Transaction data decryption method and device and electronic equipment

Abstract

The invention discloses a transaction data decryption method and device and electronic equipment. The method comprises the following steps: receiving a transaction data decryption request corresponding to a target account; in response to the transaction data decryption request, a decryption parameter corresponding to the transaction order identifier is determined, and the decryption parameter comprises a predetermined slave private key number; under the condition that the number of the current slave private keys reaches the preset number of slave private keys, a combined private key is obtained according to the first slave private key and a plurality of other private keys, and the other private keys comprise the master private key; and decrypting the ciphertext transaction data according to the combined private key to obtain plaintext transaction data. According to the method and the device, the technical problem of transaction data leakage caused by difficulty in fully guaranteeing the security of the decryption process when the ciphertext transaction data is decrypted is solved.

Description

Technical Field

[0001] The present invention relates to the field of data processing, and in particular, to a method, apparatus, and electronic device for decrypting transaction data. Background Art

[0002] In the related art, during the execution of a transaction, it is necessary to decrypt ciphertext transaction data. Due to reasons such as the complexity of multi-party participation in the transaction process, it is difficult to fully ensure the security of the decryption process when decrypting ciphertext transaction data, resulting in the technical problem of transaction data leakage.

[0003] In response to the above problems, no effective solution has been proposed yet. Summary of the Invention

[0004] Embodiments of the present invention provide a method, apparatus, and electronic device for decrypting transaction data, so as to at least solve the technical problem that it is difficult to fully ensure the security of the decryption process when decrypting ciphertext transaction data, resulting in transaction data leakage.

[0005] According to one aspect of the embodiments of the present invention, there is provided a method for decrypting transaction data, including: receiving a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first subordinate private key and a transaction order identifier; in response to the transaction data decryption request, determining decryption parameters corresponding to the transaction order identifier, where the decryption parameters include a predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the ciphertext transaction data; when the current number of subordinate private keys reaches the predetermined number of subordinate private keys, obtaining a combined private key based on the first subordinate private key and a plurality of other private keys, where the other private keys include a master private key; decrypting the ciphertext transaction data based on the combined private key to obtain plaintext transaction data.

[0006] Optionally, the decrypting the ciphertext transaction data based on the combined private key to obtain plaintext transaction data includes: decrypting the ciphertext transaction data based on the combined private key to obtain to-be-confirmed transaction data; determining a to-be-confirmed hash value corresponding to the to-be-confirmed transaction data; determining an initial hash value corresponding to the transaction order identifier; comparing the to-be-confirmed hash value with the initial hash value to obtain a first comparison result; when the first comparison result is that the to-be-confirmed hash value is the initial hash value, determining the plaintext transaction data, where the plaintext transaction data is the to-be-confirmed transaction data.

[0007] Optionally, obtaining a combined private key based on the first subordinate private key and multiple other private keys includes: when the decryption parameter includes a predetermined number of master private keys and the current number of master private keys reaches the predetermined number of master private keys, obtaining a combined private key based on the first subordinate private key and multiple other private keys.

[0008] Optionally, before obtaining a combined private key based on the first subordinate private key and multiple other private keys, it further includes: when the decryption parameter includes a decryption timestamp, determining a request timestamp corresponding to the transaction data decryption request; comparing the request timestamp with the decryption timestamp to obtain a comparison result; when the comparison result is that the request timestamp is equal to or later than the decryption timestamp, determining the current number of subordinate private keys.

[0009] Optionally, decrypting the encrypted transaction data based on the combined private key to obtain plaintext transaction data further includes: when the transaction data decryption request carries first encrypted data, determining current subordinate decryption data corresponding to multiple subordinate private keys in the combined private key, where the corresponding encrypted data is obtained by encrypting corresponding initial subordinate decryption data, and the corresponding initial subordinate decryption data is obtained by decrypting the encrypted transaction data based on the corresponding subordinate private key; determining original hash values corresponding to the initial subordinate decryption data corresponding to multiple subordinate private keys respectively, and determining current hash values corresponding to the current subordinate decryption data corresponding to multiple subordinate private keys respectively; respectively comparing the original hash values and current hash values corresponding to multiple subordinate private keys to obtain a verification result; when the verification result is that the current hash value corresponding to each subordinate private key is the corresponding original hash value, using the master private key in the combined private key to decrypt the encrypted transaction data to obtain master decryption data; obtaining plaintext transaction data based on multiple current subordinate decryption data and the master decryption data.

[0010] Optionally, decrypting the encrypted transaction data based on the combined private key to obtain plaintext transaction data includes: determining decryption ranks corresponding to multiple private keys in the combined private key; sequentially using the corresponding private keys in the order of the decryption ranks corresponding to multiple private keys to decrypt the encrypted transaction data to obtain plaintext transaction data.

[0011] Optionally, before decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data, it further includes: when the current number of subordinate private keys has not reached the predetermined number of subordinate private keys, determining whether a waiting result of a second decryption request corresponding to the transaction order identifier is received within the waiting time range, where the second decryption request carries a second subordinate private key; when the waiting result is that the second decryption request is received, updating the current number of subordinate private keys until the updated number of subordinate private keys reaches the predetermined number of subordinate private keys, and obtaining a combined private key according to the second subordinate private key and multiple other private keys.

[0012] According to one aspect of an embodiment of the present invention, a transaction data decryption device is provided, including: a receiving module, configured to receive a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first subordinate private key and a transaction order identifier; a response module, configured to respond to the transaction data decryption request and determine a decryption parameter corresponding to the transaction order identifier, where the decryption parameter includes a predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the ciphertext transaction data; a first determination module, configured to obtain a combined private key according to the first subordinate private key and multiple other private keys when the current number of subordinate private keys reaches the predetermined number of subordinate private keys, where the other private keys include a master private key; a second determination module, configured to decrypt the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data.

[0013] According to one aspect of an embodiment of the present invention, an electronic device is provided, including: a processor; a memory for storing executable instructions of the processor; wherein, the processor is configured to execute the instructions to implement the transaction data decryption method described in any one of the above.

