Data processing method and device based on block chain wallet

Abstract

The embodiment of the invention provides a data processing method and device based on a block chain wallet, and relates to the fields of block chains, security and the like. The method comprises the following steps: when a virtual asset processing operation of a target object on a target block chain account is received, obtaining a first application interface key of the target object corresponding to an evidence storage platform, obtaining a private key information ciphertext of the target block chain account through the evidence storage platform based on the first application interface key, and sending the private key information ciphertext to the target block chain account; and decrypting the private key information ciphertext by adopting decryption information input by the target object to obtain a private key, performing authorization signature on transaction information corresponding to the virtual asset processing operation through the private key, and sending the transaction information to the target block chain network. Based on the method, the security of private key information storage is guaranteed, the difficulty of private key information storage and management can be effectively reduced, and the actual application requirements can be better met.

Description

Technical Field

[0001] The present application belongs to the field of computer technology and may involve technical fields such as blockchain and security. Specifically, the present application relates to a data processing method and device based on a blockchain wallet. Background Art

[0002] A blockchain wallet is a digital wallet based on blockchain technology that provides digital asset management functions.

[0003] When applying for a blockchain account in a blockchain wallet, a key pair will be generated. The key pair includes a public key and a private key. The public key is used to generate a blockchain account address, and the private key is used to authorize and sign transaction information on the blockchain to confirm the validity of the transaction information. Users can manage virtual assets in the blockchain through private keys.

[0004] Since the private key is a long string of numbers and letters, it is not easy for users to remember. As the only identification credential of the blockchain wallet, once it is lost or forgotten, it will cause the loss of assets in the wallet. Therefore, it is very important to ensure the safe storage of the private key. Summary of the invention

[0005] The purpose of the embodiments of the present application is to provide a data processing method and device based on a blockchain wallet that can ensure the secure storage of private keys and reduce the difficulty of storing and managing private key information. To achieve this purpose, the technical solutions provided by the embodiments of the present application are as follows:

[0006] On the one hand, an embodiment of the present application provides a data processing method based on a blockchain wallet, the method comprising:

[0007] Receive the target object's virtual asset processing operation on the target blockchain account;

[0008] In response to the virtual asset processing operation, obtaining a first application interface key of the target object corresponding to a proof storage platform, wherein the proof storage platform at least stores a ciphertext of private key information of a blockchain account of the target object;

[0009] Based on the first application interface key, sending a private key information acquisition request to the evidence storage platform, wherein the private key information acquisition request includes the first application interface key;

[0010] Receiving the private key information ciphertext of the target blockchain account sent by the evidence storage platform, wherein the private key information ciphertext is sent by the evidence storage platform when the verification result of the first application interface key is verification passed;

[0011] Receive the decryption information input by the target object, decrypt the private key information ciphertext by using the decryption information, and obtain the private key of the target blockchain account;

[0012] The transaction information corresponding to the virtual asset processing operation is authorized and signed using the private key, and the transaction information with the authorization signature is sent to the target blockchain network.

[0013] On the other hand, the embodiment of the present application also provides a data processing device based on a blockchain wallet, the device comprising:

[0014] An operation trigger module, used to receive a virtual asset processing operation of a target object on a target blockchain account;

[0015] An interface key acquisition module, configured to acquire, in response to the virtual asset processing operation, a first application interface key of the target object corresponding to the evidence storage platform, wherein the evidence storage platform at least stores the ciphertext of the private key information of the blockchain account of the target object;

[0016] A request module, configured to send a private key information acquisition request to the evidence storage platform based on the first application interface key, wherein the private key information acquisition request includes the first application interface key;

[0017] A receiving module, configured to receive the private key information ciphertext of the target blockchain account sent by the evidence storage platform, wherein the private key information ciphertext is sent by the evidence storage platform when the verification result of the first application interface key is verification passed;

[0018] A decryption module, used to receive the decryption information input by the target object, decrypt the private key information ciphertext through the decryption information, and obtain the private key of the target blockchain account;

[0019] The authorization signature module is used to authorize the transaction information corresponding to the virtual asset processing operation through the private key, and send the transaction information after the authorization signature to the target blockchain network.

[0020] Optionally, any object corresponds to at least one blockchain account of a blockchain network. For any object, the evidence storage platform stores a first mapping relationship corresponding to the object, wherein the first mapping relationship includes an object identifier of the object, account identifiers of each blockchain account of the object, and a mapping relationship between ciphertexts of private key information corresponding to each account identifier;

[0021] The private key information ciphertext is determined by the evidence storage platform in the following way:

[0022] Performing interface call authority verification according to the first application interface key in the private key information acquisition request; wherein the private key information acquisition request also includes the object identifier of the target object and the account identifier of the target blockchain account;

[0023] If the verification passes, the first mapping relationship corresponding to the target object is determined based on the object identifier of the target object, and the private key information ciphertext corresponding to the target blockchain account is determined based on the first mapping relationship and the account identifier of the target blockchain account.

[0024] Optionally, for any object, the private key information ciphertext is a private key ciphertext or a mnemonic ciphertext;

[0025] The decryption module can be used to:

[0026] When the private key information ciphertext is a private key ciphertext, the private key ciphertext is decrypted by using the decryption information to obtain the private key of the target blockchain account;

[0027] When the private key information ciphertext is a mnemonic ciphertext, the mnemonic ciphertext is decrypted by using the decryption information to obtain the mnemonic of the target blockchain account; and based on the mnemonic, the private key of the target blockchain account is obtained.

[0028] Optionally, the private key information ciphertext is generated in the following manner:

[0029] In response to an account creation operation of the target object on a target blockchain account, obtaining private key information corresponding to the target blockchain account; the private key information includes a private key or a mnemonic phrase;

[0030] receiving encryption information for the private key information input by the target object, and encrypting the private key information according to the encryption information to generate a ciphertext of the private key information;

[0031] The private key information ciphertext is stored in the evidence storage platform in the following manner:

[0032] In response to a private key information storage trigger operation initiated by the target object for the evidence storage platform, obtaining a second application interface key of the target object corresponding to the evidence storage platform;

[0033] Based on the second application interface key, a private key information ciphertext storage request is sent to the evidence storage platform, so that the private key information ciphertext is stored in the evidence storage platform if the verification result of the second application interface key by the evidence storage platform is passed; wherein the private key information ciphertext storage request carries the second application interface key and the private key information ciphertext.

[0034] Optionally, the interface key acquisition module may be used to:

[0035] Reading the first application interface key of the target object corresponding to the evidence storage platform from the local storage; the first application interface key is obtained by the target object from the evidence storage platform and stored locally;

[0036] The verification result of the first application interface key is determined by the evidence storage platform in the following manner:

[0037] If the first application interface key belongs to an application interface key set, the creation duration of the first application interface key is determined; if the creation duration is not greater than the preset validity duration, it is determined that the first application interface key verification is passed; wherein the application interface key set is a set of at least one application interface key pre-generated by the target object corresponding to the evidence storage platform;

[0038] If the creation duration is greater than the preset validity duration, or the first application interface key does not belong to the application interface key set, it is determined that the first application interface key verification has failed.

[0039] Optionally, the data processing device further includes a key updating module, and the key updating module can be used to:

[0040] If a verification failure prompt message of the first application interface key is received, in response to the key update operation of the target object, a key acquisition request is sent to the evidence storage platform, wherein the key acquisition request includes the identity authentication information of the target object;

[0041] Using the third application interface key to update the locally stored first application interface key;

[0042] The interface key acquisition module is also used for:

[0043] Receive a third application interface key corresponding to the target object sent by the evidence storage platform, where the third application interface key is sent by the evidence storage platform when the identity authentication information is verified;

[0044] The request module is also used to:

[0045] Based on the third application interface key, resending a request for obtaining the private key information of the target blockchain account to the evidence storage platform;

[0046] Optionally, the verification failure prompt information is the first prompt information or the second prompt information, the first prompt information is used to prompt that the first application interface key is invalid, and the second prompt information is used to prompt that the first application interface key is wrong;

[0047] The key update module can be used to:

[0048] In the case where the verification failure prompt information is the first prompt information, in response to the key update operation of the target object, a key acquisition request is sent to the evidence storage platform,

[0049] The key update module is also used for:

[0050] When the verification failure prompt information is the second prompt information, prompting the target object to enter the private key of the target blockchain account;

[0051] The authorization signature module is also used for:

[0052] Based on the private key of the target blockchain account input by the target object, an authorization signature is performed on the transaction information corresponding to the virtual asset processing operation.

