Digital asset management method, system and program product

Abstract

The invention belongs to the technical field of information management, and particularly discloses a digital asset management method and system and a program product, and the method comprises the steps: obtaining digital asset information and corresponding dynamic attribute information, generating a data object through the digital asset information, and generating a dynamic public key through the dynamic attribute information and an authentication public key; a dynamic public key is used for encrypting a data object, an authentication private key is used for digitally signing the encrypted data object to obtain an encrypted abstract, and finally, the encrypted data object, the encrypted abstract and authentication identification information are combined, linked and stored, so that efficient and reliable digital asset management can be realized. According to the method, the digital assets are encrypted and subjected to uplink storage, data assets can be effectively prevented from being lost, online management and transaction of the digital assets can be conveniently achieved, the digital assets are encrypted and packaged through the dynamic public key, storage safety of the digital assets can be guaranteed, and the digital assets are effectively prevented from being leaked or cracked.

Description

Technical Field

[0001] The present invention belongs to the technical field of information management, and particularly relates to a digital asset management method, system and program product. Background Art

[0002] Digital assets refer to assets existing in electronic or digital form, including electronically stored resources such as documents, images, audio and video. These resources are usually stored in computers or network servers and can be accessed and used through electronic devices. Digital assets not only include traditional digital information assets (such as electronic documents, pictures, videos, etc.), but also emerging encrypted assets (such as cryptocurrencies, NFTs, digital rights, etc.).

[0003] Digital assets can be roughly classified into the following categories: 1. Software and applications: including various software, applications used by enterprises, as well as related source codes and APIs. 2. Text and media files: such as images, videos, audio and electronic documents. 3. Network assets: such as websites, social media accounts and other online platforms. 4. Data and information assets: including data in databases, spreadsheet data and various forms of analysis data. 5. Digital currencies and digital securities: such as cryptocurrencies, and digital securities issued through blockchain technology. 6. Intellectual property rights: including copyrights, trademarks, patents, etc. 7. Digital artworks and NFTs: such as digital paintings, music, videos, etc., ensuring their uniqueness and ownership through NFT technology.

[0004] Currently, for the management of digital assets, many still adopt a server-centered management method, that is, encrypting digital assets with a static key on the server for local storage. This management method is not conducive to the online trading and management of digital assets, and the security and reliability of traditional single static key encryption for long-term preservation of digital assets are insufficient. Summary of the Invention

[0005] The purpose of the present invention is to provide a digital asset management method, system and program product to solve the above problems existing in the prior art.

[0006] To achieve the above purpose, the present invention adopts the following technical solutions:

[0007] In a first aspect, a digital asset management method is provided, including:

[0008] Obtaining digital asset information to be processed and dynamic attribute information corresponding to the digital asset information;

[0009] Parsing the digital asset information into a data object in a fixed format;

[0010] Retrieve the pre-stored authentication key pair and its authentication identification information. The authentication key pair includes an authentication private key and an authentication public key, and use the authentication public key and dynamic attribute information to form dynamic fusion data;

[0011] Generate a dynamic public key using the dynamic fusion data, and use the dynamic public key to encrypt a data object in a fixed format to obtain an encrypted data object;

[0012] Perform a digital signature on the encrypted data object based on the authentication private key to obtain an encrypted digest corresponding to the encrypted data object;

[0013] Combine the encrypted data object, the encrypted digest, and the authentication identification information to obtain the data of the asset to be uploaded to the blockchain;

[0014] Upload the data of the asset to be uploaded to the blockchain platform for storage based on the smart contract pre-deployed in the blockchain platform.

[0015] In a possible design, the dynamic attribute information includes the unique identifier of the asset owner, the asset data type, and the asset generation time.

[0016] In a possible design, the parsing of the digital asset information into a data object in a fixed format includes: parsing the digital asset information into a data object in JSON format.

[0017] In a possible design, the combining of the encrypted data object, the encrypted digest, and the authentication identification information to obtain the data of the asset to be uploaded to the blockchain includes:

[0018] Merge the encrypted data object, the encrypted digest, and the authentication identification information to obtain a merged data set, and the encrypted data object, the encrypted digest, and the authentication identification information in the merged data set are separated by a set separator;

[0019] Perform JSON format conversion processing on the merged data set to obtain the data of the asset to be uploaded to the blockchain.

[0020] In a possible design, the generating of the dynamic public key using the dynamic fusion data includes:

[0021] Perform a hash calculation on the dynamic fusion data using the SHA-256 hash algorithm to obtain the corresponding hash value, and use the corresponding hash value as the dynamic public key.

