Block chain auditing method and device, equipment, storage medium and program product

Abstract

The embodiment of the invention provides a block chain auditing method and device, equipment, a storage medium and a program product, and relates to the field of block chains. The method comprises the following steps: receiving auditing information sent by an auditing terminal, determining a privacy attribute according to a privacy identifier in the auditing information, directly storing auditing opinions of which the privacy attribute is non-privacy, and encrypting and storing auditing opinions of which the privacy attribute is privacy, and the digital signature in the audit information can be decrypted to verify the audit opinion, and then the audit decision is generated according to the verified audit opinion. Whether the auditing opinions are published or not can be controlled through the additional privacy identifier, so that the privacy and safety of related information in the auditing process are ensured, and the participation degree of the auditing subject in auditing items is improved.

Description

Technical Field

[0001] The present application relates to the field of blockchain technology, and in particular to a blockchain audit method, device, equipment, storage medium and program product. Background Art

[0002] With the development of computer technology and the popularization of electronic office, it is very common to use modern information technology to review various matters. For the decision-making of a proposal or project, it is often necessary for multiple parties to participate in the review, so it is necessary to use online review.

[0003] At present, in order to improve the transparency of audits and ensure that the audit process is fair and reasonable, some institutions have begun to use blockchain technology for audit decisions, aggregating the audit opinions of multiple parties through blockchain and using this to determine the audit results.

[0004] However, when blockchain is used in multi-institutional collaborative audit scenarios, information such as the auditor's identity and authority management will also be made public along with the audit results, which may easily lead to the leakage of private information. The privacy and security of information needs to be improved. Summary of the invention

[0005] The present application provides a blockchain audit method, device, equipment, storage medium and program product to solve the technical problem of insufficient information security in blockchain audit.

[0006] In a first aspect, the present application provides a blockchain audit method, which is applied to a blockchain, and the method comprises:

[0007] Receiving audit information for the request to be audited sent by the audit terminal, the audit information including the audit opinion, privacy mark and digital signature;

[0008] Determine the privacy attribute of the audit information according to the privacy identifier, if the privacy attribute is non-privacy, store the audit opinion in the database, if the privacy attribute is privacy, encrypt the audit opinion and store it in the database;

[0009] Decrypting the digital signature corresponding to the stored audit opinion and verifying the audit opinion based on the decryption result;

[0010] An audit decision is generated based on preset audit rules and verified audit opinions, and the audit decision does not include audit opinions whose privacy attributes are private.

[0011] In a second aspect, the present application provides a blockchain audit device, which is applied to a blockchain, and the device includes:

[0012] A receiving module, used to receive the audit information for the request to be audited sent by the audit terminal, wherein the audit information includes the audit opinion, the privacy mark and the digital signature;

[0013] A privacy processing module, used to determine the privacy attribute of the audit information according to the privacy identifier, and if the privacy attribute is non-privacy, store the audit opinion in a database; if the privacy attribute is privacy, encrypt the audit opinion and store it in the database;

[0014] A signature verification module, used to decrypt the digital signature corresponding to the stored audit opinion and verify the audit opinion based on the decryption result;

[0015] The audit decision module is used to generate an audit decision based on preset audit rules and verified audit opinions, and the audit decision does not include audit opinions with privacy attributes as privacy.

[0016] In a third aspect, the present application provides an electronic device, comprising: a processor, and a memory communicatively connected to the processor;

[0017] The memory stores computer-executable instructions;

[0018] The processor executes the computer-executable instructions stored in the memory to implement the blockchain audit method as described in any one of the first aspects.

[0019] In a fourth aspect, the present application provides a computer-readable storage medium, comprising: the computer-readable storage medium stores computer execution instructions, and the computer execution instructions, when executed by a processor, are used to implement the blockchain audit method as described in any one of the first aspects.

[0020] In a fifth aspect, the present application provides a computer program product, including a computer program, which, when executed by a processor, implements the blockchain audit method as described in any one of the first aspects.

[0021] The blockchain audit method, device, equipment, storage medium and program product provided by the present application can determine the privacy attribute according to the privacy identifier in the audit information by receiving the audit information sent by the audit terminal, and can directly store the audit opinions with non-privacy attributes, and can encrypt and store the audit opinions with privacy attributes. It can also decrypt the digital signature in the audit information to verify the audit opinion, and then generate an audit decision based on the verified audit opinion. By adding a privacy identifier, it is possible to control whether the audit opinion will be made public, thereby ensuring the privacy and security of relevant information during the audit process and improving the participation of the audit subject in the audit matter. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0023] Figure 1 A schematic diagram of an application scenario provided for an embodiment of the present application;

[0024] Figure 2 A flowchart of a blockchain audit method provided in an embodiment of the present application;

[0025] Figure 3 A schematic diagram of a process for verifying an audit opinion provided in an embodiment of the present application;

[0026] Figure 4 A schematic diagram of an interactive process of blockchain auditing provided in an embodiment of the present application;

[0027] Figure 5 A schematic diagram of a process for verifying and reviewing a decision provided in an embodiment of the present application;

[0028] Figure 6 A schematic diagram of the structure of a blockchain audit device provided in an embodiment of the present application;

[0029] Figure 7 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0030] The above drawings have shown clear embodiments of the present application, which will be described in more detail later. These drawings and text descriptions are not intended to limit the scope of the present application in any way, but to illustrate the concept of the present application to those skilled in the art by referring to specific embodiments. DETAILED DESCRIPTION

[0031] Exemplary embodiments will be described in detail herein, examples of which are shown in the accompanying drawings. When the following description refers to the drawings, the same numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the following exemplary embodiments do not represent all implementations consistent with the present application. Instead, they are merely examples of devices and methods consistent with some aspects of the present application as detailed in the appended claims.

[0032] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, stored data, displayed data, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, storage, use, processing, transmission, provision, disclosure and application of the relevant data comply with the relevant laws, regulations and standards of the relevant countries and regions, take necessary confidentiality measures, do not violate public order and good morals, and provide corresponding operation entrances for users to choose to authorize or refuse.

[0033] In addition, this application involves big data analysis of user information (including but not limited to personal biometrics, identity data, consumption data, asset data, electronic terminal operation data, etc.), and the use of artificial intelligence technology for automated decision-making, and a technical solution for making decisions that have a significant impact on personal rights and interests based on the results of automated decision-making. The application provides users with corresponding operation entrances for them to choose to agree or reject the results of automated decision-making; if the user chooses to reject, the expert decision-making process will be entered.

[0034] It should be noted that the blockchain audit method, device, equipment, storage medium and program product provided in this application can be used in the blockchain field, and can also be used in any field other than blockchain. The application field of the blockchain audit method, device, equipment, storage medium and program product in this application is not limited.

[0035] In this application, it should be understood that the terms involved have the following meanings:

[0036] Blockchain: Blockchain is a distributed database accounting system that encrypts and hashes data and data operation records through cryptographic methods, thereby forming an open, transparent, tamper-proof, and traceable technology. This technology can be widely used in payment and settlement, evidence storage and collection, value transfer, supply chain finance, user credit, regulatory auditing, etc. Blockchain records all transaction records since the genesis block. When the block size reaches a certain level, historical transaction records will not be tampered with.

[0037] Smart Contract: A smart contract is a computer protocol designed to communicate, verify or execute contracts in an information-based manner. Smart contracts have the advantages of decentralization, verifiability, security and transparency. It allows for trusted transactions without a third party, which are traceable and irreversible. The purpose of smart contracts is to provide a security method that is superior to traditional contracts and reduce other transaction costs associated with contracts.

[0038] At present, information can be exchanged through blockchain to review matters. The open, transparent and tamper-proof characteristics of blockchain can ensure fair and reasonable review. In particular, some matters involving multiple review subjects need to adopt the opinions of all parties. These review subjects may be individuals or departments, and different subjects may belong to different systems. A more fair and recognized medium is needed to integrate these review subjects together. Blockchain can serve as this medium to integrate all parties.