[0053] An embodiment of the present application further provides an electronic device, which includes a memory and a processor, wherein a computer program is stored in the memory, and the processor executes the computer program to implement a method provided in any optional embodiment of the present application.

[0054] On the other hand, an embodiment of the present application further provides a computer-readable storage medium, in which a computer program is stored. When the computer program is executed by a processor, the method provided in any optional embodiment of the present application is implemented.

[0055] On the other hand, an embodiment of the present application further provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, it implements the method provided in any optional embodiment of the present application.

[0056] The beneficial effects of the technical solution provided by the embodiment of the present application are as follows:

[0057] The data processing method based on blockchain wallet provided in the embodiment of the present application, when processing virtual assets, obtains the private key information ciphertext from the evidence storage platform based on the user's application interface key corresponding to the evidence storage platform, and uses the decrypted private key to authorize the signature of the transaction information. Based on the solution provided in the embodiment of the present application, there is no need for the user to manually input the private key, which reduces the difficulty of storing and managing the private key, ensures the security of the private key storage, and better meets the actual application needs. BRIEF DESCRIPTION OF THE DRAWINGS

[0058] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in describing the embodiments of the present application.

[0059] Figure 1 A schematic diagram of the structure of the blockchain network provided in the embodiment of the present application;

[0060] Figure 2A flowchart of a data processing method based on a blockchain wallet provided in an embodiment of the present application;

[0061] Figure 3 A schematic diagram of the architecture of a blockchain wallet provided in an embodiment of the present application;

[0062] Figure 4 A schematic diagram of a process for storing private key ciphertext provided in an embodiment of the present application;

[0063] Figure 5 A schematic diagram of a process for obtaining a private key provided in an embodiment of the present application;

[0064] Figure 6 A schematic diagram of the structure of a data processing system provided in an embodiment of the present application;

[0065] Figure 7 A schematic diagram of the structure of a data processing device based on a blockchain wallet provided in an embodiment of the present application;

[0066] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0067] The embodiments of the present application are described below in conjunction with the drawings in the present application. It should be understood that the implementation methods described below in conjunction with the drawings are exemplary descriptions for explaining the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions of the embodiments of the present application.

[0068] It will be understood by those skilled in the art that, unless specifically stated, the singular forms "one", "said", and "the" used herein may also include plural forms. It should be further understood that the terms "including" and "comprising" used in the embodiments of the present application refer to that the corresponding features can be implemented as the presented features, information, data, steps, operations, elements and / or components, but do not exclude the implementation as other features, information, data, steps, operations, elements, components and / or combinations thereof supported by the technical field. It should be understood that when we say that an element is "connected" or "coupled" to another element, the one element may be directly connected or coupled to the other element, or it may refer to that the one element and the other element establish a connection relationship through an intermediate element. In addition, the "connection" or "coupling" used herein may include wireless connection or wireless coupling. The term "and / or" used herein indicates at least one of the items defined by the term, for example, "A and / or B" may be implemented as "A", or as "B", or as "A and B". When describing multiple (two or more) items, if the relationship between the multiple items is not clearly defined, the multiple items may refer to one, multiple or all of the multiple items. For example, the description of "parameter A includes A1, A2, A3" can be implemented as parameter A including A1 or A2 or A3, and can also be implemented as parameter A including at least two of the three items A1, A2, A3.

[0069] The embodiment of the present application provides a data processing method and device based on a blockchain wallet. The method stores the encrypted private key information ciphertext of the blockchain account in a trusted third-party evidence storage platform. When virtual assets are processed through the blockchain wallet, the private key information ciphertext is obtained from the evidence storage platform based on the application interface key of the target object on the evidence storage platform, and the decrypted private key is used to authorize the signature of the transaction information. There is no need for the user to manually enter the private key, which reduces the difficulty of storing and managing the private key, ensures the security of the private key storage, and better meets the actual application needs.

[0070] Among them, the method provided in the embodiment of the present application may involve blockchain technology (Blockchain). Blockchain is a new application mode of computer technology such as distributed data storage, point-to-point transmission, consensus mechanism, encryption algorithm, etc., with the characteristics of decentralization, tamper-proof, traceability, etc. Blockchain is essentially a decentralized database, a string of data blocks generated by cryptographic methods, each of which contains a batch of network transaction information, which is used to verify the validity of its information (anti-counterfeiting) and generate the next block. In the blockchain, data can no longer be stored in a centralized hardware or management agency, but is jointly maintained by blockchain nodes with equal rights and obligations. Transaction data can be transmitted to each node through the network. The node can verify the validity of the transaction and count the corresponding block into its local blockchain if the verification is passed. Once the data is verified and added to the blockchain, it can be permanently stored. The consensus algorithm and hash chain data storage can be used to achieve data non-tamperability in a timely manner, thereby ensuring the security and authenticity of the data.

[0071] For example, in Figure 1 The blockchain network 100 shown may include multiple nodes 101, and the multiple nodes 101 may be various electronic devices forming the blockchain network. Each node 101 can receive input information when performing normal work, and maintain the shared data in the blockchain network based on the received input information. In order to ensure the information intercommunication within the blockchain network, there may be an information connection between each node in the blockchain network, and information can be transmitted between nodes through the above information connection. For example, when any node in the blockchain network receives input information, other nodes in the blockchain network obtain the input information according to the consensus algorithm, and store the input information as data in the shared data, so that the data stored on all nodes in the blockchain network are consistent.

[0072] Each node in the blockchain network has a corresponding node identifier, and each node in the blockchain network can store the node identifiers of other nodes, so that the generated blocks can be broadcast to other nodes in the blockchain network according to the node identifiers of other nodes.

[0073] To trade assets in a blockchain network, you need to use a blockchain wallet. The so-called blockchain wallet is a digital wallet based on blockchain technology that provides the function of trading virtual assets, including initiating transactions (that is, sending the transaction record of the current transaction to other nodes in the blockchain system. After the other nodes successfully verify the transaction, as a response to acknowledge the validity of the transaction, the transaction record data is stored in the temporary block of the blockchain; of course, the wallet also supports querying the remaining virtual assets in the virtual asset address.

[0074] Blockchain wallets can be divided into single-chain wallets and multi-chain wallets. Single-chain wallets only support one blockchain network, while multi-chain wallets support multiple different blockchain networks. By integrating software development kits (SDKs) of multiple blockchain networks, users can operate blockchain accounts in different blockchain networks in one wallet.

[0075] Different virtual assets are often issued in different blockchain networks. For example, users can manage virtual assets in different blockchain networks through multi-chain wallets.

[0076] The data processing method based on the blockchain wallet provided in the embodiment of the present application can process data on a single-chain wallet, and store the private key of a blockchain account of a blockchain network supported by the single-chain wallet in the evidence storage platform. It can also process data on a multi-chain wallet, and store the private keys of different blockchain accounts of multiple blockchain networks supported by the multi-chain wallet in the evidence storage platform.

[0077] Optionally, the method provided in the embodiment of the present application may involve cloud technology. For example, the blockchain node in the blockchain network involved in the embodiment of the present application may be a server, and the server may be a cloud server. The data processing involved in the implementation of the scheme may be implemented based on cloud technology, and the data storage involved in the implementation may adopt cloud storage. For example, the verification process of the signed transaction information may be implemented through cloud technology, the evidence storage platform may also be a cloud storage platform, and the encrypted private key ciphertext and mnemonic ciphertext may be stored in the cloud storage platform.