[0014] According to one aspect of an embodiment of the present invention, a computer-readable storage medium is provided, when the instructions in the computer-readable storage medium are executed by a processor of an electronic device, enabling the electronic device to execute the transaction data decryption method described in any one of the above.

[0015] In an embodiment of the present invention, a decryption request for transaction data corresponding to a target account is received, where the decryption request for transaction data carries a first subordinate private key and a transaction order identifier; in response to the decryption request for transaction data, a decryption parameter corresponding to the transaction order identifier is determined, where the decryption parameter includes a predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the ciphertext transaction data; when the current number of subordinate private keys reaches the predetermined number of subordinate private keys, a combined private key is obtained based on the first subordinate private key and a plurality of other private keys, where the other private keys include a master private key; the ciphertext transaction data is decrypted based on the combined private key to obtain plaintext transaction data. By collecting a predetermined number of subordinate private keys according to the decryption parameter and combining them with the master private key to generate a combined private key, and by controlling the combination of keys, it is ensured that decryption can only be completed under preset security conditions, achieving the purpose of securely decrypting the ciphertext transaction data and obtaining the plaintext transaction data, thereby realizing the technical effect of enhancing the security of the decryption process, and further solving the technical problem that it is difficult to fully guarantee the security of the decryption process when decrypting the ciphertext transaction data, resulting in the leakage of transaction data. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] The drawings described herein are used to provide a further understanding of the present invention, and constitute a part of this application. The schematic embodiments of the present invention and their descriptions are used to explain the present invention and do not constitute an improper limitation of the present invention. In the drawings:

[0017] Figure 1 is a flowchart of the transaction data decryption method according to an embodiment of the present invention;

[0018] Figure 2 is a flowchart of the transaction data decryption method in an alternative embodiment of the present invention;

[0019] Figure 3 is a schematic diagram of a bidding process in an alternative embodiment of the present invention;

[0020] Figure 4 is a block diagram of the structure of the transaction data decryption device according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE EMBODIMENTS

[0021] In order to enable those skilled in the art to better understand the solution of the present invention, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

[0022] It should be noted that the terms "first", "second", etc. in the description, claims and above-mentioned drawings of the present invention are used to distinguish similar objects, and do not necessarily have to be used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so that the embodiments of the present invention described here can be implemented in an order other than those illustrated or described here. In addition, the terms "comprising" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units does not necessarily have to be limited to those steps or units clearly listed, but may include other steps or units not clearly listed or inherent to these processes, methods, products or devices.

[0023] First, some nouns or terms that appear in the process of describing the embodiments of the present application are applicable to the following explanations:

[0024] DKG: DKG (Distributed Key Generation), that is, distributed key generation, is a cryptographic protocol that allows multiple participating parties to jointly generate a public key, while the corresponding private key is distributed among the participating parties.

[0025] Zero-knowledge proof: Zero-knowledge proof is a cryptographic technique that allows one party (the prover) to prove to another party (the verifier) that a certain statement is true without revealing any information other than the fact that the statement is true.

[0026] Multi-party secure computation: Multi-party secure computation is a cryptographic technique that allows multiple participating parties to jointly compute a function while keeping the privacy of their respective inputs.

[0027] Embodiment 1

[0028] According to an embodiment of the present invention, an embodiment of a method for decrypting transaction data is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although the logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in a different order from that here.

[0029] Figure 1 is a flowchart of the method for decrypting transaction data according to an embodiment of the present invention. As Figure 1 shown, the method includes the following steps:

[0030] S102, receiving a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first subordinate private key and a transaction order identifier;

[0031] In step S102 provided by the present application, a transaction data decryption request corresponding to the target account is received.

[0032] Among them, the target account is involved. The target account is a specific account that needs to perform decryption operations on relevant transaction data during the transaction data decryption process. The target account is the owner or related party of the transaction data.

[0033] Among them, the transaction data decryption request is involved. The transaction data decryption request is initiated by the target account for performing the request operation and is used to trigger the decryption operation of specific transaction data.

[0034] Among them, the first subordinate private key is involved. The first subordinate private key is the private key that needs to be used during the decryption process and corresponds to the target account.

[0035] Among them, the transaction order identifier is involved. The transaction order identifier is used to uniquely identify the transaction order, which can help quickly locate and process the ciphertext transaction data corresponding to the transaction order identifier, ensuring the accuracy and efficiency of the decryption operation.

[0036] Receiving the transaction data decryption request corresponding to the target account and clarifying the transaction order identifier helps quickly locate the ciphertext transaction data to be decrypted. At the same time, carrying the first subordinate private key provides the necessary authentication and authorization information for the decryption process, ensuring that only legitimate requestors can trigger the decryption operation, thereby guaranteeing the security and privacy of transaction data and providing a basis for subsequent secure decryption and data processing.

[0037] S104. In response to the transaction data decryption request, determine the decryption parameters corresponding to the transaction order identifier. Among them, the decryption parameters include the predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required for decrypting the ciphertext transaction data.

[0038] In step S104 provided by the present application, the transaction data decryption request is responded to, and the decryption parameters corresponding to the transaction order identifier are determined.

[0039] Among them, the decryption parameters are involved. The decryption parameters are the parameters corresponding to the transaction order identifier during the decryption process, and the decryption parameters are used to ensure that the decryption process meets the preset security and logical requirements.

[0040] Among them, the predetermined number of subordinate private keys is involved. The predetermined number of subordinate private keys refers to the minimum number of subordinate private keys preset to participate in the decryption during the decryption process. The predetermined number of subordinate private keys ensures that the decryption operation can be completed only when the predetermined number of subordinate private keys participate.

[0041] Among them, a subordinate private key is involved. The subordinate private key is the private key used in the decryption process. And in the decryption process, with only the subordinate private key, the decryption operation cannot be completed. It must cooperate with the master private key to complete the decryption operation. Multiple subordinate private keys can be held by multiple participating parties respectively.

[0042] Among them, ciphertext transaction data is involved. The ciphertext transaction data is the transaction data that has been encrypted, and its content cannot be directly read or understood before decryption.