[0022] In a possible design, the encrypting of the data object in a fixed format using the dynamic public key to obtain an encrypted data object includes:

[0023] Perform an encryption calculation on the data object in a fixed format based on the RSA algorithm using the dynamic public key to obtain the corresponding encrypted data object.

[0024] In a possible design, the digital signature of the encrypted data object based on the authentication private key to obtain the encrypted digest corresponding to the encrypted data object includes:

[0025] Perform a one-way hash function calculation on the encrypted data object to obtain the corresponding object digest;

[0026] Based on the DSA algorithm and using the authentication private key, perform an encryption calculation on the object digest to obtain the encrypted digest.

[0027] In a second aspect, a digital asset management system is provided, including a data acquisition unit, a data parsing unit, a key combination unit, an object encryption unit, a digital signature unit, a data combination unit, and a data uploading unit, where:

[0028] The data acquisition unit is configured to acquire the digital asset information to be processed and the dynamic attribute information corresponding to the digital asset information;

[0029] The data parsing unit is configured to parse the digital asset information into a data object in a fixed format;

[0030] The key combination unit is configured to retrieve the pre-stored authentication key pair and its authentication identification information, the authentication key pair includes an authentication private key and an authentication public key, and use the authentication public key and the dynamic attribute information to form dynamic fusion data;

[0031] The object encryption unit is configured to generate a dynamic public key using the dynamic fusion data, and use the dynamic public key to encrypt the data object in a fixed format to obtain an encrypted data object;

[0032] The digital signature unit is configured to perform a digital signature on the encrypted data object based on the authentication private key to obtain the encrypted digest corresponding to the encrypted data object;

[0033] The data combination unit is configured to combine the encrypted data object, the encrypted digest, and the authentication identification information to obtain the data for uploading to the chain;

[0034] The data uploading unit is configured to upload the data for uploading to the chain to the blockchain platform for storage based on the smart contract pre-deployed in the blockchain platform.

[0035] In a third aspect, a digital asset management system is provided, including:

[0036] A memory for storing instructions;

[0037] A processor for reading the instructions stored in the memory and executing the method according to any one of the above first aspects according to the instructions.

[0038] Fourthly, a computer-readable storage medium is provided, on which instructions are stored. When the instructions run on a computer, the computer is made to execute any one of the methods in the first aspect. Meanwhile, a computer program product is also provided, which, when running on a computer, executes any one of the methods in the first aspect.

[0039] Advantageous effects: By obtaining digital asset information and its corresponding dynamic attribute information, generating a data object using the digital asset information, generating a dynamic public key using the dynamic attribute information and the authentication public key, then encrypting the data object using the dynamic public key, digitally signing the encrypted data object using the authentication private key to obtain an encrypted digest, and finally combining and storing the encrypted data object, the encrypted digest, and the authentication identification information on the chain, the present invention can achieve efficient and reliable digital asset management. By encrypting and storing digital assets on the chain, the present invention can effectively prevent the loss of data assets, facilitate the online management and trading of digital assets, and by using a dynamic public key to encapsulate and encrypt digital assets, it can ensure the storage security of digital assets and effectively prevent their leakage or being cracked. Description of the Drawings

[0040] In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings required to be used in the description of the embodiments or the prior art. Obviously, the following drawings are only some embodiments of the present invention, and for those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative efforts.

[0041] Figure 1 It is a schematic diagram of the steps of the method in Embodiment 1 of the present invention;

[0042] Figure 2 It is a schematic diagram of the composition of the system in Embodiment 2 of the present invention;

[0043] Figure 3 It is a schematic diagram of the composition of the system in Embodiment 3 of the present invention. Detailed Embodiments

[0044] It should be noted here that the description of these embodiments is used to help understand the present invention, but does not constitute a limitation to the present invention. The specific structures and functional details disclosed herein are only used to describe the exemplary embodiments of the present invention. However, the present invention can be embodied in many alternative forms and should not be construed as limited to the embodiments described herein.

[0045] It should be understood that, unless otherwise explicitly specified and limited, the corresponding terms should be understood in a broad sense. For example, "connection" can be a fixed connection, a detachable connection, or an integral connection; it can be directly connected or indirectly connected through an intermediate medium, and can be the communication inside two components. For those of ordinary skill in the art, the specific meanings of the above terms in the embodiments can be understood according to specific situations.

