresponding to the first user device. The first target identification information includes identification information of the target encryption block, and the second target identification information includes identification information of the target storage node storing the target encryption block. In some embodiments, the first user device includes, but is not limited to, the information accessing party. User devices include, but are not limited to, computing devices such as mobile phones, computers, and tablets. In some embodiments, identity information includes, but is not limited to, digital certificates and biometric information (e.g., fingerprints, facial images, etc.). In some embodiments, target information includes, but is not limited to, personal information, such as basic personal information and basic personal health information. Of course, those skilled in the art will appreciate that the target information described above is merely illustrative, and other existing or future target information that is applicable to this application is also within the scope of protection of this application, such as other important information that requires protection from information leakage. In some embodiments, encryption blocks include, but are not limited to, information blocks encrypted using an encryption algorithm. For details on the specific encryption process, please refer to the corresponding embodiments below and will not be elaborated upon here. In this embodiment, a piece of information corresponds to one or more encryption blocks, each stored on a different storage node. This distributed storage approach improves information security, avoids centralization risks, and avoids data monopoly issues that can easily arise from centralized storage (for example, a small number of large enterprises or institutions holding a large amount of user information could lead to the risk of abusing their information advantage and harming user rights). For example, user A's basic information includes "User A's name, education level, age, address, phone number, and workplace." This basic information corresponds to encryption blocks A1, A2, and A3. Encryption block A1 is stored on storage node B1, A2 on storage node B2, and A3 on storage node B3. The information blocks corresponding to encryption block A1 include "User A's name and age," encryption block A2 includes "User A's education level," and encryption block A3 includes "User A's phone number, address, and workplace." Upon receiving a request from a first user device to access user A's basic information (for example, where the target information includes user A's basic information), the network device obtains first target identification information A1, first target identification information A2, and each second target identification information B1 and second target identification information B2 based on the target identity information corresponding to the first user device. In some embodiments, the network device verifies the target user identity information to obtain one or more first target identification information corresponding to the target user identity information, as well as the second target identification information corresponding to each first target identification information. For a detailed description of this aspect, please refer to the corresponding embodiments below and will not be repeated here.

[0028] In step S12, for each target encryption block, a request for obtaining the target encryption block is sent to the corresponding target storage node based on the second target identification information corresponding to the target encryption block, wherein the request includes the first target identification information of the target encryption block. In some embodiments, the second target identification information includes the node identification information of the target storage node storing the corresponding target encryption block, so that the storage node to which the request for obtaining the encryption block is sent is determined based on the second target identification information. For example, target encryption block A1 is stored in target storage node B1, the second target identification information of target storage node B1 includes B1, and the first target identification information of target encryption block A1 includes A1. Based on the second target identification information B1, a request for obtaining the target encryption block A1 is sent to target storage node B1, wherein the request includes the first target identification information A1. In some embodiments, each storage node stores more than one encryption block. Therefore, after receiving the request for obtaining the target encryption block A1 sent by the first user device, target storage node B1 obtains the target encryption block A1 based on the first target identification information A1 of the target encryption block A1 and provides the target encryption block A1 to the network device.

[0029] In step S13, one or more target encryption blocks sent by one or more target storage nodes are received, wherein the target encryption block includes information encrypted using the first public key corresponding to the target identity information. In some embodiments, in order to further improve information security, not only is the information fragmented and distributedly stored, but a hybrid encryption algorithm is used for each information block to obtain an encryption block. In some embodiments, the first public key corresponding to the target identity information includes but is not limited to the first public key of the first user device corresponding to the target identity information. For example, the first user device publishes its own first public key so that the network device obtains the first public key of the first user device and associates the first public key with the identity information of the first user device, so as to encrypt a certain information block based on the first public key corresponding to the identity information to obtain an encryption block. By using the first public key to encrypt the information block to obtain an encryption block, the first user device corresponding to the target identity information has a first private key corresponding to the first public key.