[0043] By determining the decryption parameters, it is ensured that the decryption process meets the preset security and logical requirements. Through the preset requirement for the number of subordinate private keys, that is, the predetermined number of subordinate private keys, it is ensured that the decryption operation can be carried out only when the predetermined number of subordinate private keys participate, effectively preventing the risk of transaction data leakage caused by the leakage of private keys or the tampering of a single private key during the decryption process by multiple parties. And the requirement for the predetermined number of subordinate private keys requires multiple participating parties to provide their respective subordinate private keys, thereby realizing decentralized key management and avoiding the risk of transaction data leakage caused by the complexity of multiple-party participation during the decryption process.

[0044] S106. When the current number of subordinate private keys reaches the predetermined number of subordinate private keys, a combined private key is obtained based on the first subordinate private key and multiple other private keys, where the other private keys include the master private key.

[0045] In step S106 provided in this application, a combined private key is obtained according to the first subordinate private key and multiple other private keys.

[0046] Among them, the current number of subordinate private keys is involved. The current number of subordinate private keys is the number of subordinate private keys that have been collected during the decryption process. These subordinate private keys are provided by the accounts of the parties participating in the decryption.

[0047] Among them, other private keys are involved. The other private keys are the private keys that have been collected before receiving the first subordinate private key, including other subordinate private keys and the master private key.

[0048] Among them, a combined private key is involved. The combined private key is a combination of multiple subordinate private keys and the master private key, which is used to complete the final secret operation.

[0049] Among them, the master private key is involved. The master private key plays a leading role in the decryption process, that is, the private key that must be used. The master private key can be held by the core part of the system or a specific authorized party to ensure the ultimate control of the decryption operation.

[0050] By requiring the joint participation of multiple subordinate private keys and the master private key, it is ensured that decryption can only be completed when preset conditions are met (such as a predetermined number of subordinate private keys and the participation of the master private key), preventing unauthorized single parties or a small number of parties from decrypting data without permission, thus protecting the confidentiality and integrity of transaction data. And the participation of the master private key provides the ultimate control over the decryption operation, ensuring the controllability of the decryption process involving multiple parties. In addition, by requiring the final approval of the system or the authorizing party to complete the final decryption, the security and controllability of the transaction data decryption process are further enhanced.

[0051] S108. Decrypt the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data.

[0052] In step S108 provided in this application, the ciphertext transaction data is decrypted according to the combined private key to obtain the plaintext transaction data.

[0053] Among them, the plaintext transaction data is involved. The plaintext transaction data is the transaction data in a readable and understandable form obtained after decrypting the ciphertext transaction data through the combined private key.

[0054] By controlling the combination of keys, it is ensured that decryption can only be completed when preset security conditions are met, thus effectively preventing the leakage of transaction data, ensuring the security and integrity of the data, solving the uncontrollability of the decryption process caused by the participation of multiple parties, and then effectively avoiding the problem of data leakage risk and improving the overall security of the transaction.

[0055] Through the above steps S102 - S108, receive the transaction data decryption request corresponding to the target account. Among them, the transaction data decryption request carries the first subordinate private key and the transaction order identifier; in response to the transaction data decryption request, determine the decryption parameters corresponding to the transaction order identifier. Among them, the decryption parameters include the predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the ciphertext transaction data; when the current number of subordinate private keys reaches the predetermined number of subordinate private keys, obtain the combined private key according to the first subordinate private key and multiple other private keys. Among them, the other private keys include the master private key; decrypt the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data. By collecting a predetermined number of subordinate private keys according to the decryption parameters and combining them with the master private key to generate the combined private key, and by controlling the combination of keys, it is ensured that decryption can only be completed when preset security conditions are met, achieving the purpose of securely decrypting the ciphertext transaction data and obtaining the plaintext transaction data, thus realizing the technical effect of enhancing the security of the decryption process, and further solving the technical problem that it is difficult to fully guarantee the security of the decryption process when decrypting the ciphertext transaction data, resulting in the leakage of transaction data.

[0056] As an alternative embodiment, decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data includes: decrypting the ciphertext transaction data according to the combined private key to obtain the transaction data to be confirmed; determining the hash value to be confirmed corresponding to the transaction data to be confirmed; determining the initial hash value corresponding to the transaction order identifier; comparing the hash value to be confirmed with the initial hash value to obtain the first comparison result; and determining the plaintext transaction data when the first comparison result is that the hash value to be confirmed is the initial hash value, where the plaintext transaction data is the transaction data to be confirmed.

[0057] In this embodiment, the specific steps before decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data are described.

[0058] Among them, the transaction data to be confirmed is involved. The transaction data to be confirmed is the data obtained after initially decrypting the ciphertext transaction data using the combined private key during the decryption process. At this time, the data has not been finally confirmed as valid or correct plaintext transaction data, and its integrity and consistency need to be further verified.

[0059] Among them, the hash value to be confirmed is involved. The hash value to be confirmed is the hash value calculated for the transaction data to be confirmed.

[0060] Among them, the initial hash value is involved. The initial hash value is the hash value calculated for the original transaction data before the transaction data is encrypted, and is used to verify whether the decrypted data is consistent with the original data later.

[0061] Among them, the first comparison result is involved. The first comparison result is the result obtained by comparing the hash value to be confirmed with the initial hash value. The purpose of the comparison is to verify whether the decrypted transaction data is consistent with the original transaction data.

[0062] In the steps involved in this embodiment, first, decrypt the ciphertext transaction data according to the combined private key to obtain the transaction data to be confirmed. Then, determine the hash value to be confirmed corresponding to the transaction data to be confirmed, and determine the initial hash value corresponding to the transaction order identifier. Next, compare the hash value to be confirmed with the initial hash value to obtain the first comparison result. Finally, when the first comparison result is that the hash value to be confirmed is the initial hash value, determine the plaintext transaction data, where the plaintext transaction data is the transaction data to be confirmed.

[0063] By initially decrypting the ciphertext transaction data using the combined private key to obtain the transaction data to be confirmed, calculating its hash value (the hash value to be confirmed), and then comparing it with the hash value of the original transaction data (the initial hash value), it is ensured that the transaction data has not been tampered with or damaged, and the integrity of the data.

