System data migration method and device

Abstract

The invention provides a system data migration method and device, and belongs to the technical field of data transmission. According to the system data migration method, an associated data item corresponding to a target data item is obtained through a data transfer node in a target block chain, and a data item of a complete version can be obtained; according to the cross-mechanism data transfer method, the cross-mechanism data transfer efficiency is improved, appropriate data can be found to be checked and corrected, data transparency and non-tampering performance can be ensured through the block chain, iteration of data versions and normalization and traceability of modification are ensured, and the trust degree and efficiency of cross-mechanism data transfer are improved.

Description

Technical Field

[0001] The present invention relates to the technical field of data transmission, and in particular to a method and device for migrating system data. Background Art

[0002] In clinical trials, it is crucial to collect and store the medical data of subjects. This data is not only used for subsequent analysis and calculations, but may also affect the conclusions of clinical trials, so the accuracy and completeness of the data must be ensured. In order to manage data efficiently, many clinical trials now use electronic data collection systems to record and store this information. These systems usually contain reports (or forms) designed specifically for the trial project to collect basic information, case information, and related medical data of the subjects.

[0003] As clinical trials proceed, the trial protocol may need to be adjusted based on early trial results or other factors. These adjustments may cause changes in the structure of the original data collection form (or electronic form), such as adding new entry items, deleting entry items, and changing required and non-required items. In addition, there is often a certain logical relationship between the various entry items in the form. For example, some items must meet specific conditions before they can be filled in. If the subject's age is greater than a certain value, additional health examination information may need to be filled in. The filling order or conditions of some fields in the form may be related to each other. For example, if the "history of allergies" item is filled in, it may be necessary to trigger the display of other questions related to allergies.

[0004] When the form structure is adjusted, these logical relationships may be affected, especially when it involves multi-party data flow. The data form structures of the two parties involved in the data flow may be different. When the new data is migrated from one party to the new form version of the other party, the data migration may cause errors in the logical relationships of these data, thereby affecting the accuracy of subsequent data use. When correcting data, data modifications and test records may be considered as behaviors that do not comply with test specifications, especially when these modifications cannot be clearly explained, which may affect the credibility of the data. The party B that updates the data needs to obtain data from the other party, institution A, at this time. However, in this process, the data form of institution A may also be updated and iterated, which makes the update of the data form chaotic, making it difficult to ensure the accuracy and credibility of the data. Summary of the invention

[0005] The present invention provides a system data migration method and device, which are used to solve the defects of the prior art that the data sources are confusing and the credibility is low, and improve the accuracy and credibility of the data.

[0006] The present invention provides a system data migration method, which is applied to a data receiver, and comprises: When checking a target data item in a data form, determining a target data index corresponding to the target data item; Based on the target data index, sending a verification request for verifying the target data item to a data transfer node in the target blockchain; Receive the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node; the associated data item is a different data version of the target data item; Based on the data storage node address, sending the data acquisition instruction to the data storage node in the target blockchain; The associated data item encrypted by the target public key and sent by the data storage node is received, and the associated data item is decrypted by the target private key corresponding to the target public key to verify the target data item.

[0007] According to a system data migration method provided by the present invention, the associated data items include historical data items and updated data items; the historical data items are versions of the target data items at historical moments, the updated data items are versions of the target data items updated at the most recent moment, and the updated data items are obtained by the data flow node querying the flow record of the target data item.

[0008] According to a system data migration method provided by the present invention, the receiving of the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node comprises: Querying the data flow record for the data item corresponding to the target data index in the data flow record through the data flow node; Determine, by the data flow node, the associated party of the associated data item and the data storage node address based on the flow record; Sending a request for the data recipient to check the target data item to the associated party through the data transfer node; When the data transfer node receives the associated party's consent feedback to the data recipient's request for checking the target data item, the data transfer node generates a target public key, a target private key corresponding to the target public key, and a data acquisition instruction to obtain data from the data storage node; The target public key of the associated data item corresponding to the target data index is sent to the data storage node through the data transfer node, and the data storage node address, data acquisition instruction and target private key are sent to the data recipient.