[0046] Specific details are provided in the following description to facilitate a complete understanding of the exemplary embodiments. However, those of ordinary skill in the art should understand that the exemplary embodiments can be implemented without these specific details. For example, the device can be shown in a block diagram to avoid obscuring the example with unnecessary details. In other embodiments, well-known processes, structures, and technologies can be shown without unnecessary details to avoid obscuring the embodiments.

[0047] Embodiment 1:

[0048] This embodiment provides a digital asset management method, which can be applied to a corresponding management terminal, such as Figure 1 As shown, the method includes the following steps:

[0049] S1. Obtain the digital asset information to be processed and the dynamic attribute information corresponding to the digital asset information.

[0050] Specifically, the management terminal first obtains the digital asset information to be processed and the dynamic attribute information corresponding to the digital asset information. The digital asset information includes, but is not limited to, software and applications (including various software, applications, and related source codes and APIs used by enterprises), text and media files (such as images, videos, audios, and electronic documents, etc.), data and information assets (including data in databases, spreadsheet data, and various forms of analysis data, etc.), network assets (such as websites, social media accounts, etc.), digital currencies and digital securities (such as digital currencies and digital securities issued through blockchain technology, etc.), and digital artworks and NFTs (such as digital paintings, music, videos, etc., ensuring their uniqueness and ownership through NFT technology). The dynamic attribute information may include the unique identifier of the asset owner corresponding to the digital asset information (such as a unique number), the asset data type (such as classification numbers for text, image, audio, video, etc.), and the asset generation time.

[0051] S2. Parse the digital asset information into a data object in a fixed format.

[0052] In specific implementation, the management terminal converts the obtained digital asset information into a data object in JSON format for subsequent unified standard processing. Exemplarily, for text information, its content can be converted into a string and parsed into a JSON object using the JSON.parse method; for Excel information, relevant Excel parsing libraries such as xlsx.js or SheetJS can be used to parse it into a JSON object; for image, audio, or video information, corresponding encoding and decoding libraries such as FFmpeg can be used for parsing, and the parsed data is converted into a JSON object.

[0053] S3. Retrieve the pre-stored authentication key pair and its authentication identification information. The authentication key pair includes an authentication private key and an authentication public key, and a dynamic fusion data is formed using the authentication public key and the dynamic attribute information.

[0054] In specific implementation, the management terminal retrieves the pre-stored authentication key pair and its authentication identification information. The authentication key pair includes an authentication private key and an authentication public key. The authentication key pair is a key pair authenticated by the authentication institution. The authentication public key that forms a key pair with the authentication private key can be obtained from the authentication institution through the authentication identification information. After retrieving the authentication key pair, the management terminal combines the authentication private key therein with the dynamic attribute information to obtain dynamic fusion data.

[0055] S4. Generate a dynamic public key using the dynamic fusion data, and encrypt a data object in a fixed format using the dynamic public key to obtain an encrypted data object.

[0056] In specific implementation, the management terminal can perform a hash calculation on the dynamic fusion data using the SHA-256 hash algorithm to obtain the corresponding hash value, and use the corresponding hash value as the dynamic public key. Then, based on the RSA algorithm, the data object in the fixed format is encrypted using the dynamic public key to obtain the corresponding encrypted data object.

[0057] S5. Perform a digital signature on the encrypted data object based on the authentication private key to obtain an encrypted digest corresponding to the encrypted data object.

[0058] In specific implementation, the management terminal performs a calculation using a one-way hash function (such as the MD5 algorithm, SHA series algorithms, etc.) on the encrypted data object to obtain the corresponding object digest; then, based on the DSA algorithm, the object digest is encrypted using the authentication private key to obtain the encrypted digest.

[0059] S6. Combine the encrypted data object, the encrypted digest, and the authentication identification information to obtain the data for uploading to the chain.

[0060] During specific implementation, the management terminal combines the encrypted data object, the encrypted digest, and the authentication identification information to obtain a combined data set, and a set separator is used to separate the encrypted data object, the encrypted digest, and the authentication identification information in the combined data set; then, JSON format conversion processing is performed on the combined data set (the syntax of JSON is concise and clear, easy to read and write, and also easy to parse and generate. JSON-formatted data can be used for data exchange, storage, and transmission between the front end and the back end, and can be interoperable with multiple programming languages), to obtain the data of the asset to be uploaded to the chain.

[0061] S7. Based on the smart contract pre-deployed in the blockchain platform, the data of the asset to be uploaded to the chain is uploaded to the blockchain platform for storage.

