Data processing method, device and equipment based on block chain and readable storage medium

Abstract

The invention discloses a block chain-based data processing method, device and equipment and a readable storage medium, and the method comprises the steps: if a viewing request for a digital resource identifier sent by a second mechanism is obtained, forwarding the viewing request to a resource client, so that the resource client authorizes the viewing request; if the resource client authorizes the viewing request, opening a viewing permission for the digital resource identifier in the resource client for a second mechanism; obtaining a signature verification request sent by a second institution for the checked digital resource identifier, carrying out signature verification on signature information in public information corresponding to the digital resource identifier according to the signature verification request, and sending a signature verification result to the second institution, so that the second institution returns a service excitation resource when determining that the signature verification result is a signature verification passing result; and forwarding the service excitation resource to the resource client. By adopting the method and the device, the security of the private data can be improved, and the calculation cost of data exchange is reduced.

Description

Technical Field

[0001] The present application relates to the field of computer technology, and in particular to a blockchain-based data processing method, device, equipment, and readable storage medium. Background Art

[0002] In the current data exchange scheme, data owners need to provide the original data directly to data demanders. When different data demanders use the private data of the same data owner, they also exchange data through the original data, which leads to the privacy leakage and value loss of the original data, and even leads to the risk of breach of contract and disputes in data authorization. Summary of the invention

[0003] The embodiments of the present application provide a blockchain-based data processing method, apparatus, device, and readable storage medium, which can improve the security of private data.

[0004] On the one hand, an embodiment of the present application provides a data processing method based on blockchain, including:

[0005] The digital resource identifier issued by the first institution in the blockchain network is sent to the resource client corresponding to the target object; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object; the target object has the sole ownership authority over the digital resource identifier;

[0006] If a viewing request for the digital resource identifier sent by the second institution is obtained, the viewing request is forwarded to the resource client so that the resource client authorizes the viewing request;

[0007] If the resource client authorizes the viewing request, opening the viewing permission for the digital resource identifier in the resource client for the second institution;

[0008] Obtain a signature verification request for the digital resource identifier being viewed from the second institution, verify the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and send the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a passing result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0009] Forward business incentive resources to resource clients.

[0010] Among them, it also includes:

[0011] Obtaining object upload data sent by the first organization; the object upload data is data sent by the target object to the first organization;

[0012] Obtaining encryption selection indication information sent by the resource client, determining the local data indicated by the encryption selection indication information in the object upload data as private data, encrypting the private data to obtain encrypted private data, and determining the data in the object upload data other than the private data as public information;

[0013] Generate a to-be-chained identifier through public information and encrypted private data, and generate an ownership transaction based on the to-be-chained identifier, the resource client address, and the object identity information of the target object; the ownership transaction includes the ownership relationship between the target object and the to-be-chained identifier;

[0014] The ownership transaction is sent to the consensus network in the blockchain network. If the ownership transaction is successfully agreed upon in the consensus network, the identifier to be uploaded to the chain is determined as a digital resource identifier that has an ownership relationship with the target object, and the digital resource identifier is sent to the first institution.

[0015] The method includes obtaining encryption selection indication information sent by the resource client, determining partial data indicated by the encryption selection indication information in the object upload data as private data, encrypting the private data to obtain encrypted private data, and determining data other than the private data in the object upload data as public information, including:

[0016] Classify the object upload data based on the data type, and label the classified object upload data to obtain labeled data;

[0017] Obtaining encryption selection indication information sent by the resource client, determining the local data indicated by the encryption selection indication information in the object upload data as private data, obtaining first labeled data corresponding to the private data in the labeled data, and encrypting the first labeled data based on the private key of the resource client to obtain encrypted private data;

[0018] Data other than the first labeled data in the labeled data is determined as public information.

[0019] The first labeled data is encrypted based on the private key of the resource client to obtain encrypted private data, including:

[0020] Serialize the first tag data to obtain a serialized array, perform hash calculation on the serialized array to obtain an encryption starting point, and generate an encryption end point based on the encryption starting point and the business elliptic curve;

[0021] The encryption endpoint is signed with the private key of the resource client to obtain a resource encryption transaction, which is packaged to obtain a resource encryption block. The resource encryption transaction is sent to the consensus network in the blockchain network. If the consensus network successfully reaches a consensus on the resource encryption block, the resource encryption transaction is determined as encrypted privacy data.

[0022] Among them, verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request includes:

[0023] Obtaining the public key of the first institution according to the signature verification request, and performing a decryption operation on the signature information corresponding to the digital resource identifier based on the public key of the first institution to obtain a hash value to be verified;

[0024] Generate a target hash value of the public information corresponding to the digital resource identifier;

[0025] If the hash value to be verified is the same as the target hash value, the signature verification result is determined to be a passed result;

[0026] If the hash value to be verified is different from the target hash value, the signature verification result is determined to be a signature verification failure result, and an error message is returned to the first institution and the second institution.

[0027] The business incentive resource is forwarded to the resource client, including:

[0028] Determine the business incentive resource, the first blockchain address corresponding to the resource client, and the second blockchain address corresponding to the second institution as a resource transfer transaction;

[0029] Obtain the resource transfer signature sent by the second institution, package the resource transfer signature and the resource transfer transaction, and obtain the block to be uploaded to the chain; the resource transfer signature is obtained by the second institution signing the business incentive resource based on the second institution's private key;

[0030] If the resource transfer signature verification is passed, the resource transfer transaction in the block to be chained is executed to obtain the transaction execution result, and the transaction execution result and the block to be chained are sent to the consensus network in the blockchain network;

[0031] If the consensus network successfully reaches consensus on the transaction execution result and the block to be chained, the block to be chained is determined as the chained block, and the business incentive resource is added to the status data corresponding to the first blockchain address based on the chained block.

[0032] On the one hand, the embodiment of the present application provides another data processing method based on blockchain, including:

[0033] The resource client stores the digital resource identifier issued by the first institution in the blockchain network; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object corresponding to the resource client; the target object has the sole ownership authority over the digital resource identifier;

[0034] If a viewing request for a digital resource identifier sent by a blockchain node is obtained, the object identity information of the target object is obtained; the viewing request is a request initiated by the second institution to the blockchain node;

[0035] When the identity authentication of the object identity information is passed, the second institution is authorized to view the request, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node after determining that the signature verification result is a signature verification pass result; the signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0036] Receive business incentive resources forwarded by blockchain nodes.

[0037] Among them, it also includes:

[0038] In response to a data selection operation for object upload data, generating encryption selection indication information based on the data selection operation; the object upload data is data sent by the target object to the first institution;

[0039] Send encryption selection indication information to the blockchain node, so that the blockchain node determines the local data indicated by the encryption selection indication information in the object upload data as private data, encrypts the private data to obtain encrypted private data, and determines the data other than the private data in the object upload data as public information; the blockchain node is used to generate a digital resource identifier for the public information and the encrypted private data.

[0040] When the identity authentication of the object's identity information is passed, the second institution is authorized to view the request, including:

[0041] When the identity authentication for the object identity information is passed, respond to the identifier selection operation for the digital resource identifier set, authorize the viewing request based on the digital resource identifier selected by the identifier selection operation, obtain an authorization confirmation message, and send the authorization confirmation message to the blockchain node, so that the blockchain node opens the viewing permission for the digital resource identifier for the second institution based on the authorization confirmation message.

[0042] On the one hand, an embodiment of the present application provides a data processing device based on blockchain, including:

[0043] The identification issuing module is used to send the digital resource identification issued by the first institution in the blockchain network to the resource client corresponding to the target object; the metadata corresponding to the digital resource identification includes public information and encrypted private data for the target object; the target object has the sole ownership authority over the digital resource identification;

[0044] A request authorization module, for forwarding the viewing request for the digital resource identifier sent by the second institution to the resource client so that the resource client authorizes the viewing request;

[0045] The permission opening module is used to open the viewing permission for the digital resource identifier in the resource client for the second institution if the resource client authorizes the viewing request;

[0046] The signature verification processing module is used to obtain the signature verification request sent by the second institution for the digital resource identifier being viewed, verify the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and send the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a signature verification passing result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0047] The incentive distribution module is used to forward business incentive resources to resource clients.

[0048] Among them, it also includes:

[0049] A data acquisition module is used to acquire object upload data sent by the first organization; the object upload data is data sent by the target object to the first organization;

[0050] The encryption processing module is used to obtain the encryption selection indication information sent by the resource client, determine the local data indicated by the encryption selection indication information in the object upload data as private data, encrypt the private data to obtain encrypted private data, and determine the data in the object upload data other than the private data as public information;

[0051] The transaction generation module is used to generate the identifier to be put on the chain through public information and encrypted private data, and to generate the ownership transaction based on the identifier to be put on the chain, the resource client address and the object identity information of the target object; the ownership transaction includes the ownership relationship between the target object and the identifier to be put on the chain;

[0052] The transaction consensus module is used to send the ownership transaction to the consensus network in the blockchain network. If the ownership transaction is successfully agreed upon in the consensus network, the identifier to be uploaded to the chain will be determined as a digital resource identifier that has an ownership relationship with the target object, and the digital resource identifier will be sent to the first institution.

[0053] The encryption processing module includes:

[0054] A labeling processing unit, used for classifying the object upload data based on the data type, and performing labeling processing on the classified object upload data to obtain labeled data;

[0055] The labeled encryption unit is used to obtain the selected encryption indication information sent by the resource client, determine the local data indicated by the selected encryption indication information in the object upload data as private data, obtain the first labeled data corresponding to the private data in the labeled data, and encrypt the first labeled data based on the private key of the resource client to obtain encrypted private data;

[0056] The labeled encryption unit is further used to determine data in the labeled data other than the first labeled data as public information.

[0057] The label encryption unit includes:

[0058] A serialization subunit, used to serialize the first tag data to obtain a serialization array, perform hash calculation on the serialization array to obtain an encryption starting point, and generate an encryption end point based on the encryption starting point and a business elliptic curve;

[0059] The resource consensus subunit is used to sign the encryption endpoint with the private key of the resource client to obtain a resource encryption transaction, package the resource encryption transaction to obtain a resource encryption block, and send the resource encryption transaction to the consensus network in the blockchain network. If the consensus network successfully reaches a consensus on the resource encryption block, the resource encryption transaction is determined as encrypted privacy data.