[0009] According to a system data migration method provided by the present invention, the receiving of the associated data item encrypted by the target public key sent by the data storage node comprises: Receiving, through the data storage node, the target public key of the associated data item corresponding to the target data index and the data acquisition instruction sent by the data transfer node; Searching for the associated data item corresponding to the target data index through the data storage node, and encrypting the associated data item using the target public key; Sending the encrypted associated data item to the data recipient through the data storage node; Receive the encrypted associated data item sent by the data storage node.

[0010] According to a system data migration method provided by the present invention, searching for the associated data item corresponding to the target data index through the data storage node and encrypting the associated data item using the target public key includes: The target data index and the target storage address and the decryption key of the associated data item corresponding to the data acquisition instruction are searched from the encrypted mapping table through the data storage node; the encrypted mapping table associates the target data index and the data acquisition instruction with the storage address and the decryption key of the associated data item; The associated data item is obtained from the target storage address of the database through the data storage node, and the associated data item is decrypted by using the decryption key and then encrypted by using the target public key.

[0011] According to a system data migration method provided by the present invention, the verifying the target data item includes: Determining a data item of a target version from the target data items; Based on the data items of the target version, data format check, integrity check and logic check are respectively performed on the target data items; If there is data that needs to be modified, modify the data and record the data modification information, which includes the reason, content and timestamp of the modification; The data modification information is uploaded to the data flow node to update the flow record of the target data item.

[0012] According to a system data migration method provided by the present invention, the data flow node and the data storage node are both configured with a digital signature algorithm for verifying with the data receiver and the data receiver's associated parties.

[0013] The present invention also provides a system data migration device, comprising: A determination module, used to determine a target data index corresponding to a target data item in a data form when checking the target data item; A first sending module, configured to send a verification request for verifying the target data item to a data transfer node in a target blockchain based on the target data index; A first receiving module is used to receive the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node; the associated data item is a different data version of the target data item; A second sending module, configured to send the data acquisition instruction to the data storage node in the target blockchain based on the data storage node address; The second receiving module is used to receive the associated data item encrypted by the target public key sent by the data storage node, and decrypt the associated data item by using the target private key corresponding to the target public key to verify the target data item.

[0014] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, any of the above-mentioned system data migration methods is implemented.

[0015] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the system data migration method described in any one of the above methods is implemented.

[0016] The present invention also provides a computer program product, comprising a computer program, wherein when the computer program is executed by a processor, the system data migration method described in any one of the above is implemented.

[0017] The system data migration method and device provided by the present invention can obtain the complete version of the data item by obtaining the associated data item corresponding to the target data item at the data flow node in the target blockchain, which is helpful to find suitable data for inspection and correction. The use of blockchain can also ensure data transparency and non-tamperability, ensure the iteration of data versions and the standardization and traceability of modifications, and improve the trust and efficiency of cross-institutional data flow. BRIEF DESCRIPTION OF THE DRAWINGS

[0018] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0019] Figure 1 This is one of the flow charts of the system data migration method provided by the present invention; Figure 2 This is the second flow chart of the system data migration method provided by the present invention; Figure 3 It is a structural schematic diagram of a system data migration device provided by the present invention; Figure 4 It is a structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0020] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0021] Combine the following Figure 1-Figure 4 The system data migration method and device of the present invention are described.

[0022] like Figure 1 As shown, the system data migration method of the embodiment of the present invention mainly includes step 110, step 120, step 130, step 140 and step 150.

[0023] Step 110, when checking the target data item in the data form, determine the target data index corresponding to the target data item.

[0024] The target data item refers to the specific data item that needs to be checked or processed. For example, in a data form, the target data item may be the personal information of a participant, the record of an experimental operation, the detailed information of a product, etc.

[0025] The target data index is a data structure created to quickly locate and find specific data. In a blockchain or database system, a target data item is usually associated with an index that allows the system to quickly locate the target data item. During the verification process, the target data index is used to quickly find the location or identifier of the target data item in the data storage.

[0026] For example, if the target data item is a field in a form (such as experimental data, personnel identity ID, etc.), then the data index can be a numeric index, ID, or a unique identifier.

[0027] Step 120, based on the target data index, sends a verification request for the target data item to the data transfer node in the target blockchain.

[0028] In a blockchain network, data transfer nodes usually refer to blockchain nodes that process, verify, and forward data. These nodes are responsible for storing data, verifying transactions, or executing smart contracts. Each node in the blockchain may participate in the transmission, storage, and processing of data.