[0064] As an alternative embodiment, a combined private key is obtained based on a first subordinate private key and a plurality of other private keys, including: in the case where the decryption parameter includes a predetermined number of master private keys and the current number of master private keys reaches the predetermined number of master private keys, a combined private key is obtained based on the first subordinate private key and the plurality of other private keys.

[0065] In this embodiment, the specific steps of obtaining a combined private key based on a first subordinate private key and a plurality of other private keys are described.

[0066] Among them, a predetermined number of master private keys is involved. The predetermined number of master private keys is the minimum number of master private keys preset to participate in decryption during the decryption process. The predetermined number of master private keys is used to ensure that the decryption operation can be completed only when a predetermined number of master private keys participate.

[0067] Among them, the current number of master private keys is involved. The current number of master private keys is the number of master private keys that have been collected during the decryption process.

[0068] In the steps involved in this embodiment, in the case where the decryption parameter includes a predetermined number of master private keys, only when the actually collected current number of master private keys reaches the predetermined number of master private keys, will the first subordinate private key and a plurality of other private keys (including master private keys) be combined to perform the final decryption operation.

[0069] In the case where the decryption parameter includes a predetermined number of master private keys and the current number of master private keys reaches the predetermined number, then the first subordinate private key and a plurality of other private keys (including master private keys) are used to obtain a combined private key, ensuring that the decryption operation can continue only when the preset security condition (i.e., a predetermined number of master private keys participate) is met, thus effectively preventing unauthorized single parties or a small number of parties from decrypting data without permission, ensuring the controllability of the decryption process involving multiple parties, and further improving the security of data transactions.

[0070] As an alternative embodiment, before obtaining a combined private key based on a first subordinate private key and a plurality of other private keys, it further includes: in the case where the decryption parameter includes a decryption timestamp, determining a request timestamp corresponding to the decryption request of the transaction data; comparing the request timestamp with the decryption timestamp to obtain a comparison result; in the case where the comparison result is that the request timestamp is equal to or later than the decryption timestamp, determining the current number of subordinate private keys.

[0071] In this embodiment, the specific steps before obtaining a combined private key based on a first subordinate private key and a plurality of other private keys are described.

[0072] Among them, a decryption timestamp is involved. The decryption timestamp is a preset time marker used to specify the earliest time point at which the transaction data can be decrypted. This decryption timestamp is used to ensure that the transaction data cannot be decrypted before a specific time, and only when this time point is reached or exceeded is the decryption operation allowed to proceed. Thus, it provides time-based security control to prevent data from being leaked prematurely.

[0073] Among them, a request timestamp is involved. The request timestamp is a time marker carried in the transaction data decryption request, indicating the specific time point when the decryption request is initiated. This request timestamp is used to record the initiation time of the decryption request for comparison with the decryption timestamp to verify whether the decryption request meets the time conditions.

[0074] In the steps involved in this embodiment, when the decryption parameter includes the decryption timestamp, first, the request timestamp corresponding to the transaction data decryption request is determined. Then, the request timestamp is compared with the decryption timestamp to obtain a comparison result. Finally, when the comparison result is that the request timestamp is equal to or later than the decryption timestamp, the current number of subordinate private keys is further determined.

[0075] When the decryption parameter contains the decryption timestamp, by comparing the request timestamp in the transaction data decryption request with the preset decryption timestamp, it is ensured that further decryption operations are allowed and the current number of subordinate private keys is determined only when the request timestamp is equal to or later than the decryption timestamp, providing time-based security control to further prevent the transaction data from being prematurely decrypted before the predetermined time, thereby ensuring the legality of the decryption request.

[0076] As an alternative embodiment, decrypting the encrypted transaction data using the combined private key to obtain the plaintext transaction data further includes: when the first encrypted data is carried in the transaction data decryption request, determining the current subordinate decryption data corresponding to the multiple subordinate private keys in the combined private key respectively, where the corresponding encrypted data is obtained by encrypting the corresponding initial subordinate decryption data, and the corresponding initial subordinate decryption data is obtained by decrypting the encrypted transaction data using the corresponding subordinate private key; determining the original hash values corresponding to the initial subordinate decryption data corresponding to the multiple subordinate private keys respectively, and determining the current hash values corresponding to the current subordinate decryption data corresponding to the multiple subordinate private keys respectively; comparing the original hash values and the current hash values corresponding to the multiple subordinate private keys respectively to obtain a verification result; when the verification result is that the current hash value corresponding to each subordinate private key is the corresponding original hash value, using the master private key in the combined private key to decrypt the encrypted transaction data to obtain the master decryption data; and obtaining the plaintext transaction data based on the multiple current subordinate decryption data and the master decryption data.

[0077] In this embodiment, the specific steps of decrypting ciphertext transaction data according to the combined private key to obtain plaintext transaction data are described.

[0078] Among them, the first encrypted data is involved. The first encrypted data is the encrypted data carried in the transaction data decryption request, which is obtained by encrypting the initial decryption data corresponding to the first subordinate private key.

[0079] Among them, the encrypted data is involved. The encrypted data is the encrypted data obtained by encrypting the initial decryption data corresponding to the corresponding subordinate private key.

[0080] Among them, the current decryption data is involved. The current decryption data is the data obtained by decrypting the corresponding encrypted data.

[0081] Among them, the initial decryption data is involved. The initial decryption data is the data obtained by partially decrypting the ciphertext transaction data using the subordinate private key during the decryption process.

[0082] Among them, the original hash value is involved. The original hash value is the hash value calculated for the initial decryption data.

[0083] Among them, the current hash value is involved. The current hash value is the hash value calculated for the current decryption data.

[0084] Among them, the verification result is involved. The verification result is the result obtained by comparing the current hash value with the original hash value.

[0085] Among them, the main decryption data is involved. The main decryption data is the data obtained by partially decrypting the ciphertext transaction data using the main private key.

[0086] In the steps involved in this embodiment, when the first encrypted data is carried in the transaction data decryption request, first, according to the encrypted data respectively corresponding to multiple subordinate private keys in the combined private key, determine the current decryption data respectively corresponding to the multiple subordinate private keys. Then, determine the original hash value corresponding to the initial decryption data respectively corresponding to the multiple subordinate private keys, and determine the current hash value corresponding to the current decryption data respectively corresponding to the multiple subordinate private keys. Next, compare the original hash value and the current hash value respectively corresponding to the multiple subordinate private keys to obtain the verification result. When the verification result is that the current hash value corresponding to each subordinate private key is the corresponding original hash value, use the main private key in the combined private key to decrypt the ciphertext transaction data to obtain the main decryption data. Finally, based on the multiple current decryption data and the main decryption data, obtain the plaintext transaction data.