[0039] However, although blockchain can provide an audit platform for multi-party participation to summarize the audit opinions of all parties and output the audit results, the identity and authority of the audit subject and other information will also be made public through blockchain records, and the privacy and security of the information are poor. In addition, the audit subject is not sure whether his or her audit opinion on a certain matter will be recorded in the audit process and participate in the generation of audit results. The audit subject may not participate in the audit very much due to concerns about the privacy of his or her own information.

[0040] Figure 1 A schematic diagram of an application scenario provided by an embodiment of the present application. Figure 1 As shown, the blockchain can include several nodes such as A1, A2, A3, ..., An, etc. The nodes can be controlled by the audit subject through terminal devices such as mobile phones or computers. The blockchain server can receive the audit opinions issued by the audit subject through these terminal devices and make audit decisions accordingly. However, for some complex matters, the audit subjects involved may belong to different departments or even different institutions. The audit of some matters needs to comprehensively determine the audit results based on the identity or authority of the audit subject, so that the audit subject needs to attach its own identity or authority information when giving the audit opinion. The audit decision of some matters will also quote the audit opinion given by the audit subject, so that some audit opinions will be written into the audit decision and made public together, resulting in some audit subjects not participating in the audit because they do not want to be disclosed. Therefore, it is very necessary for the blockchain-based audit method to improve the privacy and security of information during the audit process.

[0041] After research, the inventor found that the key point of the above problem is that it is uncontrollable whether the audit opinion of the audit subject is disclosed. The audit subject cannot determine its own identity and whether the audit opinion will be recorded in the audit decision for disclosure. Based on this, the inventor proposed a technical concept to solve the problem of uncontrollable disclosure of audit opinions. The concept specifically includes: the audit subject attaches a privacy mark when sending the audit opinion through the terminal. The privacy mark can represent the privacy attribute determined by the audit subject. If the privacy attribute is privacy, the blockchain server can encrypt the use of the audit opinion, thereby ensuring the privacy of the audit opinion. In this way, the audit subject can independently control the use of the audit opinion, ensure the privacy and security of information, and increase the participation of the audit subject in the audit matters.

[0042] The blockchain audit method, device, equipment, storage medium and program product provided in this application are intended to solve the above technical problems of the prior art.

[0043] The technical solution of the present application and how the technical solution of the present application solves the above-mentioned technical problems are described in detail below with specific embodiments. The following specific embodiments can be combined with each other, and the same or similar concepts or processes may not be repeated in some embodiments. The embodiments of the present application will be described below in conjunction with the accompanying drawings.

[0044] Figure 2 A flowchart of a blockchain audit method provided in an embodiment of the present application. Figure 2 As shown, the method includes:

[0045] Step S201: receiving audit information for the request to be audited sent by the audit terminal.

[0046] The audit information includes audit opinions, privacy identifiers and digital signatures. The audit terminal can be a terminal device such as a mobile phone or computer used by the audit subject to interact with the blockchain.

[0047] The blockchain audit method provided in the embodiment of the present application can be applied to blockchain. The application scenarios can refer to Figure 1 , there may also be other possible application scenarios. The embodiments of the present application do not limit the specific application scenarios of the blockchain audit method.

[0048] Step S202, determining the privacy attribute of the audit information according to the privacy identifier, if the privacy attribute is non-privacy, storing the audit opinion in the database, if the privacy attribute is privacy, encrypting the audit opinion and storing it in the database.

[0049] Specifically, the blockchain server can identify the privacy identifier carried in the audit information, and determine whether the audit information sent by the audit terminal is private or non-private based on the privacy identifier. If it is private, the audit opinion is encrypted and entered into the database. If it is non-private, the audit opinion is directly entered into the database. Exemplarily, the database can accept inquiries from audit-related parties, and the data entry process leaves traces. For example, the initiator of the matter or the audit subject of the matter can access the database to query the audit opinions stored therein, ensuring that the audit is open, transparent and traceable.

[0050] Step S203, decrypt the digital signature corresponding to the stored audit opinion, and verify the audit opinion based on the decryption result.

[0051] Among them, the digital signature is generated by the audit terminal using the digital identity private key.