[0030] In step S14, one or more target encryption blocks are sent to the first user device, so that the first user device decrypts each target encryption block using the first private key corresponding to the first public key, and then synthesizes the decrypted one or more target encryption blocks according to an information synthesis rule. For example, after obtaining the one or more target encryption blocks, the network device sends the one or more target encryption blocks to the first user device. The first user device has the first private key corresponding to the first public key used to encrypt the target encryption blocks, so that the first user device can decrypt each target encryption block using the first private key. In some embodiments, the one or more target encryption blocks include a first target encryption block, and synthesizing the decrypted one or more target encryption blocks according to the information synthesis rule includes: arranging the first target encryption block at the beginning of the information to synthesize the information. The one or more target encryption blocks include the first target encryption block, for example, and the first target encryption block has position identification information corresponding to the first target encryption block so that the first user device can identify the first target encryption block. After decryption, the first target encryption block is arranged at the beginning of the information. In some embodiments, the information synthesis rule includes but is not limited to placing the first target encryption block at the beginning, and the other target encryption blocks can be randomly arranged. In some embodiments, the first target encryption block includes but is not limited to an encryption block including a name. For example, place the name at the beginning of the information.

[0031] In some embodiments, step S11 includes: receiving an access request for target information from a corresponding first user device, wherein the access request includes target identity information; and if the target identity information is verified successfully, obtaining one or more first target identification information and second target identification information based on the target identity information. In some embodiments, the identity information includes, but is not limited to, a digital certificate, facial image information, etc. In some embodiments, a whitelist of identity information is provided in the network device. For example, if the target identity information is on the whitelist, the target identity information is determined to have been verified successfully to prevent malicious parties from accessing the information. In some embodiments, each piece of information is associated with an identity whitelist. Based on the target identification information of the target information, the identity whitelist corresponding to the target information is retrieved from a database to verify whether the target identity information is on the whitelist. In some embodiments, to further enhance information security, an encrypted authorization token is used to record the acquisition path of the encryption block (e.g., the first identification information of the encryption block and the second identification information of the storage node where the encryption block is located). By associating the authorization token with the identity information, a target authorization token is obtained based on the target identity information, thereby obtaining the first target identification information and the second target identification information. In other embodiments, the identity information is directly associated with the corresponding first identification information and second identification information, so as to obtain the first target identification information and the second target identification information based on the target identity information. For detailed description of this part, please refer to the corresponding embodiment below and will not be repeated here.

[0032] In some embodiments, the access request also includes target identification information of the target information, and obtaining one or more first target identification information and second target identification information based on the target identification information includes: obtaining multiple authorization tokens corresponding to the target information from a database based on the target identification information, wherein a mapping relationship exists between the target identification information and the multiple authorization tokens; obtaining a target authorization token corresponding to the target identity information from the multiple authorization tokens based on the target identity information, wherein the target identity information and the target authorization token are mapped to each other, and the target authorization token is authorization information encrypted using a second public key, wherein the second public key includes a public key corresponding to the network device; and decrypting the target authorization token using a second private key corresponding to the second public key to obtain a decrypted target authorization token, wherein the target authorization token includes one or more first target identification information and second target identification information corresponding to the target identity information. For example, to further improve information security, the encrypted authorization token records the acquisition path of the encryption block (e.g., the first identification information of the encryption block and the second identification information of the storage node where the encryption block is located). By associating the authorization token with the identity information, the target authorization token is obtained based on the target identity information, thereby obtaining the first target identification information and the second target identification information. For example, the target identification information includes, but is not limited to, an information ID, so that the multiple authorization tokens corresponding to the target information can be queried based on the target identification information. For example, the target information includes user A's basic information, including "user A's name, education, age, address, telephone number, and workplace." This target information corresponds to multiple authorization tokens (e.g., P1, P2, and P3), and each authorization token has a mapping relationship with the corresponding identity information. For example, authorization token P1 has a mapping relationship with identity information U1, authorization token P2 has a mapping relationship with identity information U2, and authorization token P3 has a mapping relationship with identity information U3. Based on the target identity information (e.g., a digital certificate or facial image information, etc.), the target authorization token (e.g., P2) that has a mapping relationship with the target identity information is determined from the multiple authorization tokens corresponding to the target information. In some embodiments, the authorization token records the first identification information of the encryption block that can be obtained according to the corresponding permission conditions, as well as the second identification information of the storage node that stores each encryption block. To improve information security, the authorization token is authorization information encrypted using a second public key. For example, the second public key uses the public key of the network device, so that the authorization token can be decrypted by the network device using the corresponding second private key to obtain the decrypted target authorization token, thereby obtaining one or more first target identification information and second target identification information corresponding to the target identity information, and then obtaining one or more target encryption blocks corresponding to the target identity information of the first user device.

[0033] In some embodiments, the method further includes step S15 (not shown). In step S15, an authorization request regarding target information is received from a second user device, wherein the target information includes multiple information blocks, and the authorization request includes one or more identity information and information blocks corresponding to each identity information. For each one or more information blocks corresponding to each identity information, each information block is encrypted using a first public key corresponding to the identity information to obtain one or more encrypted blocks corresponding to each of the one or more identity information, and first identification information for each encrypted block is generated. For each one or more encrypted blocks corresponding to each of the one or more identity information, a storage node for each encrypted block is determined, second identification information for each storage node is generated, and the encrypted block is sent to the corresponding storage node for storage. For each identity information, the one or more first identification information and second identification information corresponding to the identity information are encrypted using a second public key to obtain an authorization token corresponding to each of the one or more identity information. A mapping relationship between the target identification information and the corresponding multiple authorization tokens, as well as a mapping relationship between each identity information and the authorization token corresponding to the identity information, is established in a database. In some embodiments, the second user device includes, but is not limited to, an authorization node. For example, the second user device may set authorization rules for a particular piece of information. For example, a second user corresponding to a second user device divides the target information into multiple information blocks on the second user device, and assigns one or more information blocks to each identity information. In some embodiments, the information block is encrypted using the corresponding first public key to produce an encrypted block. The first public key includes the public key corresponding to the identity information corresponding to the information block. Since the identity information corresponds to the first user device, the first public key also includes the public key of the corresponding first user device. In some embodiments, the same information block may be encrypted using multiple first public keys, resulting in multiple encrypted blocks. For example, information block A1 is encrypted using the first public keys of multiple first user devices, with each encryption resulting in an encrypted block. In some embodiments, the storage node for each encrypted block can be randomly determined. For example, the storage node for a particular encrypted block can be randomly determined from multiple storage nodes. In some embodiments, for each identity information, after generating the first identification information for the one or more encrypted blocks corresponding to the identity information and the second identification information for the storage node storing each encrypted block, the one or more first identification information and second identification information corresponding to the identity information are encrypted using the second public key to produce an encrypted authorization token. Establish a mapping relationship between the target identification information and the corresponding multiple authorization tokens, as well as a mapping relationship between each identity information and the authorization token corresponding to the identity information, so as to query the multiple authorization tokens corresponding to the target information based on the target identification information of the target information, and then query the target authorization token from the multiple authorization tokens corresponding to the target information based on the target identity information.

[0034] In some embodiments, the access request also includes target identification information of the target information, and step S11 includes: obtaining multiple first identification information corresponding to the target information from a database based on the target identification information, each first identification information corresponding to second identification information, wherein the target information includes multiple information blocks, each information block is encrypted using one or more first public keys to obtain one or more encrypted blocks, the target identification information and the identity information corresponding to the one or more first public keys are mapped to each other, the multiple information blocks include a target information block, and each target information block is encrypted using the first public key corresponding to the target identity information; if the target identity information exists in the one or more identity information corresponding to the target identification information, determining that the target identity information meets the target permission condition, and determining one or more first target identification information from the multiple first identification information based on the target identity information, wherein there is a mapping relationship between the one or more first target identification information and the target identity information, and each first target identification information corresponds to the second target identification information. In some embodiments, a piece of information includes multiple information blocks, each information block is encrypted using one or more first public keys to obtain an encrypted block corresponding to each of the one or more first public keys. Each encryption block corresponds to first identification information. In other words, there is a mapping relationship between the identification information of each piece of information and the multiple first identification information of the multiple encryption blocks corresponding to the piece of information, so as to determine the multiple first identification information corresponding to the target information based on the target identification information of the target information. In some embodiments, each first user device corresponds to identity information, and the first user device can publish its own first public key. The network device obtains the first public key and encrypts the information block that the identity information has the authority to obtain based on the first public key to obtain an encryption block, and establishes a mapping relationship between the identity information and the first identification information of the encryption block obtained based on the first public key. For example, the multiple information blocks corresponding to the target information include the target encryption block encrypted using the first public key corresponding to the target identity information. According to the target identity information, one or more first target identification information that have a mapping relationship with the target identity information can be determined from the multiple first identification information.