[0078] Among them, cloud technology is a general term for network technology, information technology, integration technology, management platform technology, application technology, etc. based on the cloud computing business model application, which can form a resource pool and be used on demand, flexibly and conveniently. Cloud computing technology will become an important support. Cloud storage is a new concept extended and developed from the concept of cloud computing. Distributed cloud storage system (hereinafter referred to as storage system) refers to a storage system that uses cluster applications, grid technology, and distributed storage file systems to bring together a large number of different types of storage devices (storage devices are also called storage nodes) in the network through application software or application interfaces to work together and provide data storage and business access functions to the outside world.

[0079] The solution of the present application can be executed by any electronic device, such as a user terminal or a server (blockchain node, evidence storage platform), or it can be implemented by the cooperation of multiple electronic devices.

[0080] Among them, the above-mentioned server can be an independent physical server, or a server cluster or distributed system composed of multiple physical servers, or a cloud server (also called the cloud) that provides cloud computing services. The terminal (also called a user terminal or user device) can be a smart phone, a tablet computer, a laptop computer, a desktop computer, an intelligent voice interaction device (such as a smart speaker), a wearable electronic device (such as a smart watch), a car terminal, a smart home appliance (such as a smart TV), an AR / VR device, etc., but is not limited to this. The terminal and the server can be directly or indirectly connected via wired or wireless communication, and this application is not limited here.

[0081] In order to better understand and illustrate the method provided in the embodiments of the present application, some of the terms involved in the embodiments of the present application are explained below.

[0082] Blockchain node: A network node in a blockchain distributed system is an electronic device connected through a network, such as a server, user terminal, etc.

[0083] Blockchain wallet: A digital wallet based on blockchain technology used to query or trade virtual assets.

[0084] Evidence storage platform: a data storage platform that is safe and reliable.

[0085] Mnemonics: Since the private key of a blockchain account is a long, irregular string that is not easy for users to remember, an algorithm is used to convert the private key into a number of common words, namely mnemonics. Mnemonics usually consist of 8-24 words and have a certain order of arrangement.

[0086] Password: A password set by the user or automatically generated by an algorithm.

[0087] It should be noted that in the optional embodiments of the present application, the object information (such as the user's transaction information, virtual asset balance) and other related data, when the embodiments in the present application are applied to specific products or technologies, need to obtain the permission or consent of the object, and the collection, use and processing of the relevant data need to comply with the relevant laws, regulations and standards of the relevant countries and regions. In other words, if the embodiments of the present application involve data related to the object, it needs to be obtained through the authorization and consent of the object, the authorization and consent of the relevant departments, and in compliance with the relevant laws, regulations and standards of the country and region. If personal information is involved in the embodiments, the acquisition of all personal information needs to obtain the consent of the individual. If sensitive information is involved, the separate consent of the information subject needs to be obtained. The embodiments also need to be implemented with the authorization and consent of the object.

[0088] The following describes several embodiments to illustrate the technical solutions of the embodiments of the present application and the technical effects produced by the technical solutions of the present application. It should be noted that the following embodiments can refer to, draw on or combine with each other, and the same terms, similar features and similar implementation steps in different embodiments will not be described repeatedly.

[0089] Figure 2 A flowchart of a data processing method based on a blockchain wallet provided in an embodiment of the present application is shown, and the method can be executed by a user terminal.

[0090] like Figure 2 As shown, the data processing method based on the blockchain wallet provided in the embodiment of the present application may include the following steps S210 to S260.

[0091] Step S210: Receive the virtual asset processing operation of the target object on the target blockchain account.

[0092] The target object may be any user who uses a blockchain wallet to manage virtual assets. When the blockchain wallet is a single-chain wallet, the target blockchain account is the blockchain account of the blockchain network corresponding to the single-chain wallet. When the blockchain wallet is a multi-chain wallet, the target blockchain account may be the blockchain account corresponding to any blockchain network in the blockchain wallet. The virtual asset processing operation may be an asset transfer operation (transfer operation).

[0093] When the user terminal executes the data processing method provided in the embodiment of the present application, a blockchain wallet application software (Application, APP) is installed on the user terminal, and the target object can perform virtual asset processing operations through the blockchain wallet APP (for the convenience of description, the blockchain wallet will be used in the following description).

[0094] When the target object uses a blockchain wallet, it can create a wallet account of the target object and log in to the wallet through the created wallet account. The wallet account is different from the blockchain account. The wallet account can be created based on information such as a mobile phone number and an email address. After the target object logs in to the wallet, the target object can create a blockchain account corresponding to each blockchain network. Of course, if the target object has blockchain accounts under each blockchain network, it can also directly import virtual assets under different blockchain networks.

[0095] The target object can create a blockchain account under any blockchain network in the blockchain wallet. Taking the creation of the target blockchain account as an example, the user terminal responds to the target object's account creation operation for the target blockchain account, and creates a set of key pairs corresponding to the target blockchain network according to the key system corresponding to the target blockchain network. The key pair includes a public key and a private key, wherein the private key is a complex string composed of data and letters, which is used to sign and verify the transaction information. The public key is generated by the private key and can be publicly displayed to calculate the blockchain account address under the target blockchain network. Among them, the key system (encryption algorithm) corresponding to different blockchain networks may be different. The key system corresponding to different blockchain networks can be an asymmetric encryption algorithm, such as the SHA-256 algorithm (Secure Hash Algorithm 256 bit), the encryption algorithm ElGamal algorithm based on Diffie-Hellman key exchange, the elliptic curve cryptography (Elliptic curvecryptography, ECC), and the like.

[0096] Optionally, when the target object creates a wallet account, several common public blockchain blockchain accounts can be created in the blockchain wallet by default. That is, according to the key system algorithm (encryption algorithm) corresponding to different public blockchains, a key pair corresponding to each public blockchain is created. When the target object adds a new token asset to the blockchain wallet, a corresponding set of key pairs can be generated based on the key system of the blockchain network corresponding to the added new token asset.

[0097] For example, Figure 3 As shown, Figure 3 The blockchain wallet in is a multi-chain wallet that supports blockchain network X, blockchain network Y, and blockchain network Z. The blockchain wallet integrates the SDK of blockchain network X, the SDK of blockchain network Y, and the SDK of blockchain network Z. Users can create blockchain accounts corresponding to blockchain network X, blockchain network Y, and blockchain network Z in the blockchain wallet. The virtual asset corresponding to blockchain network X is virtual asset X, the virtual asset corresponding to blockchain network Y is virtual asset Y, and the virtual asset corresponding to blockchain network Z is virtual asset Z.

[0098] When a user creates an account X corresponding to blockchain network X, the corresponding public key and private key can be generated based on the encryption algorithm corresponding to blockchain network X. The user can query virtual asset X or trade virtual asset X from blockchain network X through the SDK of blockchain network X integrated in the blockchain wallet.

[0099] When a user creates an account Y corresponding to blockchain network Y, the corresponding public key and private key can be generated based on the encryption algorithm corresponding to blockchain network Y. The user can query virtual asset Y or trade virtual asset Y on blockchain network Y through the SDK of blockchain network Y integrated in the blockchain wallet.

[0100] When a user creates an account Z corresponding to blockchain network Z, the corresponding public key and private key can be generated based on the encryption algorithm corresponding to blockchain network Z. The user can query virtual assets Z or trade virtual assets Z from blockchain network Z through the SDK of blockchain network Z integrated in the blockchain wallet.

[0101] Step S220: In response to the virtual asset processing operation, obtain the first application interface key of the target object corresponding to the evidence storage platform.

[0102] The evidence storage platform can be a database based on blockchain technology or an object storage service platform (Object Storage Service, OSS). The Application Programming Interface Key (API Key) is used to verify the interface call authority when calling the data transmission interface in the evidence storage platform.

[0103] Before obtaining the first application interface key of the target object corresponding to the evidence platform, the target object may pre-create an application interface key set including one or more application interface keys on the evidence platform, and the evidence platform may store the second mapping relationship between the target object's object identifier and the application interface key. Among them, the application interface key may be allocated by the evidence platform to the target object. Different application interface keys can be authorized to different applications. The application interface key can be long-term or short-term, such as the validity period of the application interface key is 30 minutes. The first application interface key can be selected by the target object from one or more application interface keys created, and is used to perform interface call authority verification to obtain a private key to authorize the transaction information corresponding to the virtual asset processing operation.

[0104] In an embodiment of the present application, the first application interface key of the target object corresponding to the evidence storage platform can be read from the local storage. The first application interface key is obtained by the target object from the evidence storage platform and stored locally.

[0105] If the application interface key is valid for a long time, the first application interface key stored locally can be the one obtained and stored from the evidence storage platform when uploading data (private key information ciphertext) to the evidence storage platform in the past. If the application interface key is valid for a short time, the first application interface key stored locally can be the one obtained and stored from the storage platform most recently.

[0106] Optionally, the API Key can be a piece of code generated based on specific rules when a user applies for interface call permissions. Different users have different API Keys. Whenever a request is made to call a related interface, the API Key can be carried in the authorization header, query string, or body data to authenticate the interface call permissions.

[0107] Optionally, the API Key can also include an application key APP Key and a private key Secret Key. The APP Key is used to identify which application needs to call the interface, and the Secret Key is the interface private key for calling the interface. When verifying the interface call permission based on the API Key, only when the APP Key and the Secret Key are both correct, the verification is determined to be successful and the corresponding API interface can be called. Otherwise, the verification is determined to have failed. When creating multiple API Keys, each API Key can be authorized to different applications based on the different APP Keys.

[0108] Step S230: Based on the first application interface key, a request for obtaining private key information is sent to the evidence storage platform.

[0109] Step S240: Receive the ciphertext of the private key information of the target blockchain account sent by the evidence storage platform.

[0110] In the embodiment of the present application, the evidence storage platform at least stores the ciphertext of the private key information of the blockchain account of the target object. Of course, the ciphertext of the private key information of the blockchain account of other objects may also be stored. After obtaining the first application interface key corresponding to the evidence storage platform of the target object, a private key information acquisition request may be sent to the evidence storage platform based on the first application interface key. Optionally, the first application interface key may be carried in the request header information of the private key information acquisition request.

[0111] The evidence storage platform can perform interface call permission verification based on the first application interface key, and when the verification result is passed, send the private key information ciphertext of the target blockchain account to the blockchain wallet.

[0112] When verifying the interface call permission of the first application interface key, the evidence storage platform can determine the application interface key set corresponding to the target object based on the object identifier of the target object carried in the private key information acquisition request and the second mapping relationship. After that, the first application interface key is matched with each application interface key in the application interface key set to verify the interface call permission.

[0113] Since the application interface key can be long-term or short-term, when the application interface key is long-term, if there is an application interface key matching the first application interface key in the application interface key set, that is, the first application interface key belongs to the application interface key set, then it can be determined that the verification is successful.

[0114] When the application interface key is valid for a short period of time, if the first application interface key belongs to the application interface key set, the creation duration of the first application interface key can be further determined; if the creation duration of the first application interface key is not greater than the preset validity duration, it is determined that the first application interface key verification has passed. If the creation duration of the first application interface key is greater than the preset validity duration, or the first application interface key does not belong to the application interface key set corresponding to the target object, it is determined that the first application interface key verification has failed. At this time, the evidence storage platform can return the verification failure prompt information of the first application interface key to the user terminal. Among them, the verification failure prompt information can include the first prompt information and the second prompt information.

[0115] If the first application interface key belongs to the application interface key set corresponding to the target object, but the creation duration of the first application interface key is greater than the preset validity duration, the evidence storage platform can send a first prompt message to the user terminal to prompt that the first application interface key is invalid.

[0116] The user terminal may prompt the target object to update the verification information based on the received first prompt information. In response to the key update operation of the target object, a key acquisition request is sent to the evidence storage platform, wherein the key acquisition request includes the identity authentication information of the target object. The evidence storage platform may perform identity authentication based on the identity authentication information in the key acquisition request, and after the identity authentication is passed, re-determine the third application interface key of the target object corresponding to the evidence storage platform, and send the third application interface key to the user terminal. The third application interface key may be created in real time by the target object, or may be an application interface key in a valid state determined from the application interface key set of the target object. If the third application interface key is created in real time, the third application interface key is added to the application interface key set of the target object.

[0117] After receiving the third application interface key, the user terminal can resend the private key information acquisition request of the target blockchain account to the evidence storage platform based on the third application interface key, and use the third application interface key to update the locally stored first application interface key.

[0118] Among them, the identity authentication information can be the target object's login account and password on the evidence storage platform, or it can be the target object's biometric features, such as fingerprints, faces, irises and other biometric information, or it can be the credentials for updating the application interface key sent by the evidence storage platform when sending the first application interface key.

[0119] Optionally, the key update operation may be an authorized login operation of the target object to log into the evidence storage platform, and the key acquisition request may be a login request to log into the evidence storage platform. The third application interface key may be an application interface key created in real time by the target object after successfully logging into the evidence storage platform, or may be a currently valid application interface key selected by the target object from the corresponding application interface key set, or may be a currently valid application interface key randomly determined by the evidence storage platform from the application interface key set.

[0120] If the first application interface key does not belong to the application interface key set corresponding to the target object, the evidence storage platform may send a second prompt message to the user terminal to prompt that the first application interface key is incorrect. Based on the received second prompt message, the user terminal may prompt the target object to enter the private key of the target blockchain account, and authorize the signature of the transaction information corresponding to the virtual asset processing operation based on the private key entered by the target object. The private key entered by the target object may be the one backed up and stored by the target object when creating the target blockchain account.

[0121] Optionally, when the first application interface key is API Key1, the blockchain wallet can send a private key information acquisition request to the data transmission interface corresponding to the evidence storage platform based on API Key1, and when the data transmission interface verifies that it has interface call authority based on API Key1, it calls the data transmission interface to obtain the private key information ciphertext of the target blockchain account.

[0122] In the embodiment of the present application, the user terminal can also determine the validity of the application interface key to prompt the target object to update the application interface key. Specifically, before sending a private key information acquisition request to the evidence storage platform, the user terminal can determine the creation time of the first application interface key stored locally. If the creation time is less than the preset validity time, it means that the first application interface key is valid, and step S230 can be executed.

[0123] If the creation time is not less than the preset validity time, it means that the first application interface key is invalid, and the target object can be prompted to update the application interface key. The operation of updating the application interface key has been described in detail above, and this application will not repeat it here.

[0124] Optionally, when the first application interface key becomes invalid, the target object may also manually input a third application interface key and use the third application interface key to update the locally stored first application interface key.

[0125] In the embodiment of the present application, the ciphertext of the private key information of the target blockchain account can be stored in the evidence storage platform in the following ways:

[0126] When the target object creates a target blockchain account in the blockchain wallet, in response to the target object's account creation operation, based on the secret key system of the target blockchain network, the private key information of the target blockchain account is generated, wherein the private key information may be a private key or a mnemonic. In order to ensure the security of the private key storage, the user may set encryption information to encrypt the private key information. When the blockchain wallet receives the encrypted information input by the target object, it uses the encryption information to encrypt the generated private key information to obtain the private key information ciphertext. Among them, the random number seed in the mnemonic specification algorithm BIP-39 can be calculated through the mnemonic, and then the private key can be calculated. The above algorithm for private key encryption can use a symmetric encryption algorithm, such as the Advanced Encryption Standard (AES) algorithm, the Data Encryption Standard (DES) algorithm, and the like. The encryption information set by the user may be a first password, which may be a password set by the target object alone for encrypting the private key information, or a password for logging into the wallet account. The encryption information set by the user may be the same as the decryption information, or may be different.

[0127] When uploading the private key information ciphertext to the evidence storage platform for storage, the target object needs to obtain the storage permission of the evidence storage platform. The target object can create one or more corresponding application interface keys on the evidence storage platform, and select the second application interface key for interface call permission verification when uploading the private key ciphertext from the one or more created application interface keys.

[0128] The target object can upload the second application interface key to the blockchain wallet. After obtaining the second application interface key, the blockchain wallet can send the private key information ciphertext to the evidence storage platform based on the second application interface key. The evidence storage platform performs interface call authority verification based on the second application interface key and stores the private key information ciphertext after the verification is passed.

[0129] Optionally, when uploading the second application interface key to the blockchain wallet, the target object can manually upload the second application interface key to the blockchain wallet, or after the evidence storage platform authorizes, the target object logs in to the evidence storage platform through the blockchain wallet and stores the second application interface key in the blockchain wallet. The blockchain wallet is pre-configured with the authorization function of the evidence storage platform.

[0130] Optionally, when uploading the second application interface key, the second application interface key can be preprocessed, such as packaging and compressing the second application interface key, and then uploading it to the blockchain wallet, and decompressing and storing it by the blockchain wallet.

[0131] It should be noted that when the application interface key is valid for a long time, the first application interface key is the same as the second application interface key. When the application interface key is valid for a short time, if the target object performs a virtual asset processing operation within the validity period of the second application interface key, the first application interface key is the same as the second application interface key, otherwise the first application interface key is different from the second application interface key.

[0132] Figure 4 A schematic diagram of the process of storing private key information ciphertext provided in the embodiment of the present application. When a user creates a target blockchain account in the blockchain wallet of the terminal, a corresponding public key and private key are generated based on the secret key system of the target blockchain network. The user can set a first password to encrypt the generated private key to obtain the private key information ciphertext. The user can log in to the third-party evidence storage platform, create multiple application interface keys, and select the second application interface key from them to upload to the blockchain wallet of the user terminal. The blockchain wallet can store the private key ciphertext in the evidence storage platform based on the second application interface key.

[0133] It is understandable that when the blockchain wallet is a single-chain wallet, the single-chain wallet only supports one blockchain network, namely the target blockchain network, and the evidence storage platform can store the private key information ciphertext of the blockchain accounts of multiple objects. Optionally, the evidence storage platform can store a third mapping relationship between the object identifiers and the private key information ciphertext of multiple objects, as shown in Table 1.

[0134] Object Identification Private key information ciphertext Object A Ciphertext 1 Object B Ciphertext 2 Object C Ciphertext 3

[0135] Table 1

[0136] When a private key information acquisition request is sent to the evidence storage platform to obtain the private key information of the target blockchain account of the target object, the private key information acquisition request may carry the object identifier of the target object.

[0137] When the blockchain wallet is a multi-chain wallet, the multi-chain wallet supports multiple different blockchain networks, so the evidence storage platform can store the private key information ciphertext of blockchain accounts of multiple objects in different blockchain networks. Optionally, the evidence storage platform can store the first mapping relationship between the object identifiers of different objects, the account identifiers of different blockchain accounts, and the private key information ciphertext, as shown in Table 2 below.

[0138]

[0139] Table 2

[0140] In Table 2, object A and object B have corresponding blockchain accounts in different blockchain networks respectively, and the ciphertext of the private key information of the objects in different blockchain networks can be stored in the evidence storage platform.

[0141] When sending a private key information acquisition request to the evidence storage platform to obtain the private key information of the target blockchain account of the target object, the private key information acquisition request may carry the object identifier of the target object and the account identifier of the blockchain account. The blockchain account identifier may be the blockchain account address of the object in the blockchain network.

[0142] Step S250: Receive the decryption information input by the target object, decrypt the private key information ciphertext through the decryption information, and obtain the private key of the target blockchain account.

[0143] In the embodiment of the present application, the private key information ciphertext is a private key ciphertext or a mnemonic ciphertext. If the private key information ciphertext is a private key ciphertext, the target object is prompted to enter the decryption information, and the private key information ciphertext is decrypted by the decryption information entered by the target object to obtain the private key of the target blockchain account.

[0144] If the private key information ciphertext is a mnemonic ciphertext, the mnemonic ciphertext is decrypted by the decryption information input by the target object to obtain the mnemonic of the target blockchain account, and the private key of the target blockchain account is obtained according to the mnemonic. The decryption information can be consistent with the encryption information set by the target object, which is the first password.

[0145] In an optional implementation, the random number seed in the mnemonic standard algorithm BIP-39 can be calculated based on the mnemonic of the target blockchain account, and then the private key of the target blockchain account can be calculated.

[0146] In another optional implementation, after obtaining the mnemonic of the target blockchain account, the target object may be prompted to enter a second password, and the private key of the target blockchain account may be generated based on the second password and the mnemonic. The second password set by the target object may be the same as the first password or different. Optionally, the second password may be the password for the target object to log in to the wallet account.

[0147] For example, Figure 5 A flowchart of obtaining a private key provided in an embodiment of the present application. A user can initiate an asset transfer of a target blockchain account in a blockchain wallet, and obtain a first application interface key in response to the user's transfer operation. The first application interface key is selected from multiple application interface keys created by the user in the evidence storage platform. The blockchain wallet can send a private key acquisition request to the evidence storage platform based on the first application interface key. When the evidence storage platform passes the verification, it queries the private key ciphertext corresponding to the target blockchain account of the user and sends it to the blockchain wallet. After receiving the private key ciphertext, the blockchain wallet decrypts the private key information ciphertext through the first password entered by the user to obtain the private key.

[0148] Step S260: Use the private key to authorize and sign the transaction information corresponding to the virtual asset processing operation, and send the authorized and signed transaction information to the target blockchain network.

[0149] In an embodiment of the present application, when the virtual asset processing operation is an asset transfer operation (transfer operation), the transaction information corresponding to the asset transfer operation can be authorized and signed by a private key, and the transaction information after the authorization signature can be sent to the target blockchain network to transfer the virtual asset.

[0150] Among them, after the authorization signature, the transaction information can be sent to the blockchain node in the target blockchain network through the SDK of the target blockchain network integrated in the blockchain wallet. The blockchain node performs decryption verification based on the public key of the target blockchain account, and after the verification is passed, a new block containing the transaction information is generated to realize the transaction of virtual assets. Among them, the blockchain node stores the public keys of each target blockchain account in the target blockchain network. The transaction information includes the blockchain account address of the transfer object, the target blockchain account address of the target object, and the transfer amount.

[0151] If the blockchain node fails to verify the transaction information, it will consider that the transaction information may be forged and will not add the transaction information to the new block.

[0152] In addition, to prevent the private key from being obtained or tampered with, after the blockchain wallet receives the transaction success information returned by the target blockchain network, it destroys (deletes) the private key of the target blockchain account of the target object, so that when the next virtual asset processing operation is performed, the private key can be obtained from the evidence storage platform again.

[0153] based on Figure 2 The data processing method shown in the figure stores the private key in the evidence storage platform. When an authorized signature is required, the private key is obtained from the evidence storage platform based on the application interface key corresponding to the target corresponding to the evidence storage platform, which ensures the security of private key storage, avoids asset loss caused by loss or tampering of private keys, and reduces the risk of asset loss. It better meets the actual application needs.

[0154] Moreover, by adopting the data processing method provided by the present application, users do not need to remember complex private keys, but only need to remember the first password and the login method of the evidence storage platform. When obtaining the private key, it can be obtained through the evidence storage platform and saved in the blockchain wallet, without the user having to manually enter a long and complex private key string, which reduces the difficulty of storing and managing the private key.

[0155] In the embodiment of the present application, the target object can also query virtual assets through the blockchain wallet. Since asset query operations such as balance query and transfer record query do not cause substantial changes to the virtual assets of the target object, they will not cause loss of the virtual assets of the target object. In order to save the query process and shorten the query time, when the virtual asset processing operation is an asset query operation, the target object can query the virtual asset balance under any blockchain account in the blockchain wallet after logging into the wallet account, without the need for authorization signature through the private key.

[0156] When the target object queries the virtual asset balance under the target blockchain account, in response to the asset query operation of the target object, a query request is sent to any blockchain node in the target blockchain network, and the virtual asset balance of the target blockchain account returned by the blockchain node is received.

[0157] In another embodiment of the present application, in order to further protect the privacy and security of users, the query task corresponding to the asset query operation can also be authorized by signing with a private key, and the query is verified to be executed by the target object through the public key. Therefore, when the target object queries the virtual asset balance under the target blockchain account, in response to the target object's asset query operation, the first application interface key corresponding to the evidence storage platform of the target object can be obtained, and the private key can be obtained through subsequent steps based on the first application interface key, and after the private key is used for authorization signature, it is sent to the target blockchain network for asset query.

[0158] In order to better understand and illustrate the method provided by the embodiment of the present application, the optional implementation method of the method provided by the present application is introduced below in combination with a specific embodiment. Assume that the blockchain wallet is a multi-chain wallet, the application interface key is a short-term valid API Key, and the validity period is 30 minutes. Among them, the blockchain wallet can support blockchain network X, and the SDK of blockchain network X can be integrated in the blockchain wallet APP (hereinafter referred to as blockchain wallet).

[0159] Users can log in to the evidence storage platform through the user terminal in advance and create multiple API Keys in the evidence storage platform. Among them, the API Key is assigned to the user by the evidence storage platform.

[0160] When a user creates an account X of blockchain network X through a blockchain wallet, the user terminal generates a corresponding public key and private key based on the encryption algorithm corresponding to blockchain network X in response to the user's account creation operation. After the private key is generated, the user may be prompted to encrypt the private key, and when the first password input by the user is received, the private key is encrypted using the first password to obtain the private key ciphertext.

[0161] In response to the user's private key upload operation, the user is prompted to log in to the evidence storage platform for authorization. After the user authorizes, the evidence storage platform can be logged in through the blockchain wallet, and the API Key1 selected from multiple API Keys can be stored in the blockchain wallet.

[0162] The user terminal can send the private key ciphertext to the evidence storage platform based on API Key1. After the evidence storage platform verifies based on API Key1, it calls the data transmission interface to store the private key ciphertext corresponding to the user's account X.

[0163] Assume that 20 minutes after API Key1 is created, the user transfers money through the blockchain wallet. After the user enters the account X address of the transfer user and transaction information such as the transaction resource volume, the locally stored API Key1 can be obtained in response to the user's transfer operation. At this time, a private key acquisition request can be sent to the evidence storage platform through the blockchain wallet, wherein the private key acquisition request carries API Key1, the user's object identifier and the user's account X address. The evidence storage platform can verify whether it has the interface call permission based on API Key1. Since API Key1 belongs to the API Key created by the user and the creation time of API Key1 is less than 30 minutes, that is, API Key1 is in a valid state, it can be determined that the verification is passed, and the data transmission interface of the evidence storage platform is called to obtain the private key ciphertext.

[0164] After obtaining the private key ciphertext from the evidence storage platform, the user may be prompted to enter the first password, and the private key ciphertext may be decrypted using the first password to obtain the private key. Then, the transaction information is authorized to be signed using the private key, and the transaction information after the authorization signature is sent to the blockchain node in the blockchain network X through the SDK interface of the blockchain network X integrated in the blockchain wallet, so that the blockchain node performs signature verification based on the public key of the user's account X. When a new block is generated, the transfer is considered successful. When the transfer success message returned by the blockchain network X is received, the stored private key is deleted.

[0165] Assume that one hour after API Key1 is created, a transfer is made again through the blockchain wallet. After the user enters the account address of the transfer user and transaction information such as the transaction amount, the locally stored API Key1 can be obtained in response to the user's transfer operation. At this time, a private key acquisition request can be sent to the evidence storage platform through the blockchain wallet. The evidence storage platform can verify based on API Key1. Since API Key1 is an API Key created by the user, but the creation time of API Key1 is greater than 30 minutes, that is, API Key1 is invalid, it can be determined that the verification failed, and a prompt message indicating that API Key1 is invalid is returned to the user terminal.

[0166] The target object can authorize the login to the evidence storage platform in the blockchain wallet, recreate the API Key2 corresponding to the blockchain wallet, and save the API Key2 locally in the blockchain wallet. The user terminal can resend the private key information acquisition request to the evidence storage platform based on API Key2, and the evidence storage platform can re-verify based on API Key2. After the verification is passed, the data transmission interface of the evidence storage platform is called to obtain the private key information ciphertext.

[0167] It should be noted that although the security credibility of third-party evidence storage platforms is high and the probability of private keys being tampered with is low, the evidence storage platform still has the risk of being attacked. Therefore, after users generate the private key of the corresponding blockchain account through the blockchain wallet, they can back it up to avoid asset loss due to loss of private keys.

[0168] Figure 6 A structural diagram of a data processing system provided in an embodiment of the present application, the data processing system includes a user terminal, an evidence storage platform and a target blockchain network. When the target object performs a virtual asset processing operation on the target blockchain account through the blockchain wallet in the user terminal, the user terminal can read the first application interface key of the target object corresponding to the evidence storage platform from the local storage, and based on the first application interface key, send a private key information acquisition request to the evidence storage platform, so that after the evidence storage platform verifies based on the first application interface key, the corresponding target blockchain account private key information ciphertext is sent to the user terminal. The user terminal can decrypt the received private key information ciphertext to obtain the private key, and use the private key to authorize the transaction information, and send the transaction information after the authorization signature to the target blockchain network. The target blockchain network can generate a new block and return the transaction result after verifying the transaction information after the authorization signature.

[0169] Based on the same principle as the data processing method provided in the embodiment of the present application, the embodiment of the present application provides a data processing device based on a blockchain wallet, such as Figure 7 As shown, the data processing device 300 may include an operation triggering module 310 , an interface key obtaining module 320 , a requesting module 330 , a receiving module 340 , a decryption module 350 and an authorization signature module 360 ​​.

[0170] An operation triggering module 310 is used to receive a virtual asset processing operation of a target object on a target blockchain account;

[0171] The interface key acquisition module 320 is used to obtain the first application interface key of the target object corresponding to the evidence storage platform in response to the virtual asset processing operation, wherein the evidence storage platform at least stores the private key information ciphertext of the blockchain account of the target object;

[0172] A request module 330, configured to send a private key information acquisition request to the evidence storage platform based on the first application interface key, wherein the private key information acquisition request includes the first application interface key;

[0173] The receiving module 340 is used to receive the private key information ciphertext of the target blockchain account sent by the evidence storage platform, wherein the private key information ciphertext is sent by the evidence storage platform when the verification result of the first application interface key is verification passed;

[0174] A decryption module 350 is used to receive the decryption information input by the target object, decrypt the private key information ciphertext through the decryption information, and obtain the private key of the target blockchain account;

[0175] The authorization signature module 360 ​​is used to authorize the transaction information corresponding to the virtual asset processing operation through the private key, and send the transaction information after the authorization signature to the target blockchain network.

[0176] Optionally, any object corresponds to at least one blockchain account of a blockchain network. For any object, the evidence storage platform stores a first mapping relationship corresponding to the object, wherein the first mapping relationship includes an object identifier of the object, account identifiers of each blockchain account of the object, and a mapping relationship between ciphertexts of private key information corresponding to each account identifier;

[0177] The private key information ciphertext is determined by the evidence storage platform in the following way:

[0178] Performing interface call authority verification according to the first application interface key in the private key information acquisition request; wherein the private key information acquisition request also includes the object identifier of the target object and the account identifier of the target blockchain account;

[0179] If the verification passes, the first mapping relationship corresponding to the target object is determined based on the object identifier of the target object, and the private key information ciphertext corresponding to the target blockchain account is determined based on the first mapping relationship and the account identifier of the target blockchain account.

[0180] Optionally, for any object, the private key information ciphertext is a private key ciphertext or a mnemonic ciphertext;

[0181] The decryption module 350 may be used to:

[0182] When the private key information ciphertext is a private key ciphertext, the private key ciphertext is decrypted by using the decryption information to obtain the private key of the target blockchain account;

[0183] When the private key information ciphertext is a mnemonic ciphertext, the mnemonic ciphertext is decrypted by using the decryption information to obtain the mnemonic of the target blockchain account; and based on the mnemonic, the private key of the target blockchain account is obtained.

[0184] Optionally, the private key information ciphertext is generated in the following manner:

[0185] In response to an account creation operation of the target object on a target blockchain account, obtaining private key information corresponding to the target blockchain account; the private key information includes a private key or a mnemonic phrase;

[0186] receiving encryption information for the private key information input by the target object, and encrypting the private key information according to the encryption information to generate a ciphertext of the private key information;

[0187] The private key information ciphertext is stored in the evidence storage platform in the following manner:

[0188] In response to a private key information storage trigger operation initiated by the target object for the evidence storage platform, obtaining a second application interface key of the target object corresponding to the evidence storage platform;

[0189] Based on the second application interface key, a private key information ciphertext storage request is sent to the evidence storage platform, so that the private key information ciphertext is stored in the evidence storage platform if the verification result of the second application interface key by the evidence storage platform is passed; wherein the private key information ciphertext storage request carries the second application interface key and the private key information ciphertext.

[0190] Optionally, the interface key acquisition module 320 may be used to:

[0191] Reading the first application interface key of the target object corresponding to the evidence storage platform from the local storage; the first application interface key is obtained by the target object from the evidence storage platform and stored locally;

[0192] The verification result of the first application interface key is determined by the evidence storage platform in the following manner:

[0193] If the first application interface key belongs to an application interface key set, the creation duration of the first application interface key is determined; if the creation duration is not greater than the preset validity duration, it is determined that the first application interface key verification is passed; wherein the application interface key set is a set of at least one application interface key pre-generated by the target object corresponding to the evidence storage platform;

[0194] If the creation duration is greater than the preset validity duration, or the first application interface key does not belong to the application interface key set, it is determined that the first application interface key verification has failed.

[0195] Optionally, the first application interface key is used to verify the target object's calling authority to the evidence storage platform;

[0196] The data processing device 300 further includes a key updating module 370, which can be used to:

[0197] If a verification failure prompt message of the first application interface key is received, in response to the key update operation of the target object, a key acquisition request is sent to the evidence storage platform, wherein the key acquisition request includes the identity authentication information of the target object;

[0198] Using the third application interface key to update the locally stored first application interface key;

[0199] The interface key acquisition module 320 is also used for:

[0200] Receive a third application interface key corresponding to the target object sent by the evidence storage platform, where the third application interface key is sent by the evidence storage platform when the identity authentication information is verified;

[0201] The request module is also used to:

[0202] Based on the third application interface key, resending a request for obtaining the private key information of the target blockchain account to the evidence storage platform;

[0203] Optionally, the verification failure prompt information is the first prompt information or the second prompt information, the first prompt information is used to prompt that the first application interface key is invalid, and the second prompt information is used to prompt that the first application interface key is wrong;

[0204] The key update module 370 may be used to:

[0205] In the case where the verification failure prompt information is the first prompt information, in response to the key update operation of the target object, a key acquisition request is sent to the evidence storage platform,

[0206] The key update module 370 is also used for:

[0207] When the verification failure prompt information is the second prompt information, prompting the target object to enter the private key of the target blockchain account;

[0208] The authorization signature module 360 ​​is also used for:

[0209] Based on the private key of the target blockchain account input by the target object, an authorization signature is performed on the transaction information corresponding to the virtual asset processing operation.

[0210] The device of the embodiments of the present application can execute the method provided by the embodiments of the present application, and the implementation principles are similar. The actions performed by each module in the device of each embodiment of the present application correspond to the steps in the method of each embodiment of the present application. For the detailed functional description of each module of the device, please refer to the description in the corresponding method shown in the previous text, which will not be repeated here.

[0211] based on Figure 7 The data processing device shown, when processing virtual assets, obtains the private key information ciphertext from the evidence storage platform based on the user's application interface key corresponding to the evidence storage platform, and uses the decrypted private key to authorize the transaction information. Based on the solution provided by the embodiment of the present application, there is no need for the user to manually input the private key, which reduces the difficulty of storing and managing the private key, ensures the security of the private key storage, and better meets the actual application needs.

[0212] An embodiment of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory. When the processor executes the computer program stored in the memory, the method in any optional embodiment of the present application can be implemented.

[0213] Figure 8 FIG. 1 is a schematic diagram showing a structure of an electronic device to which an embodiment of the present invention is applicable. Figure 8 As shown, the electronic device may be a server or a user terminal, and the electronic device may be used to implement the method provided in any embodiment of the present invention.

[0214] like Figure 8 As shown in FIG. 1 , the electronic device 2000 may mainly include at least one processor 2001 ( Figure 8 2002, a communication module 2003 and an input / output interface 2004, etc. Optionally, the components can be connected and communicated through a bus 2005. It should be noted that: Figure 8 The structure of the electronic device 2000 shown in the figure is merely illustrative and does not constitute a limitation on the electronic device to which the method provided in the embodiment of the present application is applicable.

[0215] The memory 2002 may be used to store operating systems and application programs, etc. The application program may include a computer program that implements the method shown in the embodiment of the present invention when called by the processor 2001, and may also include a program for implementing other functions or services. The memory 2002 may be a ROM (Read Only Memory) or other types of static storage devices that can store static information and instructions, a RAM (Random Access Memory) or other types of dynamic storage devices that can store information and computer programs, or an EEPROM (Electrically Erasable Programmable Read Only Memory), a CD-ROM (Compact Disc Read Only Memory) or other optical disk storage, optical disk storage (including compressed optical disk, laser disk, optical disk, digital versatile disk, Blu-ray disk, etc.), a magnetic disk storage medium or other magnetic storage device, or any other medium that can be used to carry or store the desired program code in the form of instructions or data structures and can be accessed by a computer, but is not limited thereto.

[0216] The processor 2001 is connected to the memory 2002 via the bus 2005, and implements the corresponding functions by calling the application program stored in the memory 2002. Among them, the processor 2001 can be a CPU (Central Processing Unit), a general processor, a DSP (Digital Signal Processor), an ASIC (Application Specific Integrated Circuit), an FPGA (Field Programmable Gate Array) or other programmable logic devices, transistor logic devices, hardware components or any combination thereof, which can implement or execute various exemplary logic blocks, modules and circuits described in conjunction with the disclosure of the present invention. The processor 2001 can also be a combination that implements computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, etc.

[0217] The electronic device 2000 can be connected to the network through the communication module 2003 (which may include but is not limited to components such as a network interface) to communicate with other devices (such as a user terminal or a server, etc.) through the network to achieve data interaction, such as sending data to other devices or receiving data from other devices. Among them, the communication module 2003 may include a wired network interface and / or a wireless network interface, etc., that is, the communication module may include at least one of a wired communication module or a wireless communication module.

[0218] The electronic device 2000 can be connected to the required input / output devices, such as a keyboard, a display device, etc., through the input / output interface 2004. The electronic device 2000 itself can have a display device, and can also be connected to other display devices through the interface 2004. Optionally, a storage device, such as a hard disk, can also be connected through the interface 2004, so that data in the electronic device 2000 can be stored in the storage device, or data in the storage device can be read, and data in the storage device can also be stored in the memory 2002. It can be understood that the input / output interface 2004 can be a wired interface or a wireless interface. Depending on the actual application scenario, the device connected to the input / output interface 2004 can be a component of the electronic device 2000, or it can be an external device connected to the electronic device 2000 when needed.

[0219] The bus 2005 for connecting the components may include a path to transmit information between the above components. The bus 2005 may be a PCI (Peripheral Component Interconnect) bus or an EISA (Extended Industry Standard Architecture) bus, etc. According to different functions, the bus 2005 may be divided into an address bus, a data bus, a control bus, etc.

[0220] Optionally, for the solution provided by the embodiment of the present invention, the memory 2002 can be used to store a computer program for executing the solution of the present invention, and run by the processor 2001. When the processor 2001 runs the computer program, the action of the method or device provided by the embodiment of the present invention is implemented.

