Block chain data privacy storage method and device, equipment and storage medium

Abstract

The invention provides a block chain data privacy storage method and device, equipment and a storage medium, and relates to the technical field of data storage. According to the method, firstly, a block chain account book is partitioned to obtain a plurality of account book partitions, and a layer of account book partition concept is abstracted on the block chain account book, so that the privacy of partitioned account book data in the same block chain system is realized. According to the method, a plurality of account book partitions are divided into different data sources, then the plurality of account book partitions are bound with different data sources, and different partitions are bound with different data sources to realize physical isolation of partition account book data, that is, privacy isolation of data circulation in a block chain system is realized by the partitions, and privacy isolation of data in a physical storage layer is realized by the plurality of data sources. In addition, according to the method, a storage interface is formed by abstracting and plugin different storage media, after the target transaction is executed, the storage interface is called to write transaction execution data into a data source of a corresponding account book partition, various customized storage modes can be adapted, and the service requirements of all participants can be met.

Description

Technical Field

[0001] The present invention relates to the field of data storage technology, and in particular to a blockchain data privacy storage method, device, equipment and storage medium. Background Art

[0002] With the development of blockchain technology, blockchain systems have begun to participate more in various core businesses. Especially when it comes to financial industry data, the requirements for data privacy and storage security are particularly stringent. This makes it difficult for traditional blockchain technology that was previously oriented towards virtual currencies and edge demand scenarios to meet the basic needs of such core business scenarios.

[0003] Currently, blockchain systems store all ledger data in the same database across blockchain nodes, making them impractical for applications like the financial industry, which require strict data privacy and isolation. Furthermore, most existing blockchain systems only support structured or unstructured databases as storage methods, failing to meet the diverse storage requirements of different blockchain system participants in real-world applications. Therefore, achieving privacy-isolated data storage and customizing storage architectures are pressing challenges for those skilled in the art. Summary of the Invention

[0004] The purpose of the embodiments of the present invention is to provide a blockchain data privacy storage method, device, equipment and storage medium to solve the problem that existing blockchain technology is difficult to achieve privacy-isolated data storage and difficult to meet the customization requirements of storage architecture.

[0005] The specific technical solutions of the present invention are as follows: In a first aspect of an embodiment of the present invention, a method for storing blockchain data privacy is provided, comprising: Partition the blockchain ledger to obtain multiple ledger partitions; Bind multiple ledger partitions to different data sources and use the ledger partition names as storage identifiers; Receiving a target transaction in the ledger partition, executing the target transaction, and obtaining transaction execution data; The data source of the ledger partition is determined based on the ledger partition to which the target transaction belongs, and a storage interface is called to write the transaction execution data into the data source of the corresponding ledger partition.

[0006] Furthermore, partitioning the blockchain ledger to obtain multiple ledger partitions includes: Based on the type of blockchain business, specify the scope of organizations that can run the corresponding blockchain business in the blockchain network; According to the institutional scope specified by the blockchain business, the blockchain ledger is divided into multiple ledger partitions, and the ledger data of each ledger partition is maintained by the institution within the specified institutional scope.

[0007] Furthermore, the step of binding multiple ledger partitions to different data sources and using the ledger partition names as storage identifiers includes: Determine the data storage method for each ledger partition based on the data privacy requirements of the ledger partition; Select the corresponding data source according to the data storage method of the ledger partition, bind the ledger data of each ledger partition to the corresponding data source, and use the ledger partition name as the storage identifier of the ledger data.

[0008] Furthermore, the method further comprises: Abstract and plug-inize multiple storage media, and determine the storage plug-in based on the abstraction and plug-in results; Interface configuration is performed according to the storage plug-in to obtain a unified storage interface.

[0009] Furthermore, determining the data source of the ledger partition according to the ledger partition to which the target transaction belongs, and calling a storage interface to write the transaction execution data into the data source of the corresponding ledger partition, includes: Parse the target transaction in the ledger partition to obtain the ledger partition name to which the target transaction belongs; Get the data source bound to the ledger partition based on the ledger partition name in the target transaction; Call the pre-set storage interface, convert the transaction execution data format according to the data storage method of the ledger partition, and write the converted transaction execution data into the data source.

[0010] In a second aspect, an embodiment of the present invention provides a blockchain data privacy storage device, comprising: The ledger management module is used to partition the blockchain ledger and obtain multiple ledger partitions; A data source binding module is used to bind multiple ledger partitions to different data sources and use the ledger partition name as a storage identifier; A transaction execution module, configured to receive a target transaction in the ledger partition, execute the target transaction, and obtain transaction execution data; The data storage module is used to determine the data source of the ledger partition based on the ledger partition to which the target transaction belongs, and call the storage interface to write the transaction execution data into the data source of the corresponding ledger partition.

[0011] In a third aspect, an embodiment of the present invention further provides an electronic device, including: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the blockchain data privacy storage method described in the first aspect.

[0012] In a fourth aspect, an embodiment of the present invention further provides a computer-readable medium on which a computer program is stored. When the computer program is executed by a processor, the blockchain data privacy storage method described in the first aspect is implemented.

[0013] The beneficial effects of the present invention are as follows: the method first partitions the blockchain ledger to obtain multiple ledger partitions, abstracting a layer of ledger partitioning concept above the blockchain ledger to achieve privacy of partitioned ledger data within the same blockchain system. The multiple ledger partitions are then bound to different data sources. Different partitions are bound to different data sources to achieve physical isolation of the partitioned ledger data. Specifically, partitioning achieves privacy isolation of data flowing within the blockchain system, while multiple data sources achieve privacy isolation of data at the physical storage layer. The method also abstracts and plugs different storage media into a storage interface. After executing the target transaction, the storage interface is called to write the transaction execution data to the data source of the corresponding ledger partition. This method can adapt to various customized storage methods and meet the business needs of each participant. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] To more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are only some embodiments of the present invention, and those skilled in the art can derive other drawings based on these drawings without inventive effort.

[0015] Figure 1 This is a flow chart of a blockchain data privacy storage method proposed in one embodiment of the present invention; Figure 2 This is a schematic diagram of the module structure of a blockchain data privacy storage device proposed in one embodiment of the present invention. DETAILED DESCRIPTION

[0016] The following will provide a clear and complete description of the technical solutions in the embodiