Decentralized multi-party data storage access system, acquisition method and storage medium

Abstract

The embodiment of the invention discloses a decentralized multi-party data storage access system. And the first electronic equipment generates a target hash abstract based on the target file, performs private key encryption on the target hash abstract to obtain a target file name, and names the target file by using the target file name. And the second electronic equipment obtains a candidate file based on the access path, obtains a first candidate hash abstract based on the candidate file, decrypts a file name of the candidate file by using a public key to obtain a second candidate hash abstract, and determines the candidate file as a target file if the first candidate hash abstract is consistent with the second candidate hash abstract. According to the embodiment, based on the server, the first electronic equipment and the second electronic equipment, a multi-party cooperation and mutual trust and interaction data sharing architecture is constructed, and the situation that data sharing is difficult due to the fact that data islands stand in the past is broken through. And secondly, after the second electronic equipment obtains the data, whether the data is tampered or not is verified by detecting whether the first candidate hash abstract is consistent with the second candidate hash abstract or not, and the right of the data is confirmed.

Claims

1. A decentralized multi-party data storage and access system, characterized in that: include: Server,configured with address prefix; a first electronic device, configured with a first private key and a first public key, for making target data into a target file according to a preset format, performing a hash operation on the target file to obtain a target hash summary, encrypting the target hash summary using the first private key to obtain a target file name, naming the target file according to the target file name, sending the named target file to the server so that the server stores the named target file, and using the target file name as a suffix of an address for obtaining the target file; The second electronic device generates an access path based on the address prefix and the target file name, accesses the server based on the access path to obtain a candidate file, decrypts the target file name using the first public key to obtain a first candidate hash digest, performs a hash operation on the candidate file to obtain a second candidate hash digest, detects whether the first candidate hash digest is consistent with the second candidate hash digest, and if they are consistent, generates authentication information and data non-tampering information, and determines that the candidate file is the target file.

2. The multi-party data storage access system according to claim 1, characterized in that: The target hash summary is the folder name of the target folder storing the target file.

3. The multi-party data storage access system according to claim 2, characterized in that: The second electronic device generates an access path based on the address prefix and the target file name, including: the second electronic device combines the address prefix, the target hash digest and the target file name to obtain an access path.

4. The multi-party data storage access system according to claim 3, characterized in that: The second electronic device combines the address prefix, the target hash summary and the target file name to obtain an access path including: The second electronic device decrypts the target file name using the first public key to obtain a third candidate hash digest; The second electronic device uses the third candidate hash digest as the target hash digest, and combines the address prefix, the target hash digest and the target file name to obtain an access path.

5. The multi-party data storage access system according to claim 2, characterized in that: The first electronic device sending the named target file to the server so that the server stores the named target file comprises: The first electronic device sends the named target file to the server; The server performs a hash operation on the target file to obtain a reference hash summary; The server detects whether there is a folder named with the reference hash digest locally. If so, the server determines the folder named with the reference hash digest as the target folder, and stores the named target files based on the number of files in the target folder. If not, the server creates a target folder named with the reference hash digest, and stores the named target files as physical files in the target folder.

6. The multi-party data storage access system according to claim 5, characterized in that: The server stores the named target files based on the number of files in the target folder, including: The server detects whether there is a physical file stored in the target folder; If not stored, the server stores the named target file as a physical file in the target folder; If it is stored, the server creates a formal link file that forms a mapping relationship with the entity file, and uses the target file name as the file name of the formal link file.

7. The multi-party data storage and access system according to any one of claims 2 to 6, characterized in that: The second electronic device accessing the server based on the access path to obtain the candidate file comprises: The second electronic device sends an access request to the server based on the access path, wherein the access request carries the target hash digest and the target file name; The server parses the access request to obtain the target hash digest and the target file name; The server detects whether there is a folder named with the target hash digest and whether there is a server file corresponding to the target file name under the folder; If there is a server file corresponding to the target file name, the server detects whether the server file is a physical file or a formal link file, and if the server file is a physical file, returns the physical file as a candidate file to the second electronic device; if the server file is a formal link file, jumps to the physical file based on the mapping relationship of the formal link file, and returns the physical file as a candidate file to the second electronic device; If there is no folder named with the target hash digest, or there is no server file corresponding to the target file name, the server returns a query error message to the second electronic device.

8. The multi-party data access system according to any one of claims 1 to 6, characterized in that: The server obtains a file update request sent by a third electronic device, the file update request carries designated file information, the third electronic device is configured with a third private key and a third public key, and the designated file information is obtained by the third electronic device encrypting the designated file name using the third private key; The server uses the third public key to decrypt the specified file information to obtain the specified file name; The server searches out a corresponding designated file based on the designated file name and deletes the designated file.

9. The multi-party data access system according to claim 8, characterized in that: The server searches out a corresponding designated file based on the designated file name, and deleting the designated file includes: The server uses the third public key to decrypt the specified file name to obtain a specified folder name; The server detects whether the file corresponding to the specified file name is a physical file or a formal link file in the specified folder corresponding to the specified folder name: If the file corresponding to the specified file name is a formal link file, the server deletes the formal link file corresponding to the specified file name; If the file corresponding to the specified file name is a physical file, and the specified folder has no formal link file, the server deletes the physical file; If the file corresponding to the specified file name is an entity file, and there is at least one formal link file in the specified folder, the server selects a formal link file that meets the naming update conditions from at least one of the formal link files as the target formal link file, renames the file name of the entity file to the file name of the target formal link file, deletes the target formal link file, and updates the link objects of all reference formal link files to the renamed entity file, where the reference formal link file is a formal link file after the target formal link file is removed from at least one of the formal link files.

10. The multi-party data storage access system according to any one of claims 1 to 6, characterized in that: After storing the named target file, the server adds the target file name as new data to a new block of the preset blockchain.

11. A decentralized multi-party data acquisition method, applied to a second electronic device, characterized in that: include: Acquire a target file name sent by a first electronic device, the first electronic device is configured with a first private key and a first public key, the target file name is obtained by the first electronic device encrypting a target hash digest using the first private key, the target hash digest is obtained by the first electronic device performing a hash operation on the target file, the target file is composed of target data, the target file name is the name of the target file, the target file name is used as an address suffix for acquiring the target file, the target file is stored in a designated server, and the server is configured with an address prefix; Generate an access path based on the address prefix and the target file name; accessing the server based on the access path to obtain a candidate file; Decrypting the target file name using the first public key to obtain a first candidate hash digest; Performing a hash operation on the candidate file to obtain a second candidate hash digest; In response to the first candidate hash digest being consistent with the second candidate hash digest, generating authentication information and data non-tampering information; The candidate file is determined to be the target file.

12. The method according to claim 11, characterized in that The target hash summary is the folder name of the target folder storing the target file.

13. The method according to claim 11, characterized in that The generating the access path based on the target file name includes: combining the address prefix, the target hash summary and the target file name to obtain the access path.

14. A second electronic device, characterized in that: It includes a memory and a processor, the memory is connected to the processor, the processor is used to execute one or more computer programs stored in the memory, and when the processor executes the one or more computer programs, the second electronic device implements the decentralized multi-party data acquisition method as described in any one of claims 11-13.

15. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, which includes program instructions. When the program instructions are executed by a processor, the processor executes the decentralized multi-party data acquisition method as described in any one of claims 11 to 13.

Images