[0052] Exemplarily, the authenticity of the audit opinion can be verified based on the digital signature attached to the audit information. For example, a digital identity private key can be issued in advance to the audit subject with the authority to audit the matter. The audit subject can use the audit terminal to generate a summary of the pre-defined information and use the digital identity private key to encrypt the summary to obtain a digital signature. The blockchain server uses the public key corresponding to the digital identity private key to decrypt the digital signature. If the decryption result (summary) is consistent with the specified information, the verification is passed, the audit opinion is authentic, and can be used in the subsequent audit process.

[0053] In the above example, the pre-defined information may be information related to the audit item itself. For example, if a specific item in the audit item requires the adoption of the opinion of a certain audit subject, the information of the specific item may be sent to the audit subject in plain text, and the audit subject generates a summary for the information and encrypts it with a digital identity private key to obtain a digital signature.

[0054] Step S204, generating an audit decision based on preset audit rules and verified audit opinions.

[0055] Among them, the review decision does not include review opinions whose privacy attributes are private.

[0056] Exemplarily, the audit rule generates an audit decision based on the number of audit opinions, and can identify each verified audit opinion as a positive audit opinion or a negative audit opinion. If the proportion of the number of positive audit opinions to the total number of all verified audit opinions reaches a preset standard, an audit approval decision can be generated.

[0057] The blockchain audit method provided in this embodiment can receive the audit information sent by the audit terminal and determine the privacy attribute according to the privacy identifier in the audit information. The audit opinions with non-privacy attributes can be directly stored, and the audit opinions with privacy attributes can be encrypted and stored. The digital signature in the audit information can also be decrypted to verify the audit opinion, and then the audit decision is generated according to the verified audit opinion. By adding a privacy identifier, it is possible to control whether the audit opinion will be made public, thereby ensuring the privacy and security of relevant information during the audit process and improving the participation of the audit subject in the audit matter.

[0058] In one embodiment, the digital signature is generated by the audit terminal using the digital identity private key, such as Figure 3 As shown, the digital signature corresponding to the stored audit opinion is decrypted, and the audit opinion is verified based on the decryption result, including:

[0059] Step S301, in response to confirming that the audit opinion stored in the database meets the preset condition, read the audit opinion stored in the database.

[0060] The preset conditions may be quantity conditions, time conditions or other custom set conditions.

[0061] For matters that require comprehensive decisions based on the audit opinions of multiple audit subjects, the corresponding conditions can be pre-set according to the audit rules, and the audit opinions can be read to start the subsequent audit process after the available audit opinions received by the blockchain server meet the conditions. For example, if the audit rule of a certain matter requires the audit opinions given by at least 10 audit subjects with audit authority to make a final decision, the number of audit opinions can be set according to the rule.

[0062] Taking the preset condition as a quantity condition as an example, in response to confirming that the audit opinions stored in the database meet the preset conditions, reading the audit opinions stored in the database can include: monitoring the number of audit opinions stored in the database, and if the number of audit opinions is greater than or equal to a preset threshold, reading the audit opinions from the database.

[0063] Taking the preset condition as a time condition as an example, in response to confirming that the audit opinion stored in the database meets the preset condition, reading the audit opinion stored in the database can include: recording the storage time of storing the audit opinion in the database, and if the storage time meets the preset time condition, reading the audit opinion from the database.

[0064] The time condition may be related to the first stored audit opinion or the last stored audit opinion.

[0065] For example, the time when the first audit opinion is stored in the database can be recorded, and the time condition is considered to be met after 7 days from that time, and the audit opinions are read from the database after 7 days. For another example, for the time when each audit opinion is stored in the database, when a certain audit opinion is stored in the database, if no new audit opinion is stored in the database within 24 hours, the time condition is considered to be met and the collection of audit opinions stops.

[0066] By pre-setting conditions such as quantity conditions or time conditions, the audit rules for matters can be controlled, and decisions can be made after the blockchain server receives sufficient audit opinions for decision-making, thereby ensuring the fairness of the audit and improving the efficiency of the audit.

[0067] Step S302, decrypting the digital signature corresponding to the audit opinion read using a preset digital identity public key to obtain decrypted information.

[0068] Step S303, confirm whether the decrypted information is consistent with the audit information, if they are consistent, it is determined that the audit opinion has passed the verification.