[0029] A verification request is a request for obtaining data when verifying data. Here, the purpose of verifying the target data item may be to confirm whether the data item is valid, whether it complies with the predetermined rules, whether it has ever existed in the blockchain, etc. The request is sent to the data flow node in the blockchain through the target data index, with the purpose of allowing the node to obtain the data.

[0030] For example, in a blockchain network, a data item is located and searched through a specific index. Then, based on this index, a request is sent to a node in the blockchain network, asking the node to obtain the data and verify or check the validity, existence or other properties of the specific data item based on the obtained data.

[0031] As a distributed ledger technology, blockchain can provide transparent audit records to ensure that every data modification has a clear record and these records cannot be tampered with. In practical applications, there are several different types and options of blockchain suitable for such needs, which mainly depend on the specific business needs and technical architecture, such as consortium chain.

[0032] Step 130, receiving the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node.

[0033] The associated data items are different data versions of the target data items. The associated data items include historical data items and updated data items; historical data items are versions of the target data items at historical moments, and updated data items are versions of the target data items updated at the most recent moment. Updated data items are obtained by querying the flow records of the target data items at the data flow node.

[0034] A related data item refers to other versions of data that are related to a target data item. Since the data may be updated by various related parties, different versions of the target data item (such as historical versions or updated versions) will be stored or recorded, and these versions of data are the related data items.

[0035] Historical data items refer to the status or version of the target data item at a historical moment. These data items record the historical changes of the target data item, usually the initial version of the data or the data before a certain update. Historical data items are usually used for auditing, tracing or data verification.

[0036] Historical data items can be obtained through the immutability of blockchain. Each block in the blockchain network records the state changes of data. Historical data items can often be found through the historical transaction records or timestamps of the blockchain. In smart contracts or blockchain databases, historical data items are usually saved in data snapshots at specific points in time.

[0037] An updated data item refers to the latest version or current state of the target data item at the most recent moment. As the data is modified, updated or corrected, the data item changes, and the updated data item reflects the modified or updated information.

[0038] Updated data items are usually obtained by checking the latest blockchain block or data storage node records. In the blockchain system, updated data items refer to the latest valid data, which are usually encrypted, signed, and stored in the latest block. Updated data items can also be checked by checking the circulation record to determine the status update of the smart contract or the last modification time of the database.

[0039] Data storage node address This is the address of the node that stores the target data item or its associated data items. It is usually the storage address associated with a specific data record in the blockchain network. This address points to a storage location or database. In the database or distributed file system of the blockchain's specific data storage service, the data storage node is responsible for saving the data item.

[0040] Data acquisition instructions are specific operation instructions for obtaining target data items or related data items from data storage nodes. These instructions usually include data access permissions, API interfaces, storage paths or other technical details to ensure that users can obtain the required data in the right way.

[0041] The target private key is a decryption tool used to verify data access rights and is usually controlled by the owner or authorizer of the data item. In blockchain or encrypted data systems, the target private key is used to decrypt, authenticate or sign data to ensure the integrity and security of the data.

[0042] In data systems such as blockchain, version management of data items is critical because data may be modified or updated multiple times over time.

[0043] Step 140, based on the data storage node address, send a data acquisition instruction to the data storage node in the target blockchain.

[0044] The data storage node address is the address of a data storage node in the blockchain, usually the location or identifier used by the node to store data.

[0045] A data retrieval instruction is a command that tells a blockchain node to retrieve specific information from the data it stores.

[0046] The data storage node in the target blockchain refers to the node in the blockchain network that is responsible for storing data and is a participating node in the blockchain.

[0047] In a blockchain network, a request is made to a node storing data through a known node address, requiring the node to provide or return specific data.

[0048] Both the data transfer node and the data storage node are equipped with a digital signature algorithm for verification with the data recipient and its associated parties. Digital signatures can be used to verify the identity of the data sender and ensure the legitimacy of the data source, which is crucial to preventing forged data and man-in-the-middle attacks initiated by malicious attackers.

[0049] Step 150: receiving the associated data item encrypted by the target public key sent by the data storage node, and decrypting the associated data item by using the target private key corresponding to the target public key to verify the target data item.