[0087] Through the above steps, when the first encrypted data is carried in the transaction data decryption request, by verifying the consistency between the current hash value of the current decrypted data corresponding to each slave private key and the original hash value corresponding to the initial decrypted data from the slave, it helps to determine whether the data decrypted by the slave private key has been tampered with during the transaction data decryption process. Only after all verifications pass, that is, after all the decrypted data from the slave is verified to be correct, the master private key in the combined private key is used for further decryption, which further improves the security and reliability of the decryption process, prevents potential leakage of data in the decryption stage, and thus further safeguards the confidentiality of transaction data and the security of the multi-party participation decryption mechanism.

[0088] As an alternative embodiment, decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data includes: determining the decryption positions corresponding to multiple private keys in the combined private key; and in the order of the decryption positions corresponding to the multiple private keys, sequentially using the corresponding private keys to decrypt the ciphertext transaction data to obtain the plaintext transaction data.

[0089] In this embodiment, the specific steps of decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data are described.

[0090] Among them, the decryption position is involved, and the decryption position represents the order in which the corresponding private key decrypts the ciphertext transaction data.

[0091] In the steps involved in this embodiment, first, determine the decryption positions corresponding to multiple private keys in the combined private key. Then, in the order of the decryption positions corresponding to the multiple private keys, sequentially use the corresponding private keys to decrypt the ciphertext transaction data to obtain the plaintext transaction data.

[0092] By determining the decryption positions corresponding to multiple private keys in the combined private key and sequentially using the corresponding private keys to decrypt the ciphertext transaction data according to the order of the decryption positions, the orderliness of the decryption process is ensured, and the controllability and reliability of the entire decryption process are enhanced.

[0093] As an alternative embodiment, before decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data, it further includes: when the current number of slave private keys has not reached the predetermined number of slave private keys, determining whether the waiting result of receiving the second decryption request corresponding to the transaction order identifier is received within the waiting time range, where the second decryption request carries a second slave private key; and when the waiting result is that the second decryption request is received, updating the current number of slave private keys until the updated number of slave private keys reaches the predetermined number of slave private keys, and obtaining the combined private key based on the second slave private key and multiple other private keys.

[0094] In this embodiment, the specific steps before decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data are described.

[0095] Among them, a waiting time range is involved. The waiting time range is a time window set when the predetermined number of subordinate private keys is not reached, and is used to wait for additional subordinate private keys to participate in the decryption.

[0096] Among them, a second decryption request is involved. The second decryption request is an additional decryption request received within the waiting time range.

[0097] Among them, a waiting result is involved. The waiting result is the result of whether an additional decryption request is received within the waiting time range.

[0098] Among them, a second subordinate private key is involved. The second subordinate private key is the subordinate private key carried in the second decryption request, and is used to supplement the current number of subordinate private keys and participate in subsequent decryption.

[0099] In the steps involved in this embodiment, when the current number of subordinate private keys does not reach the predetermined number of subordinate private keys, first, determine the waiting result of whether a second decryption request corresponding to the transaction order identifier is received within the waiting time range. Then, when the waiting result is that a second decryption request is received, update the current number of subordinate private keys until the updated number of subordinate private keys reaches the predetermined number of subordinate private keys, and obtain the combined private key according to the second subordinate private key and multiple other private keys.

[0100] When the current number of subordinate private keys does not reach the predetermined number, by setting a waiting time range and receiving an additional second decryption request (carrying the second subordinate private key), the current number of subordinate private keys can be dynamically updated until the number of private keys required for decryption is satisfied, thereby improving the adaptability of the decryption process and helping to ensure that the decryption operation is performed only after meeting the security conditions.

[0101] Based on the above embodiments and optional embodiments, an optional implementation manner is provided, which is specifically described below.

[0102] In the related art, during the execution of a transaction, it is necessary to decrypt the ciphertext transaction data. Due to reasons such as the complexity of multi-party participation in the transaction process, it is difficult to fully guarantee the security of the decryption process when decrypting the ciphertext transaction data, resulting in the technical problem of transaction data leakage.

[0103] For the above problems, no effective solutions have been proposed yet.

[0104] In view of this, in an alternative embodiment of the present invention, a method for decrypting transaction data is provided, which can effectively solve the technical problem that due to the complexity of multi-party participation in the transaction process and other reasons, it is difficult to fully ensure the security of the decryption process when decrypting ciphertext transaction data, resulting in the leakage of transaction data.

[0105] Figure 2 is a flowchart of the method for decrypting transaction data in an alternative embodiment of the present invention. Figure 3 is a schematic diagram of the bidding process in an alternative embodiment of the present invention. As Figure 2 , Figure 3 shown, the following is a detailed description.

[0106] S1. Receive a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first subordinate private key and a transaction order identifier.

[0107] S2. In response to the transaction data decryption request, determine decryption parameters corresponding to the transaction order identifier, where the decryption parameters include a predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the ciphertext transaction data.

[0108] For example, in a certain bidding system, there are n participating parties, including the tenderer, the bidding system, and other participating parties (such as bidders and notaries). The DKG protocol is used to generate the public key PK of the system and the corresponding distributed private key SK. The tenderer and the bidding system each hold a master key (the same as the above-mentioned master private key), and the other n - 2 participating parties each hold a partial key generated by DKG (the same as the above-mentioned subordinate private key).

[0109] For example, in the bid opening stage, it is necessary to decrypt the bid information (the same as the above-mentioned ciphertext transaction data). At this time, it is necessary to receive and respond to the bid information decryption request.

[0110] S3. When the decryption parameters include a decryption timestamp, determine the request timestamp corresponding to the transaction data decryption request; compare the request timestamp with the decryption timestamp to obtain a comparison result; when the comparison result is that the request timestamp is equal to or later than the decryption timestamp, determine the current number of private keys.