[0069] For example, a digital identity private key can be issued in advance to an audit subject with the authority to audit matters, and the public key corresponding to the digital identity private key can be sent to the blockchain server. After generating audit information such as audit opinions and privacy identifiers, the audit subject can generate a summary of the audit information and encrypt the summary using the digital identity private key to obtain a digital signature. The blockchain server uses the public key to decrypt the digital signature. If the decrypted information is consistent with the audit information, the verification is passed, and the audit opinion can be deemed to be authentic.

[0070] In the above embodiment, the pre-set conditions can enable the blockchain server to control the decision-making timing according to the audit opinions accumulated in the database, thereby enhancing the flexibility of the audit mechanism. In addition, the digital signature of the audit terminal can be verified by the digital identity public key to ensure the authenticity of the audit opinion.

[0071] Figure 4 A schematic diagram of the interactive process of blockchain auditing provided in the embodiment of this application. Figure 4 As shown in the figure, the audit participants can be the audit subjects who give audit opinions on the matters. The audit subjects can send audit information such as audit opinions and privacy attributes to the blockchain nodes. The blockchain nodes can aggregate the audit opinions of multiple audit subjects for processing, obtain the audit decision as the audit result and send it to each audit subject. The audit result may include the audit decision generated based on the audit opinion and other relevant information.

[0072] Optionally, the audit subject can also use its own digital identity private key to generate a digital signature and attach it to the audit information. The blockchain node can use the digital identity public key to decrypt the digital signature in the audit information to verify the authenticity of the audit opinion.

[0073] Optionally, after the blockchain node generates the audit result based on the audit opinion, it can send the audit result to the audit participants. The audit participants can request the blockchain node to verify the validity of the audit result. The blockchain node can use zero-knowledge proof to verify the validity of the audit decision.

[0074] In one embodiment, the audit information also includes identity information of the audit terminal. The blockchain audit method may further include: if the privacy attribute of the audit information is privacy, encrypting the identity information corresponding to the audit information by a preset encryption method.

[0075] Among them, the preset encryption method may include at least one of homomorphic encryption, asymmetric encryption and blind signature encryption.

[0076] Alternatively, if Figure 4As shown, the identity information of the audit subject can also be attached to the audit information. Before the blockchain node processes the audit opinion, the identity information in the audit information can be verified through the smart contract. After the identity authentication is passed, the corresponding audit opinion and other information are sent to the blockchain node for processing. The blockchain node can encrypt the identity information before processing the audit opinion.

[0077] In some audit scenarios, different audit opinions need to be handled differently according to the identity of the audit subject. For example, the audit opinions given by some audit subjects that are closely related to the audit matters need to be given special consideration, which requires the audit subject to attach identity information to the audit opinion. In the above embodiment, the identity information attached by the audit subject can also be encrypted through the privacy attribute, thereby avoiding the disclosure of the identity of the audit subject and ensuring privacy security.

[0078] In one embodiment, Figure 5 As shown, the method may also include:

[0079] Step S501, sending the review decision to the participant terminal.

[0080] Among them, the request for review is initiated by the participant terminal.

[0081] Exemplarily, the blockchain server can send the audit decision to the initiator of the request to be audited and the audit subject and other participants, and the initiator can use the terminal to request the blockchain server to verify the validity of the audit decision.

[0082] Step S502, in response to receiving a verification request from a participant terminal, verifying the validity of the audit decision based on a zero-knowledge proof algorithm.

[0083] Among them, zero-knowledge proof means that the prover can convince the verifier that a certain statement is correct without providing any useful information to the verifier.

[0084] Exemplarily, the zero-knowledge proof protocol adopted by the initiator and the blockchain server can be pre-specified. The blockchain server, as the prover, uses the algorithm provided by the protocol to calculate a random value and receives the challenge value of the initiator. The initiator can determine the validity of the audit decision based on the blockchain server's response to the challenge value.