[0060] The signature verification processing module includes:

[0061] A decryption processing unit, used to obtain the public key of the first institution according to the signature verification request, and perform a decryption operation on the signature information corresponding to the digital resource identifier based on the public key of the first institution to obtain a hash value to be verified;

[0062] A hash generation unit, used to generate a target hash value of the public information corresponding to the digital resource identifier;

[0063] A hash verification unit, configured to determine that the signature verification result is a signature verification passing result if the hash value to be verified is the same as the target hash value;

[0064] The hash verification unit is further used to determine that the signature verification result is a signature verification failure result if the hash value to be verified is different from the target hash value, and return error information to the first institution and the second institution.

[0065] Among them, the incentive distribution module includes:

[0066] An incentive transfer unit, configured to determine the business incentive resource, the first blockchain address corresponding to the resource client, and the second blockchain address corresponding to the second institution as a resource transfer transaction;

[0067] The incentive packaging unit is used to obtain the resource transfer signature sent by the second institution, package the resource transfer signature and the resource transfer transaction, and obtain the block to be chained; the resource transfer signature is obtained by the second institution signing the business incentive resource based on the private key of the second institution;

[0068] The incentive consensus unit is used to execute the resource transfer transaction in the block to be chained if the signature verification for the resource transfer is passed, obtain the transaction execution result, and send the transaction execution result and the block to be chained to the consensus network in the blockchain network;

[0069] The incentive consensus unit is also used to determine the block to be chained as a chained block if the consensus network successfully reaches a consensus on the transaction execution result and the block to be chained, and add the business incentive resource to the status data corresponding to the first blockchain address based on the chained block.

[0070] On the one hand, an embodiment of the present application provides another data processing device based on blockchain, including:

[0071] The identification storage module is used for the resource client to store the digital resource identification issued by the first institution in the blockchain network; the metadata corresponding to the digital resource identification includes public information and encrypted privacy data for the target object corresponding to the resource client; the target object has the sole ownership authority over the digital resource identification;

[0072] An identity authentication module, used to obtain the object identity information of the target object if a viewing request for the digital resource identifier sent by the blockchain node is obtained; the viewing request is a request initiated by the second institution to the blockchain node;

[0073] The request processing module is used to authorize the viewing request for the second institution when the identity authentication of the object identity information is passed, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node when the signature verification result is determined to be a signature verification pass result; the signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0074] The incentive receiving module is used to receive business incentive resources forwarded by the blockchain node.

[0075] Among them, it also includes:

[0076] A data selection module, for responding to a data selection operation on object upload data, and generating encryption selection indication information based on the data selection operation; the object upload data is data sent by the target object to the first institution;

[0077] The data indication module is used to send the selected encryption indication information to the blockchain node, so that the blockchain node determines the local data indicated by the selected encryption indication information in the object upload data as private data, encrypts the private data to obtain encrypted private data, and determines the data other than the private data in the object upload data as public information; the blockchain node is used to generate digital resource identifiers for the public information and the encrypted private data.

[0078] Among them, the request processing module is specifically used to respond to the identification selection operation for the digital resource identification set when the identity authentication for the object identity information is passed, authorize the viewing request based on the digital resource identification selected by the identification selection operation, obtain the authorization confirmation message, and send the authorization confirmation message to the blockchain node, so that the blockchain node can open the viewing permission for the digital resource identification for the second institution based on the authorization confirmation message.

[0079] On the one hand, an embodiment of the present application provides a computer device, including: a processor, a memory, and a network interface;

[0080] The processor is connected to the memory and the network interface, wherein the network interface is used to provide a data communication function, and the memory is used to store a computer program. When the computer program is executed by the processor, the computer device executes the method provided in the embodiment of the present application.

[0081] On the one hand, an embodiment of the present application provides a computer-readable storage medium, which stores a computer program. The computer program is suitable for being loaded and executed by a processor so that a computer device having the processor executes the method provided by the embodiment of the present application.

[0082] In one aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored in a computer-readable storage medium. A processor of a computer device reads the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the computer device executes the method provided in the embodiment of the present application.

[0083] The embodiment of the present application uses digital resource identification as a transaction medium for data exchange, and utilizes blockchain technology to package private data into digital assets that cannot be tampered with, cannot be copied, and can be traced, giving the target object full control and sole ownership of the digital resource identification it owns. The automation, decentralization and verifiability of data exchange are realized, and the fairness, transparency and security of transactions are guaranteed. In the authorization process of the digital resource identification, the second institution can only view the public information in the digital resource identification, and the encrypted private data corresponding to the digital resource identification is invisible to the second institution. In the digital resource identification verification process, only signature information is provided, avoiding data privacy leakage and data value loss. The business activities carried out by the second institution through the digital resource identification, such as issuing business incentive resources, do not need to perform complex preprocessing and cleaning on the private data of the target object, thereby reducing the computational cost and time cost of data exchange. The entire authorization process is established on the blockchain, and there is a credible authorization and settlement mechanism, which avoids the risk of breach of contract and disputes in data exchange, and further ensures the security of private data. BRIEF DESCRIPTION OF THE DRAWINGS

[0084] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0085] Figure 1 This is a schematic diagram of the structure of a blockchain network provided in an embodiment of the present application;

[0086] Figure 2 This is a schematic diagram of a data processing scenario based on blockchain provided in an embodiment of the present application;

[0087] Figure 3 This is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application. Figure 1 ;

[0088] Figure 4 This is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application. Figure 2 ;

[0089] Figure 5 This is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application. Figure 3 ;

[0090] Figure 6 This is a schematic diagram of a data processing device based on blockchain provided in an embodiment of the present application. Figure 1 ;

[0091] Figure 7 This is a schematic diagram of a data processing device based on blockchain provided in an embodiment of the present application. Figure 2 ;

[0092] Figure 8 It is a structural diagram of a computer device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0093] The following will be combined with the drawings in the embodiments of the present application to clearly and completely describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of this application.

[0094] Blockchain is the carrier and organizational method of running blockchain technology. Blockchain technology (BT), also known as distributed ledger technology, is an Internet database technology that is decentralized, open and transparent, allowing everyone to participate in database records. Blockchain technology is a distributed infrastructure and computing method that uses block chain data structures to verify and store data, uses distributed node consensus algorithms to generate and update data, uses cryptography to ensure the security of data transmission and access, and uses smart contracts composed of automated script codes to program and operate data.

[0095] For ease of understanding, the following will explain blockchain and its related concepts:

[0096] Blockchain: Blockchain is a new application model of computer technologies such as distributed data storage, peer-to-peer transmission, consensus mechanism and encryption algorithm. It is mainly used to organize data in chronological order and encrypt it into a ledger to make it impossible to be tampered with or forged. At the same time, it can verify, store and update data. Blockchain is essentially a decentralized database. Each node in the database stores an identical blockchain. The blockchain network can divide nodes into consensus nodes and business nodes, among which the consensus node is responsible for the consensus of the entire blockchain network. The process of writing transaction data into the ledger in the blockchain network can be: the resource client sends the transaction data to the business node, and then the transaction data is passed between the business nodes in the blockchain network in a relay manner until the consensus node receives the transaction data. The consensus node then packs the transaction data into a block and reaches consensus with other consensus nodes. After the consensus is passed, the block carrying the transaction data is written into the ledger.

[0097] Block: A data packet that carries transaction data (i.e., transaction business) on a blockchain network. It is a data structure marked with a timestamp and a hash value of the previous block. Blocks are verified by the network's consensus mechanism and the transactions in the block are confirmed.

[0098] Hash value: Also known as information characteristic value or characteristic value, hash value is generated by converting input data of any length into a password through a hash algorithm and making a fixed output. The original input data cannot be retrieved by decrypting the hash value. It is a one-way encryption function. In the blockchain, each block (except the initial block) contains the hash value of the previous block, which is called the parent block of the current block. Hash value is the potential core foundation and the most important aspect of blockchain technology. It preserves the authenticity of recorded and viewed data, as well as the integrity of the blockchain as a whole.

[0099] Transaction: It is an atomic ledger data status change on the blockchain and a record of its process and results.

[0100] Digital resources: Unique cryptographic tokens used to represent media resources (also known as digital assets) that can be traded on the blockchain.

[0101] Account: A blockchain account with an account address. The account address is a unique address generated on the blockchain using a public-private key pair, which is used to identify the unique address of a blockchain account.

[0102] Digital resource blockchain: refers to a blockchain system that supports the issuance, transaction, circulation, and management of digital resource meta-commodities.

[0103] Digital resource meta-items: digital assets with unique identifiers that are generated and issued based on alliance blockchain technology, have passed content compliance review, and can only be owned by blockchain accounts that have passed real-name authentication.

[0104] Digital resource metadata: information used to describe the properties of digital resource meta-products, used to indicate the digital resource meta-product's identification, uniform resource identifier, author name, summary, signature, etc.

[0105] Assets: Rights and interests that can be issued, circulated, stored, and traded on the blockchain and used to complete payment and clearing business.

[0106] See also Figure 1 , Figure 1 This is a schematic diagram of the structure of a blockchain network provided by an embodiment of the present application. Figure 1 As shown, the network architecture may include a business server 100, a terminal device 200, a first institution server 300 and a second institution server 400. Figure 1As shown, the number of business servers 100 can be at least one, the number of terminal devices 200 can be at least one, the number of first institution servers 300 can be at least one, and the number of second institution servers 400 can be at least one, and the present application does not limit this. The business server 100 can be data-connected with one or more of the terminal device 200, the first institution server 300, and the second institution server 400, respectively, and data is exchanged with the business server 100 through the data connection. Data connection can also be established between the terminal device 200, the first institution server 300, and the second institution server 400, wherein the above-mentioned data connection does not limit the connection mode, and can be directly or indirectly connected through a wired communication mode, can also be directly or indirectly connected through a wireless communication mode, and can also be connected through other modes, and the present application does not limit this.

[0107] Optionally, the business server 100 may include a business node or a consensus node. When there are multiple servers, the multiple servers may include business nodes and consensus nodes. Business nodes and consensus nodes together constitute a blockchain network, and both consensus nodes and business nodes store the same blockchain. In a blockchain, before a block is put on the chain, the block must be agreed upon by the consensus nodes in the blockchain network, and the block can only be added to the blockchain after the consensus is passed. Although business nodes do not participate in the consensus of blocks, they will help spread blocks and voting messages, as well as synchronize status with each other. In addition, both consensus nodes and business nodes can be called blockchain nodes.