[0050] Receive the encrypted data sent from the data storage node, that is, the associated data item encrypted using the target public key, and then decrypt it using the target private key matching the target public key to verify the correctness and validity of the data.

[0051] It should be noted that data items encrypted by the target public key can be received from the data storage node, and then the target private key paired with the target public key can be used to decrypt the data. After decryption, the data can be checked to see if it meets expectations, and appropriate data items can be screened to verify the authenticity and validity of the data. This process ensures that the received data has not been tampered with and verifies its correctness through the public key encryption and private key decryption mechanism.

[0052] In some embodiments, verifying the target data item may include the following process.

[0053] You can first determine the target version of the data items from the target data items; then, based on the target version of the data items, perform data format checks, integrity checks, and logic checks on the target data items; if there is data that needs to be modified, modify the data and record the data modification information, which includes the reason, content, and timestamp for the modification; finally, upload the data modification information to the data flow node to update the flow record of the target data item.

[0054] The target data item is the data that needs to be verified, such as a record or field. The target version of the data item refers to the version information of the data item, which can be a version number saved in the system, identifying the modification history or status of the data. By determining this version, the current status of the data item can be understood.

[0055] Data format checking verifies whether the format of data meets the predetermined standards (such as date format, number format, etc.). Integrity checking ensures that data is not lost or tampered with, ensuring data integrity. Logical checking checks whether data conforms to logical rules, such as whether the value of a field is reasonable or consistent with other data items, for example, whether the user's age is greater than 18, or whether the test time is greater than a specific value.

[0056] If there is data that needs to be modified, modify the data and record the data modification information. If the data is found to have problems through inspection, the system will make necessary modifications and record the data modification information, such as the specific reason for the modification, the content of the modification, and the time of the modification (timestamp). This information helps track the history of data changes and ensure that the modifications are compliant and recordable.

[0057] On this basis, the data modification information is uploaded to the data flow node to update the flow record of the target data item. The modified data and related modification information will be uploaded to the data flow node, so that the updated records will be reflected in the historical records of data flow to ensure the accuracy and transparency of the data.

[0058] In this embodiment, verification and modification operations are implemented on the target data items when necessary, the modification records are uploaded to the blockchain or related nodes, the data flow records are updated, and the transparency and traceability of data management are guaranteed. This operation is conducive to ensuring the compliance, security and auditability of data, especially in data management systems involving sensitive data or requiring precise tracking.

[0059] It is understandable that in the general data migration process, due to the adjustment of the form structure, the destruction of the data logical relationship, and the data errors and credibility issues that may be caused during the data migration process. Specifically, the change of the form structure may cause deviations in the migration and logical verification of the data, and the subsequent modification of the data may be considered non-compliant with the specification, affecting the credibility of the data. The migration method of system data proposed in the embodiment of the present invention manages data flow and verification through blockchain technology, which helps to solve these problems.

[0060] During the data migration process, traditional database management may cause data inconsistency due to the adjustment of the form structure, especially when there are differences in the form structure. Through the method of this embodiment, the data recipient (Organization B) can search for the corresponding data version through the target data index to ensure that the data obtained is not the wrong version or inconsistent data. Through the data verification request and subsequent verification of related data items, it is ensured that the logical relationship and structure of the data are not destroyed during the migration process, thereby maintaining data consistency.

[0061] Data migration and modification are completed through the data transfer nodes and data storage nodes in the blockchain. A key feature of blockchain technology is immutability and full traceability, which means that the modification history of each data item can be traced and cannot be modified or deleted later. This can effectively prevent non-compliant behavior when modifying data and increase the credibility of the data.

[0062] Each data item can be protected by encryption technology. Through the mechanism of target public key encryption and target private key decryption, the security of data in the flow process is ensured, and only the legitimate recipient can decrypt and verify the data to avoid unauthorized tampering.

[0063] During the data flow process, different institutions may adjust the form structure, resulting in a mismatch between the original data and the new form version. In this way, the system can use the target data index to directly obtain the associated data version of the target data item, avoiding data confusion caused by changes in the form structure. Through the data acquisition instructions of the data storage node in the blockchain, the data source can be accurately located, unaffected by changes in the form structure, thereby ensuring data integrity.