[0085] In some possible implementations, the validity of the audit decision is verified based on a zero-knowledge proof algorithm, including: receiving a verification request for the audit decision from a participant terminal; determining a base point and a random point based on a preset elliptic curve, the base point being obtained based on audit information mapping; calculating a target random value based on the base point and the random point and sending it to the participant terminal; receiving a random challenge value sent by the participant terminal, the random challenge value is generated by the participant terminal based on the target random value; calculating a target response value based on the random challenge value and the random point, the target response value being used to determine the validity of the audit decision under the operation of the participant terminal.

[0086] Exemplarily, first, the blockchain server can generate a random number d as a private key, and select a base point G in the elliptic curve (map the audit opinion or identity information to G), and calculate the public key Q = d*G; the blockchain server can also select a random point R according to the elliptic curve, calculate the target random value R' = R*G, and send it to the participant terminal. Secondly, the participant terminal can generate a random challenge value c and send it to the blockchain server. Again, in response to receiving the challenge value c, the blockchain server calculates the target response value s = c*R, and sends the target response value s to the participant terminal. Finally, the participant terminal uses the target random value R', challenge value c, base point G, audit opinion and target response value s for verification. If sG = cR', it can be determined that the audit decision is valid.

[0087] In the above embodiment, the audit participants and the blockchain server can interact through zero-knowledge proof to verify the validity of the audit decision without leaking the content of the audit decision itself, thereby strengthening the protection of privacy and allowing users to interact securely based on the blockchain.

[0088] It should be noted that, for the aforementioned method embodiments, for the sake of simplicity, they are all expressed as a series of action combinations, but those skilled in the art should be aware that the present application is not limited by the described order of actions, because according to the present application, certain steps can be performed in other orders or simultaneously. Secondly, those skilled in the art should also be aware that the embodiments described in the specification are all optional embodiments, and the actions and modules involved are not necessarily required by the present application.

[0089] It should be further noted that, although the various steps in the flowchart are displayed in sequence according to the indication of the arrows, these steps are not necessarily executed in sequence in the order indicated by the arrows. Unless there is a clear description in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least a portion of the steps in the flowchart may include multiple sub-steps or multiple stages, and these sub-steps or stages are not necessarily executed at the same time, but can be executed at different times, and the execution order of these sub-steps or stages is not necessarily to be carried out in sequence, but can be executed in turn or alternately with other steps or at least a portion of the sub-steps or stages of other steps.

[0090] Figure 6 A schematic diagram of the structure of a blockchain audit device provided in an embodiment of the present application is shown in FIG. Figure 6 As shown, the blockchain audit device 600 includes:

[0091] The receiving module 601 is used to receive the audit information for the request to be audited sent by the audit terminal, and the audit information includes the audit opinion, privacy mark and digital signature.

[0092] The privacy processing module 602 is used to determine the privacy attribute of the audit information according to the privacy identifier. If the privacy attribute is non-privacy, the audit opinion is stored in the database; if the privacy attribute is privacy, the audit opinion is encrypted and stored in the database.

[0093] The signature verification module 603 is used to decrypt the digital signature corresponding to the stored audit opinion and verify the audit opinion according to the decryption result.

[0094] The audit decision module 604 is used to generate an audit decision based on preset audit rules and verified audit opinions, and the audit decision does not include audit opinions with privacy attributes as privacy.

[0095] In one embodiment, the signature verification module 603 can also be used to: in response to confirming that the audit opinion stored in the database meets preset conditions, read the audit opinion stored in the database; decrypt the digital signature corresponding to the read audit opinion by using a preset digital identity public key to obtain decrypted information; confirm whether the decrypted information is consistent with the audit information, and if so, determine that the audit opinion has passed the verification.

[0096] In one embodiment, the signature verification module 603 may also be used to: monitor the number of audit opinions stored in the database, and if the number of audit opinions is greater than or equal to a preset threshold, read the audit opinions from the database.

[0097] In one embodiment, the signature verification module 603 may also be used to: record the storage time of storing the audit opinion in the database, and if the storage time meets a preset time condition, read the audit opinion from the database.

[0098] In one embodiment, the blockchain audit device 600 may also include a decision verification module, which can be used to: send the audit decision to the participant terminal, and the request to be audited is initiated by the participant terminal; in response to receiving the verification request from the participant terminal, verify the validity of the audit decision based on a zero-knowledge proof algorithm.