[0111] For example, in the tender information release stage, the tenderer encrypts the tender information using the system public key PK and publishes it to the system. The time-lock encryption technology is used to ensure that the tender information cannot be decrypted before the specified time (the same as the above-mentioned decryption timestamp). The hash value of the tender information is recorded on the blockchain to ensure its integrity.

[0112] S4. Obtain a combined private key based on the first subordinate private key and multiple other private keys, where the other private keys include the master private key.

[0113] After the opening bid time is reached, the system automatically triggers the opening bid process. At least t bidders, the tenderer, and the bidding system cooperate to partially decrypt the encrypted bidding information using some of the private keys or the master keys they hold respectively. Each step of the decryption process is recorded on the blockchain to ensure the transparency and auditability of the process.

[0114] Specifically, S4 includes:

[0115] When the current number of subordinate private keys reaches the predetermined number of subordinate private keys, the decryption parameter includes the predetermined number of master private keys, and the current number of master private keys reaches the predetermined number of master private keys, a combined private key is obtained based on the first subordinate private key and multiple other private keys;

[0116] When the current number of subordinate private keys does not reach the predetermined number of subordinate private keys, it is determined whether the waiting result of the second decryption request corresponding to the transaction order identifier is received within the waiting time range, where the second decryption request carries a second subordinate private key; when the waiting result is that the second decryption request is received, the current number of subordinate private keys is updated until the updated number of subordinate private keys reaches the predetermined number of subordinate private keys, and a combined private key is obtained based on the second subordinate private key and multiple other private keys.

[0117] For example, set the opening bid threshold t (the same as the above-mentioned predetermined number of subordinate private keys), indicating that at least t bidders are required to participate in the opening bid. Set the decryption threshold to t + 2 (the same as the above-mentioned predetermined number of subordinate private keys and the predetermined number of master private keys), that is, the keys of t bidders plus the two master keys of the tenderer and the bidding system are required to complete the decryption. Then deploy a smart contract to the blockchain network to manage the entire bidding process.

[0118] S5, decrypt the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data.

[0119] Specifically, S5 may further include:

[0120] S501, decrypt the ciphertext transaction data according to the combined private key to obtain the transaction data to be confirmed;

[0121] S502, determine the hash value to be confirmed corresponding to the transaction data to be confirmed;

[0122] S503, determine the initial hash value corresponding to the transaction order identifier;

[0123] S504, compare the hash value to be confirmed with the initial hash value to obtain the first comparison result;

[0124] S505, when the first comparison result is that the hash value to be confirmed is the initial hash value, determine the plaintext transaction data, where the plaintext transaction data is the transaction data to be confirmed.

[0125] Specifically, S5 may include:

[0126] S511, when the first encrypted data is carried in the transaction data decryption request, determine the current sub-decryption data corresponding to multiple sub-private keys in the combined private key respectively, where the corresponding encrypted data is obtained by encrypting the corresponding initial sub-decryption data, and the corresponding initial sub-decryption data is obtained by decrypting the ciphertext transaction data according to the corresponding sub-private key;

[0127] S512, determine the original hash values corresponding to the initial sub-decryption data corresponding to multiple sub-private keys respectively, and determine the current hash values corresponding to the current sub-decryption data corresponding to multiple sub-private keys respectively;

[0128] S513, compare the original hash values and the current hash values corresponding to multiple sub-private keys respectively to obtain a verification result;

[0129] S514, when the verification result is that the current hash value corresponding to each sub-private key is the corresponding original hash value, use the main private key in the combined private key to decrypt the ciphertext transaction data to obtain the main decryption data;

[0130] S515, obtain the plaintext transaction data according to multiple current sub-decryption data and the main decryption data.

[0131] Specifically, S5 may include:

[0132] S521, determine the decryption ranks corresponding to multiple private keys in the combined private key respectively;

[0133] S522, in the order of the decryption ranks corresponding to multiple private keys respectively, use the corresponding private keys in turn to decrypt the ciphertext transaction data to obtain the plaintext transaction data.

[0134] Through the above steps, the following describes a specific example in detail.

[0135] A1. Preparation stage:

[0136] Initialize the bidding and tendering system. The system includes n participants, including the tenderer, the tendering system, and other participants (such as bidders and notaries). Use the DKG protocol to generate the public key PK of the system and the corresponding distributed private key SK. The tenderer and the tendering system each hold a main key. The other n - 2 participants each hold a partial key generated by DKG. Set the opening bid threshold t, indicating that at least t bidders need to participate to conduct the opening bid. Set the decryption threshold to t + 2, that is, the keys of t bidders plus the two main keys of the tenderer and the tendering system are required to complete the decryption. Deploy the smart contract to the blockchain network to manage the entire bidding and tendering process.

[0137] For example, a total of 10 participants use the DKG protocol to generate the system public key PK and the distributed private key SK. The tenderer and the tendering system each hold a master key. Five companies and three notaries each hold a partial key generated by DKG. The opening threshold t is set to 4, that is, at least 4 bidders need to participate to conduct the tender opening. The decryption threshold is set to t + 2 = 6, that is, the keys of 4 bidders plus the two master keys of the tenderer and the tendering system are required to complete the decryption. A smart contract is deployed on the blockchain platform to manage the entire tendering process.

[0138] A2. Tendering information release stage:

[0139] The tenderer encrypts the tendering information with the system public key PK and publishes it to the system. The time-lock encryption technology is used to ensure that the tendering information cannot be decrypted before the specified time. The hash value of the tendering information is recorded on the blockchain to ensure its integrity.

[0140] For example, the tenderer encrypts the detailed project requirements with PK and publishes them. The encrypted tendering information and its hash value are recorded on the blockchain.

[0141] A3. Bidding stage:

[0142] The bidder encrypts its bidding information with the system public key PK. The encrypted bidding information is submitted to the system, and its hash value is recorded on the blockchain. The bidder uses zero-knowledge proof technology to prove that the submitted bidding information meets the tender requirements (such as the budget range) without disclosing the specific content.

[0143] For example, five companies encrypt their tendering proposals and quotations with PK respectively. The encrypted bidding information is submitted to the system, and its hash value is recorded on the blockchain. Each company uses zero-knowledge proof technology to prove that its bidding price is within the specified budget range without disclosing the specific amount. Based on the encrypted tendering information, five entities release the corresponding bidding information.

[0144] A4. Tender opening stage:

[0145] After the tender opening time arrives, the system automatically triggers the tender opening process. At least t bidders, the tenderer and the tendering system cooperate to partially decrypt the encrypted bidding information using their respective partial keys or master keys. Each step of the decryption process is recorded on the blockchain to ensure the transparency and audibility of the process.

[0146] For example, after reaching the scheduled bid opening time, the system automatically triggers the bid opening process. At least four bidders, the tenderer, and the bidding system use their respective partial keys or the master key to partially decrypt the encrypted bidding information. The system uses multi-party secure computing technology to collect all partial decryption results, complete the final decryption, and reveal all bidding information. Each step of the decryption process is recorded on the blockchain, including the identity identifiers of the parties participating in the decryption (under the premise of protecting privacy). When the bidding information sent by at least four parties is received (four encrypted bidding information are received), the bidding information is decrypted.

[0147] A5. Bid evaluation and result publicity stage:

[0148] Within the tenderer, multi-party secure computing is used to statistically score different bid evaluation objects. Multi-party secure sorting is used to obtain the bid document with the highest score. The bid evaluation results are recorded on the blockchain.

[0149] Through the above optional implementation methods, at least the following beneficial effects can be achieved:

[0150] (1) Compared with the related technology, the present invention ensures that decryption can only be completed under the premise of meeting the preset security conditions by controlling the combination of keys, achieving the purpose of securely decrypting the ciphertext transaction data and obtaining the plaintext transaction data, thereby realizing the technical effect of enhancing the security of the decryption process, and further solving the technical problem that it is difficult to fully guarantee the security of the decryption process when decrypting the ciphertext transaction data, resulting in the leakage of transaction data.

[0151] (2) Compared with the related technology, the present invention ensures that the decryption operation can only continue when the number of current master private keys reaches the predetermined number in the case that the decryption parameter includes the predetermined number of master private keys. By combining the first slave private key with multiple other private keys, it effectively prevents unauthorized single parties or a small number of parties from decrypting the data without permission, ensuring the controllability of the decryption process involving multiple parties, and further improving the security of data transactions.

[0152] (3) Compared with the related technology, the present invention ensures that further decryption operations are only allowed and the current number of slave private keys is determined when the request timestamp in the transaction data decryption request is equal to or later than the preset decryption timestamp, providing time-based security control.

[0153] (4) Compared with the related art, the present invention helps to determine whether the data decrypted by the slave private key is tampered with during the decryption process of transaction data by verifying the consistency between the current hash value of the current slave decrypted data corresponding to each slave private key and the original hash value corresponding to the initial slave decrypted data. Only after all verifications pass, that is, all slave decrypted data is verified correctly, the master private key in the combined private key is used for further decryption, which further improves the security and reliability of the decryption process and prevents potential leakage of data during the decryption stage.

[0154] (5) Compared with the related art, the present invention combines distributed key generation (DKG), threshold encryption, and time-lock encryption technologies to ensure that bid information cannot be viewed by a single entity or a small number of entities before the bid opening, thereby significantly reducing the risk of information leakage, eliminating the dependence on a single trusted third party, and reducing system risks. In addition, the system can flexibly adjust the number of participants, the bid opening threshold, and the decryption threshold according to different project requirements. At the same time, blockchain technology is used to record key operations, providing an immutable audit log, which enhances the transparency and traceability of the system. Through the decryption control involving multiple parties and the immutable nature of the blockchain, the security of information in the bidding process is ensured.

[0155] It should be noted that for the foregoing method embodiments, for the sake of simple description, they are all expressed as a series of action combinations. However, those skilled in the art should know that the present invention is not limited by the described action sequence, because according to the present invention, certain steps can be performed in other sequences or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification are all preferred embodiments, and the actions and modules involved are not necessarily essential to the present invention.

[0156] Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiments can be implemented by means of software plus a necessary general hardware platform. Of course, it can also be implemented by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. The computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disc), including several instructions for causing a terminal device (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods of the various embodiments of the present invention.

[0157] Embodiment 2

[0158] According to an embodiment of the present invention, there is also provided a device for implementing the above transaction data decryption method. Figure 4 It is a structural block diagram of the transaction data decryption device according to an embodiment of the present invention, as Figure 4As shown in the figure, the device includes: a receiving module 402, a response module 404, a first determination module 406, and a second determination module 408. The device will be described in detail below.

[0159] The receiving module 402 is configured to receive a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first subordinate private key and a transaction order identifier; the response module 404 is connected to the receiving module 402 and is configured to determine decryption parameters corresponding to the transaction order identifier in response to the transaction data decryption request, where the decryption parameters include a predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the encrypted transaction data; the first determination module 406 is connected to the response module 404 and is configured to obtain a combined private key based on the first subordinate private key and multiple other private keys when the current number of subordinate private keys reaches the predetermined number of subordinate private keys, where the other private keys include a master private key; the second determination module 408 is connected to the first determination module 406 and is configured to decrypt the encrypted transaction data based on the combined private key to obtain the plaintext transaction data.

[0160] It should be noted here that the above receiving module 402, response module 404, first determination module 406, and second determination module 408 correspond to steps S102 to S108 in the implementation of the transaction data decryption method. The instances and application scenarios implemented by the multiple modules and the corresponding steps are the same, but are not limited to the content disclosed in the above Embodiment 1.

[0161] Embodiment 3

[0162] According to another aspect of the embodiments of the present invention, an electronic device is further provided, including: a processor; a memory for storing processor-executable instructions, where the processor is configured to execute the instructions to implement the transaction data decryption method of any one of the above.

[0163] Embodiment 4

[0164] According to another aspect of the embodiments of the present invention, a computer-readable storage medium is further provided. When the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device can execute the transaction data decryption method of any one of the above.

[0165] The serial numbers of the above embodiments of the present invention are only for description and do not represent the advantages or disadvantages of the embodiments.