[0064] When it comes to modifying and correcting data, especially in scenarios where data is transferred between multiple parties, data modification often needs to be carried out in strict accordance with test specifications or audit requirements. Through the application of blockchain technology, any modification and transfer of data has detailed data modification records and the modified content is encrypted and protected. In this way, the modification process can be clearly traced to avoid data unreliability caused by unexplained modification records.

[0065] When re-acquiring data, institution B can ensure that the acquired data complies with the specifications and has not been tampered with by querying historical records, verifying data integrity, etc.

[0066] Problems often arise in data transfer and form structure adjustment across institutions, especially when the data forms and structures of multiple institutions are not unified. With this method, data exchange between different institutions can be more efficient and reliable. Institution B can directly verify the source, version and history of data through the blockchain system to ensure that the migrated data is the latest and verified. Through the blockchain's smart contracts and automated verification mechanism, manual intervention and potential operational errors are reduced, and the reliability of data transfer is improved.

[0067] According to the system data migration method provided by the embodiment of the present invention, by obtaining the associated data items corresponding to the target data items at the data flow nodes in the target blockchain, the complete version of the data items can be obtained, which is helpful to find suitable data for inspection and correction. The use of blockchain can also ensure data transparency and non-tamperability, ensure the iteration of data versions and the standardization and traceability of modifications, and improve the trust and efficiency of cross-institutional data flow.

[0068] In some embodiments, Figure 2 As shown, receiving the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data flow node mainly includes steps 210, 220, 230, 240 and 250.

[0069] Step 210, querying the data flow record for the data item corresponding to the target data index in the data flow record through the data flow node; Step 220, determining the associated party of the associated data item and the data storage node address based on the flow record through the data flow node; Step 230, sending a data receiver's inspection request for the target data item to the associated party through the data transfer node; Step 240, when the data transfer node receives the associated party's consent feedback to the data recipient's request for verification of the target data item, the data transfer node generates a target public key, a target private key corresponding to the target public key, and a data acquisition instruction to obtain data from the data storage node; Step 250, sending the target public key of the associated data item corresponding to the target data index to the data storage node through the data flow node, and sending the data storage node address, data acquisition instructions and target private key to the data recipient.

[0070] The flow record of the target data item contains the historical information of the data item flowing between different nodes. By querying the record, the flow track of the data item and the information of the associated data items can be obtained, which can help the system understand the flow of the target data item at different nodes or stages.

[0071] The data flow node finds other data items related to the target data item (ie, associated data items) based on the flow record obtained in step 210, and determines the storage party (associated party) and storage address (data storage node address) of these data items.

[0072] Data items of different versions or structures may be stored in different nodes or circulated and managed by different entities (related parties). This ensures that the system can find the storage location of these related data items based on the circulation records, and then request data and permissions from the correct nodes.

[0073] The data flow node sends a verification request for the target data item to the data's associated party, such as the data holder or the entity responsible for data verification.

[0074] In this embodiment, in order to request the related party to confirm the accuracy or completeness of the target data item, the recipient usually needs to confirm whether the target data item meets the predetermined standard, has been audited, or meets certain compliance requirements.

[0075] After the data flow node receives feedback from the associated party agreeing to the verification request, the system will generate a pair of public and private keys through the node.

[0076] The target public key is used to encrypt the associated data items to ensure the security of the data during transmission; the target private key is used to decrypt the received data to ensure that the receiver can verify the integrity and correctness of the data during data exchange. The target public key and the target private key can be generated as a pair of keys based on encryption algorithms such as RSA, ECC, etc. The target public key is usually generated by the data flow node and sent to the data holder for encryption. The target private key is the other part of the key pair and can only be held by the data recipient or authorized party.

[0077] The target public key can be publicly sent to other nodes or stored in a public directory, while the target private key is kept by the holder, such as the data recipient or data storage node, and is usually stored in encrypted form to prevent leakage.

[0078] At the same time, a data acquisition instruction is generated, which specifies the detailed method of obtaining data from the data storage node, such as the specific location of the data, access rights, etc.

[0079] The generation of public and private keys is used for encryption and decryption to ensure the security and integrity of data transmission; data acquisition instructions indicate how to correctly obtain data from the storage node.