[0099] In one embodiment, the decision verification module can also be used to: receive a verification request from the participant terminal regarding the audit decision; determine a base point and a random point based on a preset elliptic curve, wherein the base point is obtained based on the audit information mapping; calculate a target random value based on the base point and the random point and send it to the participant terminal; receive a random challenge value sent by the participant terminal, wherein the random challenge value is generated by the participant terminal based on the target random value; calculate a target response value based on the random challenge value and the random point, wherein the target response value is used to determine the validity of the audit decision under the operation of the participant terminal.

[0100] In one embodiment, the privacy processing module 602 may also be used to: if the privacy attribute of the audit information is privacy, encrypt the identity information corresponding to the audit information by a preset encryption method.

[0101] The blockchain audit device provided in this embodiment is used to execute the technical solution in any of the aforementioned method embodiments. Its implementation principle and technical effects are similar and will not be repeated here.

[0102] It should be understood that the above-mentioned device embodiments are only illustrative, and the device of the present application can also be implemented in other ways. For example, the division of units / modules in the above-mentioned embodiments is only a logical function division, and there may be other division methods in actual implementation. For example, multiple units, modules or components can be combined, or can be integrated into another system, or some features can be ignored or not executed.

[0103] In addition, unless otherwise specified, each functional unit / module in each embodiment of the present application may be integrated into one unit / module, each unit / module may exist physically separately, or two or more units / modules may be integrated together. The above-mentioned integrated unit / module may be implemented in the form of hardware or in the form of a software program module.

[0104] Figure 7This is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. Figure 7 As shown, the electronic device 70 includes:

[0105] Processor 71, memory 72, and communication interface 73;

[0106] The memory 72 is used to store executable instructions of the processor 71; the executable instructions may be computer-executable instructions;

[0107] The processor 71 is configured to execute the technical solution in any of the aforementioned method embodiments by executing the executable instructions.

[0108] Optionally, the memory 72 can be independent or integrated with the processor 71.

[0109] Optionally, when the memory 72 is a device independent of the processor 71, the electronic device 70 may further include:

[0110] The bus 74 , the memory 72 and the communication interface 73 are connected to the processor 71 via the bus 74 and communicate with each other. The communication interface 73 is used to communicate with other devices.

[0111] Optionally, the communication interface 73 may be implemented by a transceiver. The communication interface is used to implement communication between the database access device and other devices (such as a client, a read-write library, and a read-only library). The memory may include a random access memory (RAM) and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage.

[0112] The bus 74 may be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0113] The above-mentioned processor can be a general-purpose processor, including a central processing unit CPU, a network processor (NP), etc.; it can also be a digital signal processor DSP, an application-specific integrated circuit ASIC, a field programmable gate array FPGA or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0114] The electronic device is used to execute the technical solution in any of the aforementioned method embodiments, and its implementation principle and technical effect are similar and will not be repeated here.

[0115] An embodiment of the present application also provides a readable storage medium, which may be a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the technical solution provided by any of the aforementioned method embodiments is implemented.

[0116] An embodiment of the present application also provides a computer program product, including a computer program, which is used to implement the technical solution provided by any of the aforementioned method embodiments when executed by a processor.

[0117] If the integrated unit / module is implemented in the form of a software program module and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art or all or part of the technical solution, can be embodied in the form of a software product, which is stored in a memory and includes several instructions for a computer device (which can be a personal computer, a server or a network device, etc.) to perform all or part of the steps of the various embodiments of the present application. The aforementioned memory includes: U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, disk or optical disk and other media that can store program codes.

[0118] In the above embodiments, the description of each embodiment has its own emphasis. For the part not described in detail in a certain embodiment, please refer to the relevant description of other embodiments. The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0119] Those skilled in the art will readily appreciate other embodiments of the present application after considering the specification and practicing the invention disclosed herein. The present application is intended to cover any modification, use or adaptation of the present application, which follows the general principles of the present application and includes common knowledge or customary techniques in the art that are not disclosed in the present application. The specification and examples are intended to be exemplary only, and the true scope and spirit of the present application are indicated by the following claims.