[0166] In the above embodiments of the present invention, the descriptions of the respective embodiments have their own emphases. For parts not detailed in a certain embodiment, reference may be made to the relevant descriptions of other embodiments.

[0167] In several embodiments provided by this application, it should be understood that the disclosed technical content can be implemented in other ways. Among them, the device embodiments described above are merely illustrative. For example, the division of the units can be a logical function division. In actual implementation, there can be other division methods. For example, multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the displayed or discussed couplings or direct couplings or communication connections between each other can be through some interfaces. The indirect couplings or communication connections of units or modules can be in electrical or other forms.

[0168] The units described as separate components may or may not be physically separated. The components displayed as units may or may not be physical units, that is, they can be located in one place or distributed to multiple units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0169] In addition, in each embodiment of the present invention, the functional units can be integrated into a processing unit, or each unit can exist physically alone, or two or more units can be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

[0170] If the above-mentioned integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art, or all or part of this technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in each embodiment of the present invention. The foregoing storage medium includes: USB flash drives, read-only memories (ROMs), random access memories (RAMs), mobile hard disks, magnetic disks, or optical discs, and other various media that can store program codes.

[0171] The above are only the preferred embodiments of the present invention. It should be noted that for those of ordinary skill in the art, without departing from the principle of the present invention, several improvements and refinements can be made, and these improvements and refinements should also be regarded as the protection scope of the present invention.

Claims

1. A method for decrypting transaction data, characterized in that, including: Receiving a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first subordinate private key and a transaction order identifier; In response to the transaction data decryption request, determining decryption parameters corresponding to the transaction order identifier, where the decryption parameters include a predetermined number of subordinate private keys, and the predetermined number of subordinate private keys represents the number of subordinate private keys required to decrypt the encrypted transaction data; When the current number of subordinate private keys reaches the predetermined number of subordinate private keys, obtaining a combined private key based on the first subordinate private key and multiple other private keys, where the other private keys include a master private key; Decrypting the encrypted transaction data based on the combined private key to obtain plaintext transaction data.

2. The method according to claim 1, wherein The decrypting the encrypted transaction data based on the combined private key to obtain plaintext transaction data includes: Decrypting the encrypted transaction data based on the combined private key to obtain transaction data to be confirmed; Determining a hash value to be confirmed corresponding to the transaction data to be confirmed; Determining an initial hash value corresponding to the transaction order identifier; Comparing the hash value to be confirmed with the initial hash value to obtain a first comparison result; When the first comparison result is that the hash value to be confirmed is the initial hash value, determining the plaintext transaction data, where the plaintext transaction data is the transaction data to be confirmed.

3. The method according to claim 1, characterized in that, Obtaining a combined private key based on the first subordinate private key and multiple other private keys includes: When the decryption parameters include a predetermined number of master private keys and the current number of master private keys reaches the predetermined number of master private keys, obtaining a combined private key based on the first subordinate private key and multiple other private keys.

4. The method according to claim 1, characterized in that Before obtaining the combined private key based on the first subordinate private key and multiple other private keys, it further includes: When the decryption parameters include a decryption timestamp, determining a request timestamp corresponding to the transaction data decryption request; Comparing the request timestamp with the decryption timestamp to obtain a comparison result; When the comparison result is that the request timestamp is equal to or later than the decryption timestamp, determining the current number of subordinate private keys.

5. The method according to claim 1, characterized in that, The decrypting the encrypted transaction data based on the combined private key to obtain plaintext transaction data further includes: When the transaction data decryption request carries first encrypted data, determining current decryption data corresponding to the multiple subordinate private keys in the combined private key respectively, where the corresponding encrypted data is obtained by encrypting the corresponding initial decryption data, and the corresponding initial decryption data is obtained by decrypting the encrypted transaction data based on the corresponding subordinate private key; Determining an original hash value corresponding to the initial decryption data corresponding to the multiple subordinate private keys respectively, and determining a current hash value corresponding to the current decryption data corresponding to the multiple subordinate private keys respectively; Comparing the original hash value and the current hash value corresponding to the multiple subordinate private keys respectively to obtain a verification result; When the current hash value corresponding to each slave private key in the verification result is the corresponding original hash value, use the master private key in the combined private key to decrypt the ciphertext transaction data to obtain the master decryption data; Obtain the plaintext transaction data based on multiple current slave decryption data and the master decryption data.

6. The method according to claim 1, wherein The decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data includes: Determine the decryption positions corresponding to multiple private keys in the combined private key; In the order of the decryption positions corresponding to multiple private keys, use the corresponding private keys in turn to decrypt the ciphertext transaction data to obtain the plaintext transaction data.

7. The method according to any one of claims 1 to 6, characterized in that Before the decrypting the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data, it further includes: When the current number of slave private keys does not reach the predetermined number of slave private keys, determine whether the waiting result of receiving the second decryption request corresponding to the transaction order identifier within the waiting time range, where the second decryption request carries a second slave private key; When the waiting result is receiving the second decryption request, update the current number of slave private keys until the updated number of slave private keys reaches the predetermined number of slave private keys, and obtain the combined private key based on the second slave private key and multiple other private keys.

8. A trading data decryption device, characterized in that, It includes: A receiving module, configured to receive a transaction data decryption request corresponding to a target account, where the transaction data decryption request carries a first slave private key and a transaction order identifier; A response module, configured to respond to the transaction data decryption request and determine decryption parameters corresponding to the transaction order identifier, where the decryption parameters include a predetermined number of slave private keys, and the predetermined number of slave private keys represents the number of slave private keys required to decrypt the ciphertext transaction data; A first determination module, configured to obtain a combined private key based on the first slave private key and multiple other private keys when the current number of slave private keys reaches the predetermined number of slave private keys, where the other private keys include a master private key; A second determination module, configured to decrypt the ciphertext transaction data according to the combined private key to obtain the plaintext transaction data.

9. An electronic device, characterized in that, It includes: A processor; A memory for storing executable instructions of the processor; Wherein, the processor is configured to execute the instructions to implement the transaction data decryption method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that, When the instructions in the computer-readable storage medium are executed by the processor of the electronic device, the electronic device can execute the transaction data decryption method according to any one of claims 1 to 7.

Images