[0108] It is understandable that transactions or block transfers can be carried out between blockchain nodes through the above data connection. The blockchain network can realize data connection between blockchain nodes based on node identification. Each blockchain node in the blockchain network has a node identification corresponding to it, and each of the above blockchain nodes can store the node identifications of other blockchain nodes that are connected to itself, so that the acquired data or generated blocks can be broadcast to other blockchain nodes according to the node identifications of other blockchain nodes. For example, a node identification list as shown in Table 1 can be maintained in the business server 100 blockchain node 1, and the node identification list stores the node names and node identifications of other blockchain nodes:

[0109] Table 1

[0110] Node Name Node ID Blockchain Node 1 AAA.AAA.AAA.AAA Blockchain Node 2 BBB.BBB.BBB.BBB Blockchain Node 3 CCC.CCC.CCC.CCC … … Blockchain Node n DDD.DDD.DDD.DDD

[0111] The node identifier can be an Internet Protocol (IP) address for interconnecting networks or any other information that can be used to identify a blockchain node in a blockchain network. Table 1 only uses the IP address as an example for illustration. For example, blockchain node 1 can send information (e.g., transaction data) to blockchain node 2 through the node identifier BBB.BBB.BBB.BBB, and blockchain node 2 can determine that the information is sent by blockchain node 1 through the node identifier AAA.AAA.AAA.AAA.

[0112] It is understandable that the data processing method provided in the embodiment of the present application can be executed by a computer device, which includes but is not limited to the above-mentioned terminal device, server and consensus node cluster. The above-mentioned server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms. The above-mentioned terminal device can be a smart phone, a tablet computer, a laptop computer, a desktop computer, a smart speaker, a smart watch, a smart TV, a car terminal, etc., but is not limited to this.

[0113] It can be understood that the embodiments of the present application can be applied to various scenarios, including but not limited to blockchain, digital resources, data interaction, cloud technology, cloud gaming, artificial intelligence, smart transportation, assisted driving and other scenarios.

[0114] It can be understood that in the specific implementation of this application, the data related to the target object (user), such as the object identity information of the target object, the resource client, etc., when the following embodiments of this application are applied to specific products or technologies, need to obtain user permission or consent, and the collection, use and processing of relevant data need to comply with relevant laws, regulations and standards.

[0115] like Figure 1As shown, the terminal device 200 may be installed with a resource client. When the resource client runs in the terminal device 200, it may interact with the business server 100, so that the business server 100 may receive business data (such as object upload data, digital resource identifiers, etc.) from the terminal device 200. The resource client may be a game application, a video editing application, a social application, an instant messaging application, a live broadcast application, a short video application, a video application, a music application, a shopping application, a novel application, a payment application, a browser, or other resource client having the function of displaying data information such as text, images, audio, and video, and may store digital resource identifiers through the resource management business function. The resource client may be an independent client or an embedded sub-client integrated in a client (such as an instant messaging client, a social client, a video client, etc.), which is not limited here.

[0116] The resource client can be used to implement resource management business functions, and based on the resource management business functions, realize the communication connection with the decentralized application client.

[0117] A resource client is a tool for managing and storing user digital resources. For example, digital resources can be transferred to other accounts based on the resource client, and digital resources transferred from other accounts can be received based on the resource client. The resource client can be a hardware device or a software program. In this application, the resource client of the target object can establish a communication connection with the decentralized application client to implement related operations such as authorized login of the target object.

[0118] It is understandable that as various decentralized applications are widely deployed on the blockchain and user activities on the blockchain increase, general users can use blockchain key management tools to log in when using decentralized applications. The address in the blockchain key management tool corresponds to a user on the blockchain. The decentralized application can obtain the user address from the key management tool through some interfaces. In order to solve the problem that the third party (which may be the first institution and the second institution mentioned below) cannot trust the user address used when logging in to the decentralized application in the backend.

[0119] Specifically, the terminal device 200 associated with the user (target object) can obtain the digital resource identifier issued by the first institution server 300 through the resource client, wherein the digital resource identifier can be a digital collection, that is, a trusted digital rights certificate with unique characteristics in the blockchain network, and a data object that can record and process multi-dimensional and complex attributes on the blockchain. The metadata corresponding to the digital resource identifier includes public information and encrypted privacy data for the user (target object). The digital resource identifier can be used to represent the ownership of the corresponding digital resource meta-item, which can be understood as a certificate. When a user has the unique ownership right of a digital resource identifier, it can be proved that the digital resource meta-item associated with the digital resource identifier belongs to the user. The digital resource meta-item can be the metadata corresponding to the digital resource identifier.

[0120] It can be understood that the issuance, circulation, storage and transaction of digital resource identifiers can be carried out in the blockchain network, making the circulation process of digital resource identifiers open and transparent while ensuring the security of data transmission and access.

[0121] For ease of understanding, the business nodes or consensus nodes included in the business server 100 can also be referred to as blockchain nodes in the blockchain network 100.

[0122] The blockchain node in the blockchain network 100 can send the digital resource identifier issued by the first institution in the blockchain network to the corresponding resource client in the terminal device 200 associated with the target object.

[0123] The first institution and the second institution mentioned below may be financial institutions, financial institutions, business institutions, and other individuals or collective organizations that require data exchange scenarios.

[0124] It is understandable that the first institution can issue a digital resource identifier in the blockchain network 100 through the first institution server 300, and the first institution server 300 can send the user's object upload data to the blockchain network 100. The blockchain nodes in the blockchain network 100 can generate ownership transactions based on the object upload data, and the ownership transactions can be consensus-uploaded to the blockchain network 100. After the uploading is completed, the user can have the unique ownership authority of the digital resource identifier in the blockchain network.

[0125] If the blockchain node in the blockchain network 100 obtains a viewing request for a digital resource identifier sent by the second institution server 400, it forwards the viewing request to the resource client corresponding to the terminal device 200, and the user can authorize the viewing request through the resource client.

[0126] If the resource client authorizes the viewing request, the blockchain network 100 may open viewing permissions for the digital resource identifier in the resource client for the second institution.

[0127] The second institution server 400 may send a signature verification request for the viewed digital resource identifier, and the business server 100 may verify the signature through the signature information in the public information corresponding to the digital resource identifier, and send the verification result to the second institution server 400.

[0128] The second institution server 400 can return the business incentive resources to the blockchain node in the blockchain network 100 when determining that the signature verification result is a passing result. The business incentive resources can also be passed through consensus in the blockchain network and written into the blockchain.

[0129] The blockchain node in the blockchain network 100 can forward the business incentive resource to the terminal device 200 associated with the user (target object). The user can participate in the business activities carried out by the first institution through the business incentive resource.

[0130] The embodiment of the present application uses digital resource identifiers as the transaction medium for data exchange, and utilizes blockchain technology to package private data into digital assets that cannot be tampered with, copied, and traced, giving users (target objects) full control and sole ownership of the digital resource identifiers they own. This achieves automation, decentralization, and verifiability of data exchange, and ensures fairness, transparency, and security of transactions.

[0131] During the authorization process of the digital resource identifier, the second institution can only view the public information in the digital resource identifier. The encrypted privacy data corresponding to the digital resource identifier is invisible to the second institution. In the process of digital resource identifier verification, only the verification result is provided, avoiding data privacy leakage and data value loss. The second institution does not need to perform complex preprocessing and cleaning of the target object's privacy data for business activities carried out through the digital resource identifier, such as issuing business incentive resources, thereby reducing the computational cost and time cost of data exchange. The entire authorization process is established and completed on the blockchain and consensus is reached. There is a trusted authorization and settlement mechanism, which avoids the risk of breach of contract and dispute in data exchange. Users can also trace the authorization process. The data authorization link is complete and reliable, ensuring the compliance of data acquisition and data exchange, as well as trusted interaction, and improving the security of data exchange.

[0132] To facilitate understanding of the above digital resource identification authorization process, we will take the example of the first institution issuing digital resource identification A to user A in the blockchain network, and the second institution issuing consumption voucher B to the user with digital resource identification A. Figure 2 , Figure 2This is a schematic diagram of a scenario of blockchain-based data processing provided in an embodiment of the present application.

[0133] like Figure 2 As shown, the blockchain node in the blockchain network 100 can send the digital resource identifier issued by the first institution in the blockchain network to the corresponding resource client in the terminal device 200 associated with user A. User A can receive the digital resource identifier A issued by the first institution in the blockchain network and store the digital resource identifier A through the resource client in the terminal device 200.

[0134] Among them, the metadata corresponding to the digital resource identifier A includes public information and encrypted privacy data for user A (target object). The public information may include the signature information of the digital resource identifier, and the encrypted privacy data may include the object identity information of user A (target object). The object identity information may be the consumption information, telephone number, and communication address registered by user A in the first institution. User A has the sole ownership right of the digital resource identifier A.

[0135] User A can enter the second institution's application through the business activity portal launched by the second institution. In business scenario 201, user A can learn about the time, theme, content, etc. of the business activity.

[0136] After user A enters the second institution application, the second institution server 400 can send a viewing request for the digital resource identifier to the blockchain node in the blockchain network 100, and the blockchain node in the blockchain network 100 can forward the viewing request to the resource client corresponding to the terminal device 200.

[0137] User A can authorize the viewing request in the activity page of the second institution's application through the resource client. In business scenario 202, user A can authorize the selected digital resource identifier, and digital resource identifier B, digital resource identifier C, and digital resource identifier D can be digital resource identifiers issued by other institutions on the blockchain network, or other digital resource identifiers issued by the first institution on the blockchain network.

[0138] If user A authorizes the viewing request to view the digital resource identifier A, the blockchain node in the blockchain network 100 can open the viewing permission for the digital resource identifier A in the resource client for the second institution.

[0139] The second institution server 400 can send a signature verification request for the digital resource identifier A being viewed, and the blockchain node in the blockchain network 100 can verify the signature through the signature information in the public information corresponding to the digital resource identifier, and send the verification result to the second institution server 400.

[0140] The second institution server 400 can return the consumption voucher B to the blockchain node in the blockchain network 100 when determining that the signature verification result is a passing result. The consumption voucher B can also be consensus-based in the blockchain network and written into the blockchain after the consensus is passed.