[0120] It should be understood that the present application is not limited to the precise structures that have been described above and shown in the drawings, and that various modifications and changes may be made without departing from the scope thereof. The scope of the present application is limited only by the appended claims.

Claims

1. A blockchain audit method, characterized in that: Applied to blockchain, the method includes: Receiving audit information for the request to be audited sent by the audit terminal, the audit information including the audit opinion, privacy mark and digital signature; Determine the privacy attribute of the audit information according to the privacy identifier, if the privacy attribute is non-privacy, store the audit opinion in the database, if the privacy attribute is privacy, encrypt the audit opinion and store it in the database; Decrypting the digital signature corresponding to the stored audit opinion and verifying the audit opinion based on the decryption result; An audit decision is generated based on preset audit rules and verified audit opinions, and the audit decision does not include audit opinions whose privacy attributes are private.

2. The method according to claim 1, characterized in that The digital signature is generated by the audit terminal using a digital identity private key, and the digital signature corresponding to the stored audit opinion is decrypted, and the audit opinion is verified according to the decryption result, including: In response to confirming that the audit opinion stored in the database meets a preset condition, reading the audit opinion stored in the database; Decrypt the digital signature corresponding to the audit opinion read using the preset digital identity public key to obtain the decrypted information; Confirm whether the decrypted information is consistent with the audit information. If they are consistent, determine that the audit opinion has passed the verification.

3. The method according to claim 2, characterized in that In response to confirming that the audit opinion stored in the database meets the preset condition, reading the audit opinion stored in the database includes: The number of audit opinions stored in the database is monitored, and if the number of audit opinions is greater than or equal to a preset threshold, the audit opinions are read from the database.

4. The method according to claim 2, characterized in that: In response to confirming that the audit opinion stored in the database meets the preset condition, reading the audit opinion stored in the database includes: The storage time of storing the audit opinion in the database is recorded, and if the storage time meets a preset time condition, the audit opinion is read from the database.

5. The method according to any one of claims 1 to 4, characterized in that: Also includes: Sending the review decision to a participant terminal, wherein the request to be reviewed is initiated by the participant terminal; In response to receiving a verification request from the participant terminal, the validity of the audit decision is verified based on a zero-knowledge proof algorithm.

6. The method according to claim 5, characterized in that The zero-knowledge proof algorithm-based verification of the validity of the audit decision includes: receiving a verification request from the participant terminal for the review decision; Determine a base point and a random point according to a preset elliptic curve, wherein the base point is obtained based on the audit information mapping; Calculate a target random value based on the base point and the random point and send it to the participant terminal; Receiving a random challenge value sent by the participant terminal, where the random challenge value is generated by the participant terminal according to the target random value; A target response value is calculated based on the random challenge value and the random point, and the target response value is used to determine the validity of the audit decision under the operation of the participant terminal.

7. The method according to any one of claims 1 to 4, characterized in that: The audit information also includes identity information of the audit terminal, and the method further includes: If the privacy attribute of the audit information is privacy, the identity information corresponding to the audit information is encrypted using a preset encryption method.

8. A blockchain audit device, characterized in that: Applied to blockchain, the device comprises: A receiving module, used to receive the audit information for the request to be audited sent by the audit terminal, wherein the audit information includes the audit opinion, the privacy mark and the digital signature; A privacy processing module, used to determine the privacy attribute of the audit information according to the privacy identifier, and if the privacy attribute is non-privacy, store the audit opinion in a database; if the privacy attribute is privacy, encrypt the audit opinion and store it in the database; A signature verification module, used to decrypt the digital signature corresponding to the stored audit opinion and verify the audit opinion based on the decryption result; The audit decision module is used to generate an audit decision based on preset audit rules and verified audit opinions, and the audit decision does not include audit opinions with privacy attributes as privacy.

9. An electronic device, characterized in that: include: A processor, and a memory communicatively connected to the processor; The memory stores computer-executable instructions; The processor executes the computer-executable instructions stored in the memory to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer-executable instructions, which are used to implement the method according to any one of claims 1 to 7 when executed by a processor.

11. A computer program product, characterized in that The invention comprises a computer program, which implements the method according to any one of claims 1 to 7 when being executed by a processor.

Images