[0221] Based on the same principle as the method provided in the embodiment of the present application, the embodiment of the present application provides a computer-readable storage medium, on which a computer program is stored. When the computer program is executed by a processor, the corresponding content of the aforementioned method embodiment can be implemented.

[0222] An embodiment of the present application also provides a computer program product, which includes a computer program. When the computer program is executed by a processor, the corresponding content of the aforementioned method embodiment can be implemented.

[0223] It should be noted that the terms "first", "second", "third", "fourth", "1", "2", etc. (if any) in the specification and claims of this application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the numbers used in this way can be interchangeable where appropriate, so that the embodiments of the application described herein can be implemented in an order other than that shown or described in the drawings.

[0224] It should be understood that, although each operation step is indicated by arrows in the flowchart of the embodiment of the present application, the implementation order of these steps is not limited to the order indicated by the arrows. Unless clearly stated herein, in some implementation scenarios of the embodiment of the present application, the implementation steps in each flowchart can be performed in other orders according to demand. In addition, some or all of the steps in each flowchart may include multiple sub-steps or multiple stages based on actual implementation scenarios. Some or all of these sub-steps or stages may be executed at the same time, and each sub-step or stage in these sub-steps or stages may also be executed at different times respectively. In different scenarios of execution time, the execution order of these sub-steps or stages may be flexibly configured according to demand, and the embodiment of the present application does not limit this.

[0225] The above is only an optional implementation method for some implementation scenarios of the present application. It should be pointed out that for ordinary technicians in this technical field, without departing from the technical concept of the solution of the present application, other similar implementation methods based on the technical ideas of the present application are also within the protection scope of the embodiments of the present application.

Claims

1. A data processing method based on a blockchain wallet, characterized in that: The method comprises: Receive the target object's virtual asset processing operation on the target blockchain account; In response to the virtual asset processing operation, obtaining a first application interface key of the target object corresponding to a proof storage platform, wherein the proof storage platform at least stores a ciphertext of private key information of a blockchain account of the target object; Based on the first application interface key, sending a private key information acquisition request to the evidence storage platform, wherein the private key information acquisition request includes the first application interface key; Receiving the private key information ciphertext of the target blockchain account sent by the evidence storage platform, wherein the private key information ciphertext is sent by the evidence storage platform when the verification result of the first application interface key is verification passed; Receive the decryption information input by the target object, decrypt the private key information ciphertext by using the decryption information, and obtain the private key of the target blockchain account; The transaction information corresponding to the virtual asset processing operation is authorized and signed using the private key, and the transaction information with the authorization signature is sent to the target blockchain network.

2. The method according to claim 1, characterized in that Any object corresponds to at least one blockchain account of the blockchain network. For any object, the evidence storage platform stores a first mapping relationship corresponding to the object, wherein the first mapping relationship includes an object identifier of the object, account identifiers of each blockchain account of the object, and a mapping relationship between ciphertexts of private key information corresponding to each account identifier; The private key information ciphertext is determined by the evidence storage platform in the following way: Performing interface call authority verification according to the first application interface key in the private key information acquisition request; wherein the private key information acquisition request also includes the object identifier of the target object and the account identifier of the target blockchain account; If the verification passes, the first mapping relationship corresponding to the target object is determined based on the object identifier of the target object, and the private key information ciphertext corresponding to the target blockchain account is determined based on the first mapping relationship and the account identifier of the target blockchain account.

3. The method according to claim 1, characterized in that For any object, the private key information ciphertext is the private key ciphertext or the mnemonic ciphertext; Decrypting the private key information ciphertext by using the decryption information to obtain the private key of the target blockchain account includes: If the private key information ciphertext is a private key ciphertext, the private key ciphertext is decrypted by using the decryption information to obtain the private key of the target blockchain account; If the private key information ciphertext is a mnemonic ciphertext, the mnemonic ciphertext is decrypted by using the decryption information to obtain the mnemonic of the target blockchain account; and based on the mnemonic, the private key of the target blockchain account is obtained.

4. The method according to claim 1, characterized in that: The private key information ciphertext is generated in the following way: In response to an account creation operation of the target object on a target blockchain account, obtaining private key information corresponding to the target blockchain account; the private key information includes a private key or a mnemonic phrase; receiving encryption information for the private key information input by the target object, and encrypting the private key information according to the encryption information to generate a ciphertext of the private key information; The private key information ciphertext is stored in the evidence storage platform in the following manner: In response to a private key information storage trigger operation initiated by the target object for the evidence storage platform, obtaining a second application interface key of the target object corresponding to the evidence storage platform; Based on the second application interface key, a private key information ciphertext storage request is sent to the evidence storage platform, so that the private key information ciphertext is stored in the evidence storage platform if the verification result of the second application interface key by the evidence storage platform is passed; wherein the private key information ciphertext storage request carries the second application interface key and the private key information ciphertext.

5. The method according to claim 1, characterized in that The obtaining of the first application interface key of the target object corresponding to the evidence storage platform includes: Reading the first application interface key of the target object corresponding to the evidence storage platform from the local storage; the first application interface key is obtained by the target object from the evidence storage platform and stored locally; The verification result of the first application interface key is determined by the evidence storage platform in the following manner: If the first application interface key belongs to an application interface key set, the creation duration of the first application interface key is determined; if the creation duration is not greater than the preset validity duration, it is determined that the first application interface key verification is passed; wherein the application interface key set is a set of at least one application interface key pre-generated by the target object corresponding to the evidence storage platform; If the creation duration is greater than the preset validity duration, or the first application interface key does not belong to the application interface key set, it is determined that the first application interface key verification has failed.

6. The method according to claim 1 or 5, characterized in that: If verification failure prompt information of the first application interface key is received, the method further includes: In response to the key update operation of the target object, sending a key acquisition request to the evidence storage platform, wherein the key acquisition request includes the identity authentication information of the target object; Receive a third application interface key corresponding to the target object sent by the evidence storage platform, where the third application interface key is sent by the evidence storage platform when the identity authentication information is verified; Based on the third application interface key, resending a request for obtaining the private key information of the target blockchain account to the evidence storage platform; The locally stored first application interface key is updated using the third application interface key.

7. The method according to claim 6, characterized in that The verification failure prompt information is the first prompt information or the second prompt information, the first prompt information is used to prompt that the first application interface key is invalid, and the second prompt information is used to prompt that the first application interface key is wrong; The sending a key acquisition request to the evidence storage platform in response to the key update operation of the target object includes: In the case where the verification failure prompt information is the first prompt information, in response to the key update operation of the target object, a key acquisition request is sent to the evidence storage platform, The method further comprises: When the verification failure prompt information is the second prompt information, prompting the target object to enter the private key of the target blockchain account; Based on the private key of the target blockchain account input by the target object, an authorization signature is performed on the transaction information corresponding to the virtual asset processing operation.

8. A data processing device based on a blockchain wallet, characterized in that: include: An operation trigger module, used to receive a virtual asset processing operation of a target object on a target blockchain account; An interface key acquisition module, configured to acquire, in response to the virtual asset processing operation, a first application interface key of the target object corresponding to the evidence storage platform, wherein the evidence storage platform at least stores the ciphertext of the private key information of the blockchain account of the target object; A request module, configured to send a private key information acquisition request to the evidence storage platform based on the first application interface key, wherein the private key information acquisition request includes the first application interface key; A receiving module, configured to receive the private key information ciphertext of the target blockchain account sent by the evidence storage platform, wherein the private key information ciphertext is sent by the evidence storage platform when the verification result of the first application interface key is verification passed; A decryption module, used to receive the decryption information input by the target object, decrypt the private key information ciphertext through the decryption information, and obtain the private key of the target blockchain account; The authorization signature module is used to authorize the transaction information corresponding to the virtual asset processing operation through the private key, and send the transaction information after the authorization signature to the target blockchain network.

9. An electronic device, characterized in that: The electronic device comprises a memory and a processor, wherein a computer program is stored in the memory, and the processor executes the computer program to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and when the computer program is executed by a processor, the method according to any one of claims 1 to 7 is implemented.

Images