[0141] The blockchain node in the blockchain network 100 can forward the consumption voucher B to the terminal device 200 associated with the user (target object).

[0142] The embodiment of the present application uses digital resource identifiers as the transaction medium for data exchange, and utilizes blockchain technology to package private data into digital assets that cannot be tampered with, copied, and traced, giving users (target objects) full control and sole ownership of the digital resource identifiers they own. This achieves automation, decentralization, and verifiability of data exchange, and ensures fairness, transparency, and security of transactions.

[0143] During the authorization process of the digital resource identifier, the second institution can only view the public information in the digital resource identifier. The encrypted private data corresponding to the digital resource identifier is invisible to the second institution. In the digital resource identifier verification process, only signature information is provided, avoiding data privacy leakage and data value loss. The business activities carried out by the second institution through the digital resource identifier, such as issuing business incentive resources, do not require complex preprocessing and cleaning of the target object's private data, thereby reducing the computational cost and time cost of data exchange. The entire authorization process is established on the blockchain, and there is a trusted authorization and settlement mechanism, which avoids the risk of breach of contract and disputes in data exchange, and further ensures the security of private data.

[0144] See also Figure 3 , Figure 3 This is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application. Figure 1 The blockchain-based data processing method can be executed by a blockchain node, and the blockchain node can be Figure 1 The blockchain node in the blockchain network 100 shown. The following will take the data processing method executed by the blockchain node as an example for explanation. Among them, the data processing method based on blockchain can at least include the following steps S101-S105:

[0145] Step S101, sending the digital resource identifier issued by the first institution in the blockchain network to the resource client corresponding to the target object; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object; the target object has the sole ownership authority over the digital resource identifier;

[0146] Specifically, the blockchain node can send the digital resource identifier issued by the first institution in the blockchain network to the resource client corresponding to the target object (user).

[0147] The first institution and the second institution mentioned below may be financial institutions, financial institutions, business institutions, and other individuals or collective organizations that require data exchange scenarios.

[0148] A digital resource identifier can be a digital collection, that is, a trusted digital rights certificate with unique characteristics in the blockchain network, and a data object that can record and process multi-dimensional and complex attributes on the blockchain. The metadata corresponding to the digital resource identifier includes public information and encrypted privacy data for the user (target object). The digital resource identifier can be used to represent the ownership of the corresponding digital resource meta-item, which can be understood as a certificate. When a user has the unique ownership of a digital resource identifier, it can be proved that the digital resource meta-item associated with the digital resource identifier belongs to the user. The digital resource meta-item can be the metadata corresponding to the digital resource identifier.

[0149] The specific process of the digital resource identifier issued by the first institution in the blockchain network can be: obtaining the object upload data sent by the first institution; the object upload data is the data sent by the target object to the first institution; obtaining the selected encryption indication information sent by the resource client, determining the local data indicated by the selected encryption indication information in the object upload data as private data, encrypting the private data to obtain encrypted private data, and determining the data other than the private data in the object upload data as public information; generating a to-be-chained identifier through public information and encrypted private data, and generating a property transaction based on the to-be-chained identifier, the resource client address and the object identity information of the target object; the property transaction includes the property relationship between the target object and the to-be-chained identifier; sending the property transaction to the consensus network in the blockchain network, if the property transaction is successfully agreed upon in the consensus network, then the to-be-chained identifier is determined as a digital resource identifier having a property relationship with the target object, and the digital resource identifier is sent to the first institution.

[0150] Specifically, the blockchain node can obtain the object upload data sent by the first organization. The object upload data is data sent by the user (target object) to the first organization, and may include the user's object identity information, such as the user's consumption information, telephone number, and communication address registered with the first organization. The user can authorize his or her object identity information to the first organization. The first organization determines the object identity information as the object upload data and sends the object upload data to the blockchain node.

[0151] The blockchain node can obtain the selected encryption indication information sent by the resource client. Among them, the resource client can be an application with data information function resource management business function, which can store the digital resource identifier issued by the first institution in the blockchain network through the resource management business function, and can also store the digital resource identifier issued by other institutions in the blockchain network, or other digital resource identifiers issued by the first institution in the blockchain network. The encryption indication information can be the user's authorization information for the object identity information in the resource client or the first institution application, as well as the selection confirmation information for the private data.

[0152] The blockchain node can determine the local data indicated by the encryption indication information selected in the object upload data as private data, and determine the data other than the private data in the object upload data as public information.

[0153] The blockchain node can label the object uploaded data to obtain first labeled data, and then encrypt the first labeled data to obtain encrypted private data. The specific process can be: classify the object uploaded data based on the data type, label the classified object uploaded data to obtain labeled data; obtain the encryption selection indication information sent by the resource client, determine the local data indicated by the encryption selection indication information in the object uploaded data as private data, obtain the first labeled data corresponding to the private data in the labeled data, encrypt the first labeled data based on the private key of the resource client to obtain encrypted private data; determine the data in the labeled data other than the first labeled data as public information.

[0154] Specifically, blockchain nodes can classify object uploaded data by data type and divide it into different data items, such as consumption information, communication address, etc.

[0155] The blockchain node can label the uploaded data of the classified objects to obtain labeled data. For example, the consumption information can be divided into the amount gradient of the consumption flow, the communication address can be divided into urban areas, etc. The labeling processing can be carried out by data source, data type, data quality, data usage, etc. The specific process of labeling processing is not limited in the embodiment of the present application.

[0156] The blockchain node can obtain the encryption selection indication information sent by the resource client, determine the local data indicated by the encryption selection indication information in the object upload data as private data, and obtain the first labeled data corresponding to the private data in the labeled data.

[0157] The blockchain node can encrypt the first labeled data through the private key of the resource client to obtain encrypted private data, and determine the data in the labeled data except the first labeled data as public information.

[0158] The blockchain node can encrypt the first label data to obtain encrypted privacy data. The specific process of the blockchain node encrypting the first label data can be: serializing the first label data to obtain a serialized array, performing hash calculation on the serialized array to obtain an encryption starting point, and generating an encryption end point based on the encryption starting point and the business elliptic curve; signing the encryption end point with the private key of the resource client to obtain a resource encryption transaction, packaging the resource encryption transaction to obtain a resource encryption block, and sending the resource encryption transaction to the consensus network in the blockchain network. If the consensus network successfully reaches a consensus on the resource encryption block, the resource encryption transaction is determined as encrypted privacy data.

[0159] Specifically, the blockchain node can serialize the first tag data to obtain a serialized array. Serialization refers to converting data into an array through encoding. The first tag data can be serialized into a serialized array by using RLP (Recursive Length Prefix, recursive length prefix encoding, referred to as RLP).

[0160] The serialized array is a byte array with a fixed length. The blockchain node can perform hash calculation on the serialized array to obtain the encryption starting point.

[0161] Among them, hash calculation refers to a one-way operation that maps an input value to a message digest of a fixed length through a hash function. A hash function can map an input value of any length to an output of a fixed length, such as MD5 (Message Digest Algorithm 5), SHA-256 (Secure Hash Algorithm 256, 256-bit hash algorithm), etc. The embodiments of the present application are not limited here.

[0162] The blockchain node can perform point operations on the business elliptic curve through the encryption starting point to generate an encryption end point. The business elliptic curve is an elliptic curve predetermined when providing business services. The base point of the business elliptic curve can be determined by the curve parameters in the NIST (National Institute of Standards and Technology) standard. The embodiment of the present application does not limit the method for determining the business elliptic curve and the base point.

[0163] Among them, point operation, namely elliptic curve addition, refers to the coordinates of the intersection of a straight line between two points on the elliptic curve and the elliptic curve being the sum of the horizontal and vertical coordinates of the two points. The result of one point operation can be the intersection of the straight line between the two points and the elliptic curve. The result of two point operations can be the point where the intersection is at a symmetrical position of the elliptic curve about the x-axis and the base point is operated again.

[0164] The blockchain node can sign the encrypted endpoint with the private key of the resource client to obtain the resource encrypted transaction. The blockchain node can perform hash calculation on the encrypted endpoint, and then perform encryption and signature operation on the encrypted endpoint after hash calculation with the private key of the resource client to obtain the resource encrypted transaction.

[0165] Blockchain nodes can package resource encryption transactions to obtain resource encryption blocks, encrypt the resources and send them to the consensus network in the blockchain network. If the consensus network successfully reaches a consensus on the resource encryption blocks, the resource encryption transactions will be determined as encrypted privacy data.

[0166] For example, a blockchain node can send the above-mentioned resource encryption transaction to other blockchain nodes in the consensus network, and perform consensus verification on the resource encryption transaction through the above-mentioned consensus network. If the consensus network successfully reaches a consensus on the resource encryption block, the resource encryption transaction will be determined as encrypted privacy data.

[0167] Blockchain nodes can generate a to-be-chained identifier through public information and encrypted private data, and generate ownership transactions through the to-be-chained identifier, resource client address, and object identity information of the target object. Among them, the ownership transaction can include the ownership relationship between the target object and the to-be-chained identifier.

[0168] The metadata corresponding to the digital resource identifier may include signature information, and the signature information may be obtained by signing the public information with the private key of the first institution. The signature information may be composed of numbers and letters, and the length may be set according to actual conditions. After the signature information is generated, the signature information may be used as the public information of the digital resource identifier.

[0169] The blockchain node can send the ownership transaction to the consensus network in the blockchain network. If the ownership transaction is successfully agreed upon in the consensus network, the blockchain node can determine the identifier to be uploaded to the chain as a digital resource identifier that has an ownership relationship with the target object, and send the digital resource identifier to the first institution.

[0170] The blockchain node can send the digital resource identifier issued by the first institution in the blockchain network to the resource client corresponding to the target object.

[0171] It can be understood that the issuance, circulation, storage and transaction of digital resource identifiers can be carried out in the blockchain network, making the circulation process of digital resource identifiers open and transparent while ensuring the security of data transmission and access.

[0172] Step S102: if a viewing request for the digital resource identifier sent by the second institution is obtained, the viewing request is forwarded to the resource client so that the resource client authorizes the viewing request;

[0173] Specifically, if the blockchain node obtains a viewing request for a digital resource identifier sent by the second institution, it forwards the viewing request to the resource client corresponding to the digital resource identifier, and the user can authorize the viewing request through the resource client.