[0035] In some embodiments, the method further includes step S16 (not shown). In step S16, receiving an authorization request for target information sent by a second user device, wherein the target information includes multiple information blocks, and the authorization request includes one or more identity information and information blocks corresponding to each identity information; encrypting each of the one or more information blocks corresponding to each identity information using a first public key corresponding to the identity information to obtain one or more encrypted blocks corresponding to each of the one or more identity information, and generating first identification information for each encrypted block; determining a storage node for each of the one or more encrypted blocks corresponding to each identity information, generating second identification information for each storage node, and sending the encrypted block to the corresponding storage node for storage; and establishing in a database a mapping relationship between the target identification information and the corresponding multiple first identification information, a mapping relationship between each first identification information and the corresponding second identification information, and a mapping relationship between each identity information and the first identification information corresponding to the identity information. For example, a second user corresponding to the second user device divides the target information into multiple information blocks on the second user device and assigns one or more information blocks to each identity information. In some embodiments, an information block is encrypted using a corresponding first public key to produce an encrypted block. The first public key includes the public key corresponding to the identity information corresponding to the information block. The identity information corresponds to a first user device. Therefore, the first public key includes the public key of the corresponding first user device. In some embodiments, the same information block may be encrypted using multiple first public keys to produce multiple encrypted blocks. For example, information block A1 is encrypted using the first public keys of multiple first user devices, with each encryption resulting in an encrypted block. In some embodiments, the storage node for each encrypted block may be randomly determined. For example, the storage node for a particular encrypted block may be randomly determined from multiple storage nodes. A mapping relationship is established between target identification information and the corresponding multiple first identification information, a mapping relationship between each first identification information and the corresponding second identification information, and a mapping relationship between each identity information and the first identification information corresponding to the identity information. This allows, based on the target identification information of the target information, to query the multiple first identification information corresponding to the target information and the second identification information corresponding to each first identification information. Furthermore, based on the target identity information, the first target identification information and the second target identification information corresponding to each first target identification information can be queried from the multiple first identification information corresponding to the target information.

[0036] In some embodiments, to improve the security of information transmission, the SSL / TLS protocol is used for encrypted communication during interactions between user devices and network devices, and between storage nodes and network devices, and digital signature technology is used to ensure the authenticity and integrity of the source of the information. In some embodiments, the method further includes step S17 (not shown), in which the database is synchronously updated and recorded in the blockchain. For example, the mapping relationship between the target identification information and the corresponding multiple authorization tokens, as well as the mapping relationship between each identity information and the authorization token corresponding to the identity information, or the mapping relationship between the target identification information and the corresponding multiple first identification information, the mapping relationship between each first identification information and the corresponding second identification information, and the mapping relationship between each identity information and the first identification information corresponding to the identity information are synchronously updated and recorded in the blockchain. This facilitates information tracing.