[0062] During specific implementation, after obtaining the data of the asset to be uploaded to the chain, the management terminal can upload the data of the asset to be uploaded to the chain to the blockchain platform for storage, transaction, etc. through the smart contract pre-deployed in the blockchain platform. When the data of the asset to be uploaded to the chain stored in the blockchain platform is traded or transmitted to the user terminal, the user terminal can perform corresponding reverse processing on the data of the asset to be uploaded to the chain to obtain the original digital asset information. The reverse processing includes: parsing the data of the asset to be uploaded to the chain, and respectively extracting the encrypted data object, the encrypted digest, and the authentication identification information according to the separator. Then, the authentication public key corresponding to the authentication private key is obtained from the authentication agency using the authentication identification information, and the encrypted digest is decrypted using the authentication public key and based on the DSA algorithm to obtain the decrypted first object digest. At the same time, a one-way hash function (such as the MD5 algorithm, the SHA series algorithm, etc.) is used to calculate the encrypted data object to obtain the corresponding second object digest. Then, the first object digest is compared and verified with the second object digest. If the two are consistent, it indicates that the encrypted data object has not been tampered with and is safe and reliable. At this time, the user terminal can use the dynamic private key and dynamic attribute information obtained from the management terminal in advance during the transaction or data transmission for key verification, that is, the authentication public key and the dynamic attribute information are used to form dynamic fusion data, and the SHA-256 hash algorithm is used to perform a hash calculation on the dynamic fusion data to obtain the corresponding hash value, and the corresponding hash value is used as the dynamic public key. Then, it is determined whether the dynamic private key and the dynamic public key match. In the case of a match, the encrypted data object can be decrypted using the dynamic private key to obtain a data object in JSON format. Finally, by performing corresponding data parsing on the data object in JSON format, the original digital asset information can be obtained.

[0063] This method can effectively prevent the loss of data assets by encrypting and storing digital assets on the chain, facilitate the online management and transaction of digital assets, and can ensure the storage security of digital assets and effectively prevent their leakage or being cracked by using the dynamic public key to encrypt and package digital assets.

[0064] Example 2:

[0065] This embodiment provides a digital asset management system, as Figure 2 shown, including a data acquisition unit, a data parsing unit, a key combination unit, an object encryption unit, a digital signature unit, a data combination unit, and a data on-chain unit, where:

[0066] The data acquisition unit is used to acquire digital asset information to be processed and the corresponding dynamic attribute information of the digital asset information;

[0067] The data parsing unit is used to parse the digital asset information into a data object in a fixed format;

[0068] The key combination unit is used to retrieve the pre-stored authentication key pair and its authentication identification information. The authentication key pair includes an authentication private key and an authentication public key, and uses the authentication public key and the dynamic attribute information to form dynamic fusion data;

[0069] The object encryption unit is used to generate a dynamic public key using the dynamic fusion data, and use the dynamic public key to encrypt the data object in a fixed format to obtain an encrypted data object;

[0070] The digital signature unit is used to perform a digital signature on the encrypted data object based on the authentication private key to obtain an encrypted digest corresponding to the encrypted data object;

[0071] The data combination unit is used to combine the encrypted data object, the encrypted digest, and the authentication identification information to obtain the on-chain asset data;

[0072] The data on-chain unit is used to upload the on-chain asset data to the blockchain platform for storage based on the smart contract pre-deployed in the blockchain platform.

[0073] Example 3:

[0074] This embodiment provides a digital asset management system, as Figure 3 shown, at the hardware level, including:

[0075] The data interface is used to establish data docking between the processor and the external data terminal;

[0076] The memory is used to store instructions;

[0077] The processor is used to read the instructions stored in the memory and execute the digital asset management method in Embodiment 1 according to the instructions.

[0078] Optionally, the system further includes an internal bus through which the processor can be interconnected with the memory and the data interface. The internal bus can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect) bus, an EISA (Extended Industry Standard Architecture) bus, or the like. The bus can be divided into an address bus, a data bus, a control bus, etc.

[0079] The memory can include, but is not limited to, a random access memory (RAM), a read only memory (ROM), a flash memory, a first input first output (FIFO) memory, and / or a first in last out (FILO) memory, etc. The processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field-programmable gate array (FPGA), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0080] Embodiment 4:

[0081] This embodiment provides a computer-readable storage medium, on which instructions are stored. When the instructions run on a computer, the computer is caused to execute the digital asset management method in Embodiment 1. Among them, the computer-readable storage medium refers to a carrier for storing data, and can include, but is not limited to, a floppy disk, an optical disc, a hard disk, a flash memory, a USB flash drive, and / or a memory stick, etc. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.