[0174] Step S103: if the resource client authorizes the viewing request, the second institution is granted viewing rights for the digital resource identifier in the resource client;

[0175] Specifically, if the resource client authorizes the viewing request, the blockchain node can open viewing permissions for the digital resource identifier in the resource client for the second institution.

[0176] Step S104, obtaining a signature verification request for the digital resource identifier being viewed from the second institution, verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and sending the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a signature verification passing result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0177] Specifically, the second institution can send a signature verification request for the digital resource identifier being viewed, and the blockchain node can verify the signature through the signature information in the public information corresponding to the digital resource identifier, and send the verification result to the second institution.

[0178] The specific process of blockchain node verifying the digital resource identifier can be: obtaining the public key of the first institution according to the verification request, decrypting the signature information corresponding to the digital resource identifier based on the public key of the first institution, and obtaining the hash value to be verified; generating the target hash value of the public information corresponding to the digital resource identifier; if the hash value to be verified is the same as the target hash value, determining that the verification result is a verification pass result; if the hash value to be verified is different from the target hash value, determining that the verification result is a verification failure result, and returning an error message to the first institution and the second institution.

[0179] Specifically, the blockchain node can obtain the public key of the first institution, and use the public key of the first institution to decrypt the signature information corresponding to the digital resource identifier to obtain the hash value to be verified. The blockchain node can then obtain the public information corresponding to the digital resource identifier, and use the hash function to perform hash calculation on the public information corresponding to the digital resource identifier to obtain the target hash value.

[0180] The blockchain node can compare the hash value to be verified with the target hash value. If the hash value to be verified is the same as the target hash value, the signature verification result is determined to be a passed result; if the hash value to be verified is different from the target hash value, the signature verification result is determined to be a failed result, and an error message is returned to the first institution and the second institution.

[0181] Step S105: forwarding the service incentive resource to the resource client.

[0182] Specifically, the blockchain node may forward the business incentive resource to a resource client associated with the user. The user may participate in the business activities carried out by the first institution through the business incentive resource.

[0183] Optionally, the business incentive resources can be agreed upon in the blockchain network, and the specific process is: determine the business incentive resources, the first blockchain address corresponding to the resource client, and the second blockchain address corresponding to the second institution as a resource transfer transaction; obtain the resource transfer signature sent by the second institution, package the resource transfer signature and the resource transfer transaction, and obtain the block to be chained; the resource transfer signature is obtained by the second institution signing the business incentive resource based on the private key of the second institution; if the resource transfer signature verification is passed, the resource transfer transaction in the block to be chained is executed to obtain the transaction execution result, and the transaction execution result and the block to be chained are sent to the consensus network in the blockchain network; if the consensus network successfully reaches consensus on the transaction execution result and the block to be chained, the block to be chained is determined as a chained block, and the business incentive resource is added to the status data corresponding to the first blockchain address based on the chained block.

[0184] Specifically, the blockchain node may determine the business incentive resources, the first blockchain address corresponding to the resource client, and the second blockchain address corresponding to the second institution as a resource transfer transaction.

[0185] The blockchain node can obtain the resource transfer signature sent by the second institution, which can be obtained by signing the business incentive resource with the private key of the second institution. The blockchain node can perform hash calculation on the business incentive resource, and then perform an encrypted signature operation on the business incentive resource after the hash calculation using the private key of the second institution to obtain the resource transfer signature.

[0186] The blockchain node can package the resource transfer signature and resource transfer transaction to obtain the block to be uploaded to the chain.

[0187] The blockchain node executes the resource transfer transaction in the block to be chained, and obtains the transaction execution result after the transaction. For example, the above-mentioned transaction to be chained can be the exchange or transfer of resource data, which is not limited in this application. The above-mentioned transaction execution result may include, after the resource transfer is performed based on the value of the resource to be traded, the first blockchain address corresponding to the resource client and the second blockchain address corresponding to the second institution, and the corresponding resource states, for example, the resource data value of the two parties involved in the transaction after the transaction is completed.

[0188] The blockchain node can send the above-mentioned transaction execution result and the block to be chained together to other blockchain nodes in the consensus network, and perform consensus verification on the transaction execution result and the block to be chained through the above-mentioned consensus network; if the above-mentioned transaction execution result and the above-mentioned block to be chained successfully reach consensus, the block to be chained will be determined as the chained block, and at this time the user to be traded has the authority to control the resource data in the chained block.

[0189] Finally, the resource status of the first blockchain address corresponding to the resource client and the second blockchain address corresponding to the second institution are numerically updated through the transaction execution result.

[0190] For example, if the business incentive resource is 10 business digital assets, the sum of the on-chain resource data and the business incentive resource data before the transaction of the first blockchain address can be used as the resource data after the first blockchain address is updated. The difference between the on-chain resource data and the resource data to be traded before the transaction of the second blockchain address can be used as the resource data after the second blockchain address is updated.

[0191] It can be understood that the sending, circulation, storage and transaction of business incentive resources can be carried out in the blockchain network, making the transaction process of business incentive resources open and transparent while ensuring the security of data transmission and access.

[0192] In the embodiment of the present application, a digital resource identifier issued by a first institution in a blockchain network is sent to a resource client corresponding to a target object; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object; the target object has a unique ownership authority over the digital resource identifier; if a viewing request for the digital resource identifier sent by a second institution is obtained, the viewing request is forwarded to the resource client so that the resource client authorizes the viewing request; if the resource client authorizes the viewing request, the viewing authority for the digital resource identifier in the resource client is opened for the second institution; a signature verification request for the viewed digital resource identifier sent by the second institution is obtained, the signature information in the public information corresponding to the digital resource identifier is verified according to the signature verification request, and the signature verification result is sent to the second institution so that the second institution returns the business incentive resource when it is determined that the signature verification result is a signature verification pass result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted private data corresponding to the digital resource identifier is invisible to the second institution; and the business incentive resource is forwarded to the resource client.

[0193] It can be seen that the embodiment of the present application uses digital resource identification as a transaction medium for data exchange, and uses blockchain technology to package private data into digital assets that cannot be tampered with, cannot be copied, and can be traced, giving users (target objects) full control and sole ownership of the digital resource identification they own. The automation, decentralization and verifiability of data exchange are realized, and the fairness, transparency and security of transactions are guaranteed. In the authorization process of the digital resource identification, the second institution can only view the public information in the digital resource identification, and the encrypted private data corresponding to the digital resource identification is invisible to the second institution. In the digital resource identification verification process, only signature information is provided, avoiding data privacy leakage and data value loss. The business activities carried out by the second institution through the digital resource identification, such as issuing business incentive resources, do not need to perform complex preprocessing and cleaning on the private data of the target object, thereby reducing the computational cost and time cost of data exchange. The entire authorization process is established on the blockchain, and there is a credible authorization and settlement mechanism, which avoids the risk of breach of contract and disputes in data exchange, and further ensures the security of private data.

[0194] See also Figure 4 , Figure 4 This is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application. Figure 2 The data processing method based on blockchain can be executed by a resource client, which can be Figure 1The terminal device 200 shown. The following will take the data processing method executed by the resource client as an example for explanation. Among them, the data processing method based on blockchain can at least include the following steps S201-S204:

[0195] Step S201, the resource client stores the digital resource identifier issued by the first institution in the blockchain network; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object corresponding to the resource client; the target object has the sole ownership authority over the digital resource identifier;

[0196] Specifically, the resource client can store the digital resource identifier issued by the first institution in the blockchain network.

[0197] The first institution may issue a digital resource identifier to a user (target object) that meets specific conditions, and may issue a digital resource identifier A to a user whose monthly consumption flow exceeds a certain threshold.

[0198] A digital resource identifier can be a non-homogeneous token, that is, a trusted digital rights certificate with unique characteristics in the blockchain network, and a data object that can record and process multi-dimensional and complex attributes on the blockchain. The metadata corresponding to the digital resource identifier includes public information and encrypted privacy data for the user (target object). The digital resource identifier can be used to represent the ownership of the corresponding digital resource meta-item, which can be understood as a certificate. When a user has the unique ownership of a digital resource identifier, it can be proved that the digital resource meta-item associated with the digital resource identifier belongs to the user. The digital resource meta-item can be the metadata corresponding to the digital resource identifier.

[0199] Optionally, the user (target object) can view the metadata corresponding to the digital resource identifier through the resource client after passing the identity authentication. Identity authentication can be verified by, for example, object identity features, account passwords, etc., which is not limited in this embodiment of the present application.

[0200] Optionally, the resource client may generate encryption indication information through a data selection operation to determine public information and private data. The specific process may be: responding to a data selection operation on object upload data, and generating selected encryption indication information based on the data selection operation; the object upload data is data sent by the target object to the first institution; sending the selected encryption indication information to the blockchain node, so that the blockchain node determines the local data indicated by the selected encryption indication information in the object upload data as private data, encrypts the private data to obtain encrypted private data, and determines the data in the object upload data other than the private data as public information; the blockchain node is used to generate digital resource identifiers for public information and encrypted private data.

[0201] Specifically, the resource client can respond to the data selection operation for the object upload data and generate the selected encryption indication information based on the data selection operation. The object upload data is the data sent by the target object to the first institution, which can be the object identity information of the user (target object), such as the consumption information, telephone number and communication address registered by the user in the first institution.

[0202] The resource client can send encryption selection indication information to the blockchain node, and the blockchain node encrypts the object upload data through the encryption indication information. The content of the encryption processing can be the parameters mentioned above. Figure 3 The specific description of step S101 corresponding to the embodiment will not be repeated here in the embodiment of the present application.

[0203] Step S202: if a viewing request for a digital resource identifier sent by a blockchain node is obtained, the object identity information of the target object is obtained; the viewing request is a request initiated by the second institution to the blockchain node;

[0204] Specifically, when the user (target object) enters the business activity entrance of the second institution through the resource client (which may be the activity website or activity application interface corresponding to the second institution), the business activity may be issuing consumption voucher B to users holding digital resource identifier A.

[0205] The second institution can initiate an access request to the blockchain node, and the blockchain node can forward the viewing request to the resource client corresponding to the digital resource identifier (digital resource identifier A), and the user can authorize the viewing request through the resource client.