[0037] Figure 2 A structural schematic diagram of a network device according to an embodiment of the present application is shown, wherein the device includes a first module, a second module, and a third module. The first module is used to respond to an access request for target information sent by a corresponding first user device, and obtain one or more first target identification information and second target identification information according to the target identity information corresponding to the first user device, wherein the first target identification information includes identification information of the target encryption block, and the second target identification information includes identification information of the target storage node storing the target encryption block; the first module is used to send an acquisition request for each target encryption block to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; the third module is used to receive one or more target encryption blocks sent by one or more target storage nodes, wherein the target encryption block includes information encrypted using the first public key corresponding to the target identity information; the fourth module is used to send one or more target encryption blocks to the first user device, so that the first user device uses the first private key corresponding to the first public key to decrypt each target encryption block, and synthesizes the decrypted one or more target encryption blocks according to the information synthesis rule.

[0038] Here, the specific implementations corresponding to module 11, module 12, module 13, and module 14 are the same or similar to the specific embodiments of steps S11, S12, S13, and S14, and are therefore not repeated here and are included herein by reference.

[0039] In addition to the methods and devices described in the above embodiments, the present application also provides a computer-readable storage medium, which stores computer code. When the computer code is executed, the method described in any of the above items is executed.

[0040] The present application also provides a computer program product. When the computer program product is executed by a computer device, the method described in any one of the preceding items is executed.

[0041] The present application also provides a computer device, comprising:

[0042] one or more processors;

[0043] a memory for storing one or more computer programs;

[0044] When the one or more computer programs are executed by the one or more processors, the one or more processors are caused to implement the method as described in any one of the preceding items.

[0045] Figure 3 shows an exemplary system that can be used to implement the various embodiments described in this application;

[0046] like Figure 3 In some embodiments, the system 300 can function as any of the devices described in the various embodiments. In some embodiments, the system 300 can include one or more computer-readable media (e.g., system memory or NVM / storage device 320) having instructions and one or more processors (e.g., processor(s) 305) coupled to the one or more computer-readable media and configured to execute the instructions to implement the modules and thereby perform the actions described herein.

[0047] For one embodiment, system control module 310 may include any suitable interface controller to provide any suitable interface to at least one of processor(s) 305 and / or any suitable device or component in communication with system control module 310 .

[0048] The system control module 310 may include a memory controller module 330 to provide an interface to the system memory 315. The memory controller module 330 may be a hardware module, a software module, and / or a firmware module.

[0049] System memory 315 can be used, for example, to load and store data and / or instructions for system 300. For one embodiment, system memory 315 can include any suitable volatile memory, such as a suitable DRAM. In some embodiments, system memory 315 can include double data rate type four synchronous dynamic random access memory (DDR4 SDRAM).

[0050] For one embodiment, system control module 310 may include one or more input / output (I / O) controllers to provide interfaces to NVM / storage device 320 and communication interface(s) 325 .

[0051] For example, NVM / storage 320 may be used to store data and / or instructions. NVM / storage 320 may include any suitable non-volatile memory (e.g., flash memory) and / or may include any suitable non-volatile storage device(s) (e.g., one or more hard disk drives (HDDs), one or more compact disk (CD) drives, and / or one or more digital versatile disk (DVD) drives).

[0052] NVM / storage device 320 may include storage resources that are physically part of the device on which system 300 is installed, or it may be accessible to the device without being part of the device. For example, NVM / storage device 320 may be accessed over a network via communication interface(s) 325.

[0053] Communication interface(s) 325 may provide an interface for system 300 to communicate over one or more networks and / or with any other suitable devices. System 300 may wirelessly communicate with one or more components of a wireless network in accordance with any of one or more wireless network standards and / or protocols.

[0054] For one embodiment, at least one of the processor(s) 305 may be packaged together with the logic of one or more controllers of the system control module 310 (e.g., the memory controller module 330). For one embodiment, at least one of the processor(s) 305 may be packaged together with the logic of one or more controllers of the system control module 310 to form a system-in-package (SiP). For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with the logic of one or more controllers of the system control module 310. For one embodiment, at least one of the processor(s) 305 may be integrated on the same die with the logic of one or more controllers of the system control module 310 to form a system-on-chip (SoC).