[0082] This embodiment also provides a computer program product. When the computer program product runs on a computer, it executes the digital asset management method in Embodiment 1. Among them, the computer may be a general-purpose computer, a special-purpose computer, a computer network, or other programmable devices.

[0083] Finally, it should be noted that the above are only the preferred embodiments of the present invention and are not used to limit the protection scope of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A digital asset management method, characterized in that, Including: Obtain the digital asset information to be processed and the dynamic attribute information corresponding to the digital asset information; Parse the digital asset information into a data object in a fixed format; Retrieve the pre-stored authentication key pair and its authentication identification information, where the authentication key pair includes an authentication private key and an authentication public key, and use the authentication public key and the dynamic attribute information to form dynamic fusion data; Generate a dynamic public key using the dynamic fusion data, and use the dynamic public key to encrypt the data object in a fixed format to obtain an encrypted data object; Perform a digital signature on the encrypted data object based on the authentication private key to obtain an encrypted digest corresponding to the encrypted data object; Combine the encrypted data object, the encrypted digest, and the authentication identification information to obtain the data for uploading to the blockchain; Upload the data for uploading to the blockchain to the blockchain platform for storage based on the smart contract pre-deployed in the blockchain platform.

2. The digital asset management method according to claim 1, wherein The dynamic attribute information includes the unique identifier of the asset owner, the asset data type, and the asset generation time.

3. A digital asset management method according to claim 1, characterized in that, The parsing of the digital asset information into a data object in a fixed format includes: parsing the digital asset information into a data object in JSON format.

4. A digital asset management method according to claim 1, wherein, The combining of the encrypted data object, the encrypted digest, and the authentication identification information to obtain the data for uploading to the blockchain includes: Merge the encrypted data object, the encrypted digest, and the authentication identification information to obtain a merged data set, and separate the encrypted data object, the encrypted digest, and the authentication identification information in the merged data set using a set separator; Perform JSON format conversion processing on the merged data set to obtain the data for uploading to the blockchain.

5. A digital asset management method according to claim 1, characterized in that, The generating of the dynamic public key using the dynamic fusion data includes: Perform a hash calculation on the dynamic fusion data using the SHA-256 hash algorithm to obtain the corresponding hash value, and use the corresponding hash value as the dynamic public key.

6. A digital asset management method according to claim 1, characterized in that, The encrypting of the data object in a fixed format using the dynamic public key to obtain an encrypted data object includes: Perform an encryption calculation on the data object in a fixed format based on the RSA algorithm using the dynamic public key to obtain the corresponding encrypted data object.

7. A digital asset management method according to claim 1, characterized in that The performing of the digital signature on the encrypted data object based on the authentication private key to obtain an encrypted digest corresponding to the encrypted data object includes: Perform a one-way hash function calculation on the encrypted data object to obtain the corresponding object digest; Perform an encryption calculation on the object digest based on the DSA algorithm using the authentication private key to obtain the encrypted digest.

8. A digital asset management system, characterized in that, Including a data acquisition unit, a data parsing unit, a key combination unit, an object encryption unit, a digital signature unit, a data combination unit, and a data uploading unit, where: The data acquisition unit is used to obtain the digital asset information to be processed and the dynamic attribute information corresponding to the digital asset information; The data parsing unit is used to parse the digital asset information into a data object in a fixed format; The key combination unit is used to retrieve the pre-stored authentication key pair and its authentication identification information, where the authentication key pair includes an authentication private key and an authentication public key, and use the authentication public key and the dynamic attribute information to form dynamic fusion data; The object encryption unit is used to generate a dynamic public key using the dynamic fusion data, and use the dynamic public key to encrypt the data object in a fixed format to obtain an encrypted data object; A digital signature unit, configured to perform a digital signature on an encrypted data object based on an authentication private key to obtain an encrypted digest corresponding to the encrypted data object; A data combination unit, configured to combine the encrypted data object, the encrypted digest, and authentication identification information to obtain on-chain asset data; A data on-chain unit, configured to upload the on-chain asset data to a blockchain platform for storage based on a smart contract pre-deployed in the blockchain platform.

9. A digital asset management system, characterized in that, Comprising: A memory, configured to store instructions; A processor, configured to read the instructions stored in the memory and execute the digital asset management method according to any one of claims 1-7.

10. A computer program product, characterized in that, When the computer program product runs on a computer, it executes the digital asset management method according to any one of claims 1-7.

Images