[0206] If the resource client obtains a viewing request for a digital resource identifier sent by a blockchain node, it obtains the object identity information of the target object and authenticates the user. The identity authentication can be verified through object identity features, account passwords, etc., and the embodiments of the present application are not limited here.

[0207] Step S203, when the identity authentication of the object identity information is passed, the second institution is authorized to view the request, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node after determining that the signature verification result is a signature verification pass result; the signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0208] Specifically, the resource client may authorize the viewing request for the second institution when the identity authentication for the object identity information is passed.

[0209] Optionally, the user (target object) can authorize the second institution to all digital resource identifiers in the resource client, or to authorize the digital resource identifiers selected by the user. The specific process may be: when the identity authentication for the object identity information is passed, respond to the identifier selection operation for the digital resource identifier set, authorize the viewing request based on the digital resource identifier selected by the identifier selection operation, obtain an authorization confirmation message, and send the authorization confirmation message to the blockchain node, so that the blockchain node opens the viewing permission for the digital resource identifier for the second institution based on the authorization confirmation message.

[0210] Specifically, when the identity authentication for the object identity information is passed, the user can authorize the selected digital resource identifier from multiple digital resource identifiers (for example, select digital resource identifier A from digital resource identifier A, digital resource identifier B, digital resource identifier C, and digital resource identifier D). The resource client can respond to the identifier selection operation for the digital resource identifier set, authorize the viewing request based on the digital resource identifier selected by the identifier selection operation, obtain an authorization confirmation message, and send the authorization confirmation message to the blockchain node.

[0211] The blockchain node can open viewing permissions for the digital resource identifier for the second institution based on the authorization confirmation message.

[0212] If the resource client authorizes the viewing request, the blockchain node can open viewing permissions for the digital resource identifier in the resource client for the second institution.

[0213] The second institution can send a signature verification request for the digital resource identifier being viewed, and the blockchain node can verify the signature through the signature information in the public information corresponding to the digital resource identifier, and send the verification result to the second institution.

[0214] The blockchain node's verification process for digital resource identification can be found in the above Figure 3 The specific description of step S104 of the corresponding embodiment is not repeated here in the embodiment of the present application.

[0215] Step S204, receiving the business incentive resources forwarded by the blockchain node.

[0216] Specifically, the blockchain node may forward the business incentive resource to a resource client associated with the user. The user may participate in the business activities carried out by the first institution through the business incentive resource.

[0217] The embodiment of the present application stores a digital resource identifier issued by a first institution in a blockchain network through a resource client; the metadata corresponding to the digital resource identifier includes public information and encrypted privacy data for a target object corresponding to the resource client; the target object has a unique ownership authority over the digital resource identifier; if a viewing request for the digital resource identifier sent by a blockchain node is obtained, the object identity information of the target object is obtained; the viewing request is a request initiated by a second institution to a blockchain node; when the identity authentication for the object identity information is passed, the viewing request is authorized for the second institution, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node when it is determined that the signature verification result is a signature verification pass result; the signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution; and the business incentive resource forwarded by the blockchain node is received.

[0218] It can be seen that the embodiment of the present application uses digital resource identification as a transaction medium for data exchange, and uses blockchain technology to package private data into digital assets that cannot be tampered with, cannot be copied, and can be traced, giving users (target objects) full control and sole ownership of the digital resource identification they own. The automation, decentralization and verifiability of data exchange are realized, and the fairness, transparency and security of transactions are guaranteed. In the authorization process of the digital resource identification, the second institution can only view the public information in the digital resource identification, and the encrypted private data corresponding to the digital resource identification is invisible to the second institution. In the digital resource identification verification process, only signature information is provided, avoiding data privacy leakage and data value loss. The business activities carried out by the second institution through the digital resource identification, such as issuing business incentive resources, do not need to perform complex preprocessing and cleaning on the private data of the target object, thereby reducing the computational cost and time cost of data exchange. The entire authorization process is established on the blockchain, and there is a credible authorization and settlement mechanism, which avoids the risk of breach of contract and disputes in data exchange, and further ensures the security of private data.

[0219] On the other hand, the embodiment of the present application simplifies the authorization process of data exchange by using digital resource identification as the transaction medium for data exchange. Users can view the data authorization process through the resource client, thereby improving the convenience of data exchange.

[0220] See also Figure 5 , Figure 5 This is a flowchart of a data processing method based on blockchain provided in an embodiment of the present application. Figure 3, taking the example that after the first institution issues digital resource identification A to user A in the blockchain network, the second institution issues consumption voucher B to the user with digital resource identification A, the data processing method based on blockchain includes:

[0221] The first institution can first reach a consensus on the business conditions required to issue the digital resource identifier A in the blockchain network. For example, if the monthly consumption flow is higher than a certain threshold, the user can apply for the digital resource identifier from the first institution and authorize his or her own object identity information. The object identity information can be the consumption information, telephone number, and communication address registered by User A in the first institution.

[0222] The first institution may generate a digital resource identifier A that is uniquely owned by user A through the object identity information of user A for a user who meets the business conditions, such as user A.

[0223] User A can receive the digital resource identifier A issued by the first institution on the blockchain network and store the digital resource identifier A through the resource client.

[0224] For more information about digital resource identification, please refer to the above Figure 3 Step S101 corresponding to the embodiment and the above Figure 4 The specific description of step S201 corresponding to the embodiment is not limited here in the embodiment of the present application.

[0225] User A can enter the business activity through the entrance provided by the second institution, and the business activity can be issuing consumption voucher B to users holding digital resource identifier A.

[0226] The second institution can initiate an access request to the blockchain node, and the blockchain node can forward the viewing request to the resource client corresponding to the digital resource identifier (digital resource identifier A), and the user can authorize the viewing request through the resource client.

[0227] If the resource client obtains a viewing request for a digital resource identifier sent by a blockchain node, it obtains the object identity information of the target object and authenticates the user. The identity authentication can be verified through object identity features, account passwords, etc., and the embodiments of the present application are not limited here.

[0228] The resource client can authorize the viewing request for the second organization when the identity information of the object is authenticated.

[0229] If the resource client authorizes the viewing request, the blockchain node can open viewing permissions for the digital resource identifier in the resource client for the second institution.

[0230] The second institution can send a verification request for the digital resource identifier being viewed, and the blockchain node can verify the signature through the signature information in the public information corresponding to the digital resource identifier, and send the verification result to the second institution. The content of the blockchain node's verification of the digital resource identifier can be found in the above Figure 3 The specific description of step S103 corresponding to the embodiment is not limited here in the embodiment of the present application.

[0231] The blockchain node can forward the business incentive resources to the resource client associated with the user. The user can participate in the business activities carried out by the first institution through the business incentive resources. Among them, the business incentive resources can be agreed upon in the blockchain network, and the evidence is stored on the chain. The content of the business incentive resources that can be agreed upon in the blockchain network can be found in the above Figure 3 The specific description of step S104 corresponding to the embodiment is not limited here in the embodiment of the present application.

[0232] It can be seen that the embodiment of the present application uses digital resource identification as a transaction medium for data exchange, and uses blockchain technology to package private data into digital assets that cannot be tampered with, cannot be copied, and can be traced, giving users (target objects) full control and sole ownership of the digital resource identification they own. The automation, decentralization and verifiability of data exchange are realized, and the fairness, transparency and security of transactions are guaranteed. In the authorization process of the digital resource identification, the second institution can only view the public information in the digital resource identification, and the encrypted private data corresponding to the digital resource identification is invisible to the second institution. In the digital resource identification verification process, only signature information is provided, avoiding data privacy leakage and data value loss. The business activities carried out by the second institution through the digital resource identification, such as issuing business incentive resources, do not need to perform complex preprocessing and cleaning on the private data of the target object, thereby reducing the computational cost and time cost of data exchange. The entire authorization process is established on the blockchain, and there is a credible authorization and settlement mechanism, which avoids the risk of breach of contract and disputes in data exchange, and further ensures the security of private data.

[0233] See also Figure 6 , Figure 6 This is a schematic diagram of a data processing device based on blockchain provided in an embodiment of the present application. Figure 1 .like Figure 6As shown, the data processing device 1 includes an identification issuance module 610, a request authorization module 620, a permission opening module 630, an incentive issuance module 640, a signature verification processing module 650, a data acquisition module 660, a transaction generation module 670, a transaction consensus module 680 and an encryption processing module 690. Among them, the incentive issuance module 640 includes an incentive transfer unit 641, an incentive packaging unit 642 and an incentive consensus unit 643. The signature verification processing module 650 includes a decryption processing unit 651, a hash generation unit 652 and a hash verification unit 653. The encryption processing module 690 includes a labeling processing unit 691 and a labeling encryption unit 692. Among them, the labeling encryption unit 692 includes a serialization subunit 692a and a resource consensus subunit 692b.

[0234] The identification issuing module 610 is used to send the digital resource identification issued by the first institution in the blockchain network to the resource client corresponding to the target object; the metadata corresponding to the digital resource identification includes public information and encrypted private data for the target object; the target object has the sole ownership right to the digital resource identification; the specific functions of the identification issuing module 610 can be found in the above Figure 3 The specific description of step S101 of the corresponding embodiment is not repeated here.

[0235] The request authorization module 620 is used to forward the viewing request for the digital resource identifier sent by the second institution to the resource client so that the resource client can authorize the viewing request; the specific function of the request authorization module 620 can be found in the above Figure 3 The specific description of step S102 of the corresponding embodiment is not repeated here.

[0236] The permission opening module 630 is used to open the viewing permission for the digital resource identifier in the resource client for the second institution if the resource client authorizes the viewing request; the specific function of the permission opening module 630 can be found in the above Figure 3 The specific description of step S103 of the corresponding embodiment is not repeated here.

[0237] The incentive distribution module 640 is used to forward the business incentive resources to the resource client. The specific functions of the incentive distribution module 640 can be found in the above Figure 3 The specific description of step S104 of the corresponding embodiment is not repeated here.

[0238] Among them, the incentive issuance module 640 includes an incentive transfer unit 641, an incentive packaging unit 642 and an incentive consensus unit 643.