[0055] In various embodiments, system 300 may be, but is not limited to, a server, a workstation, a desktop computing device, or a mobile computing device (e.g., a laptop computing device, a handheld computing device, a tablet computer, a netbook, etc.). In various embodiments, system 300 may have more or fewer components and / or a different architecture. For example, in some embodiments, system 300 includes one or more cameras, a keyboard, a liquid crystal display (LCD) screen (including a touchscreen display), a non-volatile memory port, multiple antennas, a graphics chip, an application-specific integrated circuit (ASIC), and a speaker.

[0056] It should be noted that the present application can be implemented in software and / or a combination of software and hardware, for example, using an application-specific integrated circuit (ASIC), a general-purpose computer, or any other similar hardware device. In one embodiment, the software program of the present application can be executed by a processor to implement the steps or functions described above. Similarly, the software program of the present application (including related data structures) can be stored in a computer-readable recording medium, such as a RAM memory, a magnetic or optical drive, a floppy disk, and the like. In addition, some steps or functions of the present application can be implemented in hardware, for example, as a circuit that cooperates with a processor to perform the various steps or functions.

[0057] In addition, a part of the present application may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present application through the operation of the computer. Those skilled in the art should understand that the form in which the computer program instruction exists in a computer-readable medium includes but is not limited to a source file, an executable file, an installation package file, etc. Accordingly, the way in which the computer program instruction is executed by the computer includes but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium can be any available computer-readable storage medium or communication medium that can be accessed by the computer.

[0058] Communication media include media by which communication signals containing, for example, computer-readable instructions, data structures, program modules, or other data are transmitted from one system to another. Communication media may include guided transmission media such as cables and wires (e.g., fiber optic, coaxial, etc.) and wireless (unguided transmission) media capable of propagating energy waves, such as acoustic, electromagnetic, RF, microwave, and infrared. Computer-readable instructions, data structures, program modules, or other data may be embodied as, for example, a modulated data signal in a wireless medium such as a carrier wave or similar mechanism such as that embodied as part of spread spectrum technology. The term "modulated data signal" refers to a signal that has one or more of its characteristics changed or set in such a manner as to encode information in the signal. Modulation may be analog, digital, or a hybrid modulation technique.

[0059] By way of example and not limitation, computer-readable storage media may include volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer-readable instructions, data structures, program modules or other data. For example, computer-readable storage media include, but are not limited to, volatile memory such as random access memory (RAM, DRAM, SRAM); and non-volatile memory such as flash memory, various read-only memories (ROM, PROM, EPROM, EEPROM), magnetic and ferromagnetic / ferroelectric memories (MRAM, FeRAM); and magnetic and optical storage devices (hard disks, magnetic tapes, CDs, DVDs); or other media now known or later developed that can store computer-readable information / data for use by a computer system.

[0060] Here, according to one embodiment of the present application, a device is included, which includes a memory for storing computer program instructions and a processor for executing the program instructions, wherein, when the computer program instructions are executed by the processor, the device is triggered to run the methods and / or technical solutions based on the aforementioned multiple embodiments of the present application.

[0061] It is obvious to those skilled in the art that the present application is not limited to the details of the above exemplary embodiments, and that the present application can be implemented in other specific forms without departing from the spirit or basic features of the present application.

Claims

1. An information processing method, characterized in that: Applied to a network device, the method includes: receiving an access request for target information sent by a corresponding first user device, wherein the access request includes target identity information and target identification information of the target information; If the target identity information is verified, obtaining multiple first identification information corresponding to the target information from a database based on the target identification information, each first identification information corresponding to the second identification information, wherein the target information includes multiple information blocks, each information block is encrypted using one or more first public keys to obtain one or more encrypted blocks, there is a mapping relationship between the target identification information and the identity information corresponding to the one or more first public keys, the multiple information blocks include a target information block, and each target information block is encrypted using the first public key corresponding to the target identity information; If the target identity information exists in one or more identity information corresponding to the target identification information, determining that the target identity information satisfies the target permission condition, and determining one or more first target identification information from the multiple first identification information based on the target identity information, wherein a mapping relationship exists between the one or more first target identification information and the target identity information, each first target identification information corresponds to second target identification information, the first target identification information includes identification information of a target encryption block, and the second target identification information includes identification information of a target storage node storing the target encryption block; For each target encryption block, sending an acquisition request for the target encryption block to the corresponding target storage node according to the second target identification information corresponding to the target encryption block, wherein the acquisition request includes the first target identification information of the target encryption block; Receiving one or more target encrypted blocks sent by one or more target storage nodes, wherein the target encrypted blocks include information encrypted using a first public key corresponding to the target identity information; The one or more target encryption blocks are sent to the first user device so that the first user device decrypts each target encryption block using the first private key corresponding to the first public key, and synthesizes the decrypted one or more target encryption blocks according to an information synthesis rule.