[0080] The data transfer node sends the target public key of the target data item to the data storage node; at the same time, the data transfer node sends the address of the data storage node, data acquisition instructions and target private key to the data recipient.

[0081] The target public key is sent to the data storage node in order to encrypt the data during the subsequent data transmission process; the data recipient will obtain the target private key to decrypt the data encrypted by the public key, and obtain the address of the data storage node and data acquisition instructions, so that the recipient can obtain and verify the data according to the instructions.

[0082] In this implementation, the public / private key encryption and decryption mechanism ensures the secure transmission of data, and the data flow history can be traced through the data flow record to ensure the integrity of the data. Throughout the process, there are strict processes and specifications for data acquisition, inspection, and modification to ensure that the data meets compliance requirements. Through clear data storage nodes, acquisition instructions, and encryption / decryption mechanisms, cross-institutional or cross-platform data flow is supported to ensure the reliability of data flow.

[0083] In some embodiments, receiving an associated data item encrypted by a target public key sent by a data storage node includes the following process.

[0084] The target public key and data acquisition instruction of the associated data item corresponding to the target data index sent by the data flow node can be received through the data storage node; the associated data item corresponding to the target data index can be searched through the data storage node, and the associated data item can be encrypted using the target public key; the encrypted associated data item can be sent to the data recipient through the data storage node; finally, the encrypted associated data item sent by the data storage node can be received.

[0085] The data storage node receives two key information from the data flow node, namely, the target public key and the data acquisition instruction.

[0086] The target data index points to the identifier of a specific associated data item and is used to find data in the storage system.

[0087] Target public key is the public key used to encrypt data. This public key is usually associated with the target data recipient, which means that only the target recipient can use the corresponding private key to decrypt the data.

[0088] The data retrieval instructions instruct the data storage node how to process the data or what data needs to be retrieved and encrypted.

[0089] The data storage node locates the corresponding associated data items according to the received target data index. These data items are usually stored in a database or other storage system.

[0090] After finding the corresponding data items, the data storage node encrypts these data items using the received target public key. Encryption is to ensure that the data is protected during transmission and only the target recipient can decrypt it.

[0091] The encrypted data items are sent to the data recipient through the data storage node. Since the data has been encrypted, only the recipient who holds the corresponding private key can decrypt and view the data content.

[0092] The data receiver receives the encrypted data item from the data storage node and waits for decryption using the target private key to obtain the original data.

[0093] In some instances, the associated data item corresponding to the target data index is searched through the data storage node, and the associated data item is encrypted using the target public key, including: searching the target storage address and decryption key of the associated data item corresponding to the target data index and the data acquisition instruction from the encryption mapping table through the data storage node; the encryption mapping table associates the target data index and the data acquisition instruction with the storage address and decryption key of the associated data item; the associated data item is obtained from the target storage address of the database through the data storage node, and the associated data item is decrypted using the decryption key and then encrypted using the target public key.

[0094] The encryption map is a table that stores the target data index, data acquisition instructions, storage addresses of associated data items, and decryption keys. The function of this table is to associate the target data index and data acquisition instructions with the actual storage location of the data (i.e., the target storage address) and the decryption key.

[0095] The decryption key is the key used to decrypt the data item, because the data may have been encrypted when stored and needs to be decrypted before access.

[0096] In this process, the target data item is first located through the encryption map, and the storage address and decryption key associated with it are obtained. The role of this encryption map is to associate the target data index and data acquisition instructions with the actual storage address of the data and the required decryption key. In other words, when a data storage node receives a request to obtain specific data, it can query this mapping table to determine where the requested data is stored and obtain the corresponding decryption key to decrypt the data. The stored data is usually encrypted, so it is impossible to obtain the original data by directly accessing the storage address. The original content must be restored through the corresponding decryption key.

[0097] When the data storage node obtains the storage address of the target data, it can extract the corresponding encrypted data item from the database according to the address recorded in the mapping table. At this time, since the data is stored in encrypted form, the node needs to use the decryption key given in the mapping table to decrypt the data and restore the original plaintext data, thereby restoring the data to a state that can be understood and processed. However, the plaintext data at this time may still have security risks during subsequent transmission.