[0239] The incentive transfer unit 641 is used to determine the business incentive resource, the first blockchain address corresponding to the resource client, and the second blockchain address corresponding to the second institution as a resource transfer transaction;

[0240] The incentive packaging unit 642 is used to obtain the resource transfer signature sent by the second institution, package the resource transfer signature and the resource transfer transaction, and obtain the block to be chained; the resource transfer signature is obtained by the second institution signing the business incentive resource based on the private key of the second institution;

[0241] The incentive consensus unit 643 is used to execute the resource transfer transaction in the block to be chained if the signature verification for the resource transfer is passed, obtain the transaction execution result, and send the transaction execution result and the block to be chained to the consensus network in the blockchain network;

[0242] The incentive consensus unit 643 is also used to determine the block to be chained as a chained block if the consensus network successfully reaches a consensus on the transaction execution result and the block to be chained, and add the business incentive resource to the status data corresponding to the first blockchain address based on the chained block.

[0243] The signature verification processing module 650 is used to obtain the signature verification request sent by the second institution for the digital resource identifier being viewed, verify the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and send the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a signature verification passing result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0244] The signature verification processing module 650 includes a decryption processing unit 651 , a hash generation unit 652 and a hash verification unit 653 .

[0245] The decryption processing unit 651 is used to obtain the public key of the first institution according to the signature verification request, and perform a decryption operation on the signature information corresponding to the digital resource identifier based on the public key of the first institution to obtain a hash value to be verified;

[0246] A hash generation unit 652, used to generate a target hash value of the public information corresponding to the digital resource identifier;

[0247] The hash verification unit 653 is used to determine that the signature verification result is a signature verification passing result if the hash value to be verified is the same as the target hash value;

[0248] The hash verification unit 653 is further configured to determine that the signature verification result is a signature verification failure result if the hash value to be verified is different from the target hash value, and return error information to the first institution and the second institution.

[0249] The specific functions of the decryption processing unit 651, the hash generation unit 652 and the hash verification unit 653 can be found in the above Figure 3 The specific description of step S104 of the corresponding embodiment is not repeated here.

[0250] The data acquisition module 660 is used to acquire the object upload data sent by the first organization; the object upload data is the data sent by the target object to the first organization;

[0251] The transaction generation module 670 is used to generate a to-be-chained identifier through public information and encrypted private data, and to generate an ownership transaction based on the to-be-chained identifier, the resource client address, and the object identity information of the target object; the ownership transaction includes the ownership relationship between the target object and the to-be-chained identifier;

[0252] The transaction consensus module 680 is used to send the ownership transaction to the consensus network in the blockchain network. If the ownership transaction is successfully agreed upon in the consensus network, the identifier to be uploaded to the chain is determined as a digital resource identifier that has an ownership relationship with the target object, and the digital resource identifier is sent to the first institution.

[0253] The encryption processing module 690 is used to obtain the encryption selection indication information sent by the resource client, determine the local data indicated by the encryption selection indication information in the object upload data as private data, encrypt the private data to obtain encrypted private data, and determine the data in the object upload data other than the private data as public information;

[0254] Among them, the encryption processing module 690 includes a label processing unit 691 and a label encryption unit 692.

[0255] The labeling processing unit 691 is used to classify the object upload data based on the data type, and label the classified object upload data to obtain labeled data;

[0256] The labeled encryption unit 692 is used to obtain the encryption selection indication information sent by the resource client, determine the local data indicated by the encryption selection indication information in the object upload data as private data, obtain the first labeled data corresponding to the private data in the labeled data, and encrypt the first labeled data based on the private key of the resource client to obtain encrypted private data;

[0257] The labeled encryption unit 692 is further configured to determine data in the labeled data other than the first labeled data as public information.

[0258] The specific functions of the label processing unit 691 and the label encryption unit 692 can be found in the above Figure 3 The specific description of step S101 of the corresponding embodiment is not repeated here.

[0259] Among them, the labeled encryption unit 692 includes a serialization subunit 692a and a resource consensus subunit 692b.

[0260] The serialization subunit 692a is used to serialize the first tag data to obtain a serialization array, perform hash calculation on the serialization array to obtain an encryption starting point, and generate an encryption end point based on the encryption starting point and the business elliptic curve;

[0261] The resource consensus subunit 692b is used to sign the encryption endpoint with the private key of the resource client to obtain a resource encryption transaction, package the resource encryption transaction to obtain a resource encryption block, and send the resource encryption transaction to the consensus network in the blockchain network. If the consensus network successfully reaches a consensus on the resource encryption block, the resource encryption transaction is determined as encrypted privacy data.

[0262] The specific functions of the serialization subunit 692a and the resource consensus subunit 692b can be found in the above Figure 3 The specific description of step S101 of the corresponding embodiment is not repeated here.

[0263] See also Figure 7 , Figure 7 This is a schematic diagram of a data processing device based on blockchain provided in an embodiment of the present application. Figure 2 .like Figure 7 As shown, the data processing device 2 includes an identification storage module 710 , an identity authentication module 720 , a request processing module 730 , an incentive receiving module 740 , a data selection module 750 and a data indication module 760 .

[0264] The identification storage module 710 is used for the resource client to store the digital resource identification issued by the first institution in the blockchain network; the metadata corresponding to the digital resource identification includes the public information and encrypted privacy data of the target object corresponding to the resource client; the target object has the unique ownership authority to the digital resource identification; the specific function of the identification storage module 710 can be found in the above Figure 4 The specific description of step S201 of the corresponding embodiment is not repeated here.

[0265] The identity verification module 720 is used to obtain the object identity information of the target object if a viewing request for the digital resource identifier sent by the blockchain node is obtained; the viewing request is a request initiated by the second institution to the blockchain node; the specific functions of the identity verification module 720 can be found in the above Figure 4 The specific description of step S202 of the corresponding embodiment is not repeated here.

[0266] The request processing module 730 is used to authorize the second institution to view the request when the identity authentication of the object identity information is passed, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node after determining that the signature verification result is a signature verification result; the signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution; the specific functions of the request processing module 730 can be found in the above Figure 4 The specific description of step S203 of the corresponding embodiment is not repeated here.

[0267] The incentive receiving module 740 is used to receive the business incentive resources forwarded by the blockchain node. The specific functions of the incentive receiving module 740 can be found in the above Figure 4 The specific description of step S204 of the corresponding embodiment is not repeated here.

[0268] The data selection module 750 is used to respond to the data selection operation for the object upload data and generate the selected encryption indication information based on the data selection operation; the object upload data is the data sent by the target object to the first institution;

[0269] The data indication module 760 is used to send the selected encryption indication information to the blockchain node, so that the blockchain node determines the local data indicated by the selected encryption indication information in the object upload data as private data, encrypts the private data to obtain encrypted private data, and determines the data other than the private data in the object upload data as public information; the blockchain node is used to generate a digital resource identifier for the public information and the encrypted private data.

[0270] The specific functions of the data selection module 750 and the data indication module 760 can be found in the above Figure 4 The specific description of step S201 of the corresponding embodiment is not repeated here.

[0271] See also Figure 8 , Figure 8 Schematic diagram of the structure of a computer device provided in an embodiment of the present application. Figure 8As shown, the computer device 1000 may include: a processor 1001, a network interface 1004 and a memory 1005. In addition, the above-mentioned computer device 1000 may also include: a user interface 1003, and at least one communication bus 1002. Among them, the communication bus 1002 is used to realize the connection and communication between these components. Among them, the user interface 1003 may include a display screen (Display), a keyboard (Keyboard), and the user interface 1003 may optionally include a standard wired interface and a wireless interface. The network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface). The memory 1005 may be a high-speed RAM memory, or it may be a non-volatile memory (non-volatile memory), such as at least one disk storage. The memory 1005 may optionally also be at least one storage device located away from the aforementioned processor 1001. As Figure 8 As shown, the memory 1005 as a computer-readable storage medium may include an operating system, a network communication module, a user interface module, and a device control application program.

[0272] In such Figure 8 In the computer device 1000 shown in the figure, the network interface 1004 can provide a network communication network element; the user interface 1003 is mainly used to provide an input interface for the user; and the processor 1001 can be used to call the device control application stored in the memory 1005. When the computer device 1000 executes the above Figure 3 The description of the data processing method in the corresponding embodiment is to achieve:

[0273] The digital resource identifier issued by the first institution in the blockchain network is sent to the resource client corresponding to the target object; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object; the target object has the sole ownership authority over the digital resource identifier;

[0274] If a viewing request for the digital resource identifier sent by the second institution is obtained, the viewing request is forwarded to the resource client so that the resource client authorizes the viewing request;

[0275] If the resource client authorizes the viewing request, opening the viewing permission for the digital resource identifier in the resource client for the second institution;

[0276] Obtain a signature verification request for the digital resource identifier being viewed from the second institution, verify the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and send the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a passing result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0277] Forward business incentive resources to resource clients.

[0278] When the computer device 1000 executes the above Figure 4 The description of the data processing method in the corresponding embodiment is to achieve:

[0279] The resource client stores the digital resource identifier issued by the first institution in the blockchain network; the metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object corresponding to the resource client; the target object has the sole ownership authority over the digital resource identifier;

[0280] If a viewing request for a digital resource identifier sent by a blockchain node is obtained, the object identity information of the target object is obtained; the viewing request is a request initiated by the second institution to the blockchain node;

[0281] When the identity authentication of the object identity information is passed, the second institution is authorized to view the request, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node after determining that the signature verification result is a signature verification pass result; the signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution;

[0282] Receive business incentive resources forwarded by blockchain nodes.

[0283] It should be understood that the computer device 1000 described in the embodiment of the present application can execute the above Figure 3 and Figure 4 The description of the data processing method in any corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of adopting the same method will not be repeated here.

[0284] In addition, it should be pointed out here that: the embodiment of the present application also provides a computer-readable storage medium, and the computer-readable storage medium stores a computer program, and when the processor executes the computer program, it can execute the above Figure 3 and Figure 4 The description of the above data processing method in any corresponding embodiment will not be repeated here. In addition, the description of the beneficial effects of the same method will not be repeated. For technical details not disclosed in the computer-readable storage medium embodiment involved in this application, please refer to the description of the method embodiment of this application.