2. The method according to claim 1, characterized in that The access request also includes target identification information of the target information, and obtaining one or more first target identification information and second target identification information according to the target identification information includes: Acquire, from a database according to the target identification information, a plurality of authorization tokens corresponding to the target information, wherein a mapping relationship exists between the target identification information and the plurality of authorization tokens; Obtaining a target authorization token corresponding to the target identity information from the multiple authorization tokens according to the target identity information, wherein a mapping relationship exists between the target identity information and the target authorization token, and the target authorization token is authorization information encrypted by a second public key, and the second public key includes a public key corresponding to the network device; The target authorization token is decrypted using the second private key corresponding to the second public key to obtain a decrypted target authorization token, wherein the target authorization token includes one or more first target identification information and second target identification information corresponding to the target identity information.

3. The method according to claim 2, characterized in that The method further comprises: receiving an authorization request for the target information sent by a second user equipment, wherein the target information includes a plurality of information blocks, and the authorization request includes one or more identity information and an information block corresponding to each identity information; For one or more information blocks corresponding to each piece of identity information, encrypt each information block using the first public key corresponding to the identity information to obtain one or more encrypted blocks corresponding to each piece of identity information in the one or more pieces of identity information, and generate first identification information for each encrypted block; For one or more encrypted blocks corresponding to each piece of identity information, determining a storage node for each encrypted block, generating second identification information for each storage node, and sending the encrypted block to the corresponding storage node for storage; For each piece of identity information, encrypt the one or more first identification information and second identification information corresponding to the identity information using the second public key to obtain an authorization token corresponding to each piece of identity information in the one or more pieces of identity information; A mapping relationship between the target identification information and the corresponding authorization tokens, as well as a mapping relationship between each identity information and the authorization token corresponding to the identity information, is established in the database.

4. The method according to claim 1, wherein The method further comprises: receiving an authorization request for the target information sent by a second user equipment, wherein the target information includes a plurality of information blocks, and the authorization request includes one or more identity information and an information block corresponding to each identity information; For one or more information blocks corresponding to each piece of identity information, encrypt each information block using the first public key corresponding to the identity information to obtain one or more encrypted blocks corresponding to each piece of identity information in the one or more pieces of identity information, and generate first identification information for each encrypted block; For one or more encrypted blocks corresponding to each piece of identity information, determining a storage node for each encrypted block, generating second identification information for each storage node, and sending the encrypted block to the corresponding storage node for storage; A mapping relationship between the target identification information and the corresponding multiple first identification information, a mapping relationship between each first identification information and the corresponding second identification information, and a mapping relationship between each identity information and the first identification information corresponding to the identity information are established in the database.

5. The method according to claim 1, wherein The one or more target encryption blocks include a first target encryption block, and synthesizing information on the one or more decrypted target encryption blocks according to an information synthesis rule includes: The first target encryption block is arranged at the beginning position of the information to synthesize the information.

6. The method according to claim 1, characterized in that The method further comprises: The database synchronization update is recorded in the blockchain.

7. A computer device for information processing, comprising a memory, a processor, and a computer program stored in the memory, characterized in that: The processor executes the computer program to implement the steps of the method according to any one of claims 1 to 6.

8. A computer-readable storage medium having a computer program / instruction stored thereon, characterized in that: When the computer program / instructions are executed by a processor, the steps of the method according to any one of claims 1 to 6 are implemented.

Images