[0098] To solve this problem, the next step is to encrypt the decrypted data again using the target public key. The target public key is usually an encryption tool held by the recipient, so that even if the data is intercepted during transmission, the data cannot be decrypted unless the intercepting party has the private key paired with the public key. The data encrypted with the target public key ensures confidentiality during transmission, and only the designated recipient can decrypt the data with the private key and obtain the original plaintext information.

[0099] Through the above operations, the secure storage and transmission of data can be effectively achieved. The encryption map helps manage the storage address and decryption key of the data, ensuring that the data can be correctly decrypted when it is obtained. After the data is decrypted and restored, it is encrypted again using the target public key to ensure the confidentiality of the data during transmission. Ultimately, only the target recipient can decrypt and access the data, and no other unauthorized party can obtain the data content. This process implements multiple protections for data, ensures the security of data throughout its life cycle, and avoids the risk of data leakage and unauthorized access.

[0100] The following is a description of a system data migration device provided by the present invention. The system data migration device described below and the system data migration method described above can be referenced to each other.

[0101] like Figure 3 As shown, the system data migration device according to the embodiment of the present invention mainly includes a determination module 310 , a first sending module 320 , a first receiving module 330 , a second sending module 340 and a second receiving module 350 .

[0102] The determination module 310 is used to determine the target data index corresponding to the target data item when checking the target data item in the data form; The first sending module 320 is used to send a verification request for verifying the target data item to the data transfer node in the target blockchain based on the target data index; The first receiving module 330 is used to receive the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node; the associated data item is a different data version of the target data item; The second sending module 330 is used to send a data acquisition instruction to the data storage node in the target blockchain based on the data storage node address; The second receiving module 340 is used to receive the associated data item encrypted by the target public key sent by the data storage node, and decrypt the associated data item by using the target private key corresponding to the target public key to verify the target data item.

[0103] According to the migration device of system data of the embodiment of the present invention, by obtaining the associated data items corresponding to the target data items at the data flow nodes in the target blockchain, the complete version of the data items can be obtained, which is helpful to find suitable data for inspection and correction. The use of blockchain can also ensure data transparency and non-tamperability, ensure the iteration of data versions and the standardization and traceability of modifications, and improve the trust and efficiency of cross-institutional data flow.

[0104] Figure 4 An example of a physical structure diagram of an electronic device is shown in FIG. Figure 4 As shown, the electronic device may include: a processor 410, a communication interface 420, a memory 430 and a communication bus 440, wherein the processor 410, the communication interface 420 and the memory 430 communicate with each other through the communication bus 440. The processor 410 may call the logic instructions in the memory 430 to execute the migration method of the system data, which includes: determining the target data index corresponding to the target data item when checking the target data item in the data form; sending a check request for checking the target data item to the data transfer node in the target blockchain based on the target data index; receiving the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node; the associated data item is a different data version of the target data item; sending a data acquisition instruction to the data storage node in the target blockchain based on the data storage node address; receiving the associated data item encrypted by the target public key sent by the data storage node, and decrypting the associated data item by the target private key corresponding to the target public key to verify the target data item.

[0105] In addition, the logic instructions in the above-mentioned memory 430 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on this understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0106] On the other hand, the present invention also provides a computer program product, which includes a computer program, which can be stored on a non-transitory computer-readable storage medium. When the computer program is executed by a processor, the computer can execute the system data migration method provided by the above methods, which method includes: when checking the target data item in the data form, determining the target data index corresponding to the target data item; based on the target data index, sending a verification request for verifying the target data item to the data flow node in the target blockchain; receiving the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data flow node; the associated data item is a different data version of the target data item; based on the data storage node address, sending a data acquisition instruction to the data storage node in the target blockchain; receiving the associated data item encrypted by the target public key sent by the data storage node, and decrypting the associated data item by the target private key corresponding to the target public key to verify the target data item.

[0107] On the other hand, the present invention also provides a non-transitory computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, is implemented to execute the system data migration method provided by the above-mentioned methods, the method comprising: determining the target data index corresponding to the target data item when checking the target data item in the data form; based on the target data index, sending a verification request for verifying the target data item to the data flow node in the target blockchain; receiving the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data flow node; the associated data item is a different data version of the target data item; based on the data storage node address, sending a data acquisition instruction to the data storage node in the target blockchain; receiving the associated data item encrypted by the target public key sent by the data storage node, and decrypting the associated data item by the target private key corresponding to the target public key to verify the target data item.