[0285] The computer-readable storage medium may be the data processing device provided in any of the aforementioned embodiments or the internal storage unit of the computer device, such as a hard disk or memory of the computer device. The computer-readable storage medium may also be an external storage device of the computer device, such as a plug-in hard disk, a smart memory card (smart media card, SMC), a secure digital (secure digital, SD) card, a flash card (flash card), etc. equipped on the computer device. Further, the computer-readable storage medium may also include both the internal storage unit of the computer device and an external storage device. The computer-readable storage medium is used to store the computer program and other programs and data required by the computer device. The computer-readable storage medium may also be used to temporarily store data that has been displayed or is to be displayed.

[0286] In addition, it should be noted that: the embodiment of the present application also provides a computer program product, the computer program product includes a computer program, the computer program is stored in a computer-readable storage medium. The processor of the computer device reads the computer program from the computer-readable storage medium, and the processor executes the computer program, so that the computer device executes the above Figure 3 and Figure 4 Any method provided by the corresponding embodiment.

[0287] The terms "first", "second", etc. in the description, claims, and drawings of the embodiments of the present application are used to distinguish different objects, rather than to describe a specific order. In addition, the term "comprising" and any of their variations are intended to cover non-exclusive inclusions. For example, a process, method, device, product, or equipment that includes a series of steps or units is not limited to the listed steps or modules, but optionally includes steps or modules that are not listed, or optionally includes other step units inherent to these processes, methods, devices, products, or equipment.

[0288] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of the two. In order to clearly illustrate the interchangeability of hardware and software, the composition and steps of each example have been generally described in terms of network elements in the above description. Whether these network elements are executed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described network elements for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0289] The above disclosure is only the preferred embodiment of the present application, which certainly cannot be used to limit the scope of rights of the present application. Therefore, equivalent changes made according to the claims of the present application are still within the scope covered by the present application.

Claims

1. A data processing method based on blockchain, characterized in that: include: Sending the digital resource identifier issued by the first institution in the blockchain network to the resource client corresponding to the target object; The metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object; the target object has unique ownership rights to the digital resource identifier; If a viewing request for the digital resource identifier sent by the second institution is obtained, the viewing request is forwarded to the resource client so that the resource client authorizes the viewing request; If the resource client authorizes the viewing request, opening the viewing permission for the digital resource identifier in the resource client for the second institution; Obtain a signature verification request for the digital resource identifier being viewed sent by the second institution, verify the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and send the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a signature verification passing result; The signature information is obtained by signing the public information based on the private key of the first institution; the encrypted private data corresponding to the digital resource identifier is not visible to the second institution; The service incentive resource is forwarded to the resource client.

2. The method according to claim 1, characterized in that Also includes: Obtain object upload data sent by the first organization; The object uploaded data is data sent by the target object to the first institution; Obtaining encryption selection indication information sent by the resource client, determining local data indicated by the encryption selection indication information in the object upload data as private data, encrypting the private data to obtain encrypted private data, and determining data other than the private data in the object upload data as public information; Generate a to-be-chained identifier through the public information and the encrypted private data, and generate an ownership transaction based on the to-be-chained identifier, the resource client address and the object identity information of the target object; the ownership transaction includes the ownership relationship between the target object and the to-be-chained identifier; The ownership transaction is sent to the consensus network in the blockchain network. If the ownership transaction is successfully agreed upon in the consensus network, the identifier to be uploaded to the chain is determined as a digital resource identifier that has an ownership relationship with the target object, and the digital resource identifier is sent to the first institution.

3. The method according to claim 2, characterized in that The obtaining the encryption selection indication information sent by the resource client, determining the local data indicated by the encryption selection indication information in the object upload data as private data, encrypting the private data to obtain encrypted private data, and determining the data in the object upload data other than the private data as public information, includes: Classifying the object upload data based on data types, and labeling the classified object upload data to obtain labeled data; Obtaining encryption selection indication information sent by the resource client, determining local data indicated by the encryption selection indication information in the object upload data as private data, obtaining first labeled data corresponding to the private data in the labeled data, and encrypting the first labeled data based on the private key of the resource client to obtain encrypted private data; The data other than the first labeled data in the labeled data is determined as public information.

4. The method according to claim 3, characterized in that The encrypting the first labeled data based on the private key of the resource client to obtain encrypted private data includes: Serializing the first tag data to obtain a serialized array, performing hash calculation on the serialized array to obtain an encryption starting point, and generating an encryption end point based on the encryption starting point and a business elliptic curve; The encryption endpoint is signed by the private key of the resource client to obtain a resource encryption transaction, the resource encryption transaction is packaged to obtain a resource encryption block, and the resource encryption transaction is sent to the consensus network in the blockchain network. If the consensus network successfully reaches a consensus on the resource encryption block, the resource encryption transaction is determined as encrypted privacy data.

5. The method according to claim 1, characterized in that The verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request includes: Obtaining the public key of the first institution according to the signature verification request, and performing a decryption operation on the signature information corresponding to the digital resource identifier based on the public key of the first institution to obtain a hash value to be verified; Generate a target hash value of the public information corresponding to the digital resource identifier; If the hash value to be verified is the same as the target hash value, the signature verification result is determined to be a signature verification passing result; If the hash value to be verified is different from the target hash value, the signature verification result is determined to be a signature verification failure result, and error information is returned to the first institution and the second institution.

6. The method according to claim 1, characterized in that The forwarding of the service incentive resource to the resource client includes: Determine the business incentive resource, the first blockchain address corresponding to the resource client, and the second blockchain address corresponding to the second institution as a resource transfer transaction; Obtaining the resource transfer signature sent by the second institution, packaging the resource transfer signature and the resource transfer transaction, and obtaining a block to be chained; the resource transfer signature is obtained by the second institution signing the business incentive resource based on the private key of the second institution; If the signature verification for the resource transfer passes, the resource transfer transaction in the block to be chained is executed to obtain a transaction execution result, and the transaction execution result and the block to be chained are sent to the consensus network in the blockchain network; If the consensus network successfully reaches consensus on the transaction execution result and the block to be chained, the block to be chained is determined as a chained block, and the business incentive resource is added to the status data corresponding to the first blockchain address based on the chained block.

7. A data processing method based on blockchain, characterized in that: include: The resource client stores the digital resource identifier issued by the first institution in the blockchain network; The metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object corresponding to the resource client; the target object has unique ownership rights to the digital resource identifier; If a viewing request for the digital resource identifier sent by the blockchain node is obtained, the object identity information of the target object is obtained; The viewing request is a request initiated by the second institution to the blockchain node; When the identity authentication for the object identity information is passed, the second institution is authorized to request the viewing, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node when it is determined that the signature verification result is a signature verification passing result; The signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted private data corresponding to the digital resource identifier is not visible to the second institution; Receive the business incentive resources forwarded by the blockchain node.

8. The method according to claim 7, characterized in that Also includes: In response to a data selection operation for object upload data, generating encryption selection indication information based on the data selection operation; The object uploaded data is data sent by the target object to the first institution; The selected encryption indication information is sent to the blockchain node, so that the blockchain node determines the local data indicated by the selected encryption indication information in the object upload data as private data, encrypts the private data to obtain encrypted private data, and determines the data in the object upload data other than the private data as public information; the blockchain node is used to generate a digital resource identifier for the public information and the encrypted private data.

9. The method according to claim 7, characterized in that: When the identity authentication for the object identity information is passed, authorizing the viewing request for the second institution includes: When the identity authentication for the object identity information is passed, respond to the identifier selection operation for the digital resource identifier set, authorize the viewing request based on the digital resource identifier selected by the identifier selection operation, obtain an authorization confirmation message, and send the authorization confirmation message to the blockchain node, so that the blockchain node opens the viewing permission for the digital resource identifier for the second institution based on the authorization confirmation message.

10. A data processing device based on blockchain, characterized in that: include: An identification issuing module, used to send the digital resource identification issued by the first institution in the blockchain network to the resource client corresponding to the target object; The metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object; the target object has unique ownership rights to the digital resource identifier; A request authorization module, configured to forward a viewing request for the digital resource identifier sent by the second institution to the resource client if the viewing request is obtained, so that the resource client authorizes the viewing request; A permission opening module, configured to open a permission for the second institution to view the digital resource identifier in the resource client if the resource client authorizes the viewing request; A signature verification processing module, used to obtain a signature verification request sent by the second institution for the digital resource identifier being viewed, verify the signature information in the public information corresponding to the digital resource identifier according to the signature verification request, and send the signature verification result to the second institution, so that the second institution returns the business incentive resource when determining that the signature verification result is a signature verification passing result; the signature information is obtained by signing the public information based on the private key of the first institution; the encrypted privacy data corresponding to the digital resource identifier is not visible to the second institution; The incentive distribution module is used to forward the business incentive resource to the resource client.

11. A data processing device based on blockchain, characterized in that: include: An identification storage module, used for the resource client to store the digital resource identification issued by the first institution in the blockchain network; The metadata corresponding to the digital resource identifier includes public information and encrypted private data for the target object corresponding to the resource client; the target object has unique ownership rights to the digital resource identifier; An identity authentication module, configured to obtain the object identity information of the target object if a viewing request for the digital resource identifier sent by the blockchain node is obtained; The viewing request is a request initiated by the second institution to the blockchain node; A request processing module, used for authorizing the viewing request for the second institution when the identity authentication for the object identity information is passed, so that the second institution sends a signature verification request for the viewed digital resource identifier to the blockchain node, and returns the business incentive resource to the blockchain node when it is determined that the signature verification result is a signature verification passing result; The signature information is obtained by signing the public information based on the private key of the first institution; the signature verification result is obtained by the blockchain node verifying the signature information in the public information corresponding to the digital resource identifier according to the signature verification request; the encrypted private data corresponding to the digital resource identifier is not visible to the second institution; An incentive receiving module is used to receive the business incentive resources forwarded by the blockchain node.

12. A computer device, characterized in that: include: Processor, memory, and network interface; The processor is connected to the memory and the network interface, wherein the network interface is used to provide a data communication function, the memory is used to store a computer program, and the processor is used to call the program code so that the computer device executes the method described in any one of claims 1-9.

13. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and the computer program is suitable for being loaded and executed by a processor, so that a computer device having the processor executes the method according to any one of claims 1 to 9.

14. A computer program product, characterized in that The computer program product comprises a computer program, which is stored in a computer-readable storage medium and is suitable for being read and executed by a processor, so that a computer device having the processor executes the method according to any one of claims 1 to 9.

Images