[0108] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0109] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0110] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for migrating system data, characterized in that: Applied to a data receiver, the method comprises: When checking a target data item in a data form, determining a target data index corresponding to the target data item; Based on the target data index, sending a verification request for verifying the target data item to a data transfer node in the target blockchain; Receive the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node; the associated data item is a different data version of the target data item; Based on the data storage node address, sending the data acquisition instruction to the data storage node in the target blockchain; The associated data item encrypted by the target public key and sent by the data storage node is received, and the associated data item is decrypted by the target private key corresponding to the target public key to verify the target data item.

2. The method for migrating system data according to claim 1, characterized in that: The associated data items include historical data items and updated data items; the historical data items are versions of the target data items at historical moments, the updated data items are versions of the target data items updated at the most recent moment, and the updated data items are obtained by the data flow node querying the flow record of the target data item.

3. The method for migrating system data according to claim 1, characterized in that: The receiving of the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node comprises: Querying the data flow record for the data item corresponding to the target data index in the data flow record through the data flow node; Determine, by the data flow node, the associated party of the associated data item and the data storage node address based on the flow record; Sending a request for the data recipient to check the target data item to the associated party through the data transfer node; When the data transfer node receives the associated party's consent feedback to the data recipient's request for checking the target data item, the data transfer node generates a target public key, a target private key corresponding to the target public key, and a data acquisition instruction to obtain data from the data storage node; The target public key of the associated data item corresponding to the target data index is sent to the data storage node through the data transfer node, and the data storage node address, data acquisition instruction and target private key are sent to the data recipient.

4. The method for migrating system data according to claim 3, characterized in that: The receiving the associated data item encrypted by the target public key and sent by the data storage node comprises: Receiving, through the data storage node, the target public key of the associated data item corresponding to the target data index and the data acquisition instruction sent by the data transfer node; Searching for the associated data item corresponding to the target data index through the data storage node, and encrypting the associated data item using the target public key; Sending the encrypted associated data item to the data recipient through the data storage node; Receive the encrypted associated data item sent by the data storage node.

5. The method for migrating system data according to claim 4, characterized in that: The step of searching for the associated data item corresponding to the target data index through the data storage node and encrypting the associated data item using the target public key includes: The target data index and the target storage address and the decryption key of the associated data item corresponding to the data acquisition instruction are searched from the encrypted mapping table through the data storage node; the encrypted mapping table associates the target data index and the data acquisition instruction with the storage address and the decryption key of the associated data item; The associated data item is obtained from the target storage address of the database through the data storage node, and the associated data item is decrypted by using the decryption key and then encrypted by using the target public key.

6. The method for migrating system data according to claim 1, characterized in that: The verifying the target data item comprises: Determining a data item of a target version from the target data items; Based on the data items of the target version, data format check, integrity check and logic check are respectively performed on the target data items; If there is data that needs to be modified, modify the data and record the data modification information, which includes the reason, content and timestamp of the modification; The data modification information is uploaded to the data flow node to update the flow record of the target data item.

7. The method for migrating system data according to claim 1, characterized in that: The data transfer node and the data storage node are both configured with a digital signature algorithm for verifying with the data receiver and the data receiver's associated parties.

8. A system data migration device, characterized in that: include: A determination module, used to determine a target data index corresponding to a target data item in a data form when checking the target data item; A first sending module, configured to send a verification request for verifying the target data item to a data transfer node in a target blockchain based on the target data index; A first receiving module, used to receive the data storage node address, data acquisition instruction and target private key of the associated data item corresponding to the target data item sent by the data transfer node; The associated data items are different data versions of the target data item; A second sending module, configured to send the data acquisition instruction to the data storage node in the target blockchain based on the data storage node address; The second receiving module is used to receive the associated data item encrypted by the target public key sent by the data storage node, and decrypt the associated data item by using the target private key corresponding to the target public key to verify the target data item.

9. An electronic device comprising a memory, a processor, and a computer program stored in the memory and capable of running on the processor, characterized in that: When the processor executes the program, the system data migration method according to any one of claims 1 to 7 is implemented.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the system data migration method according to any one of claims 1 to 7 is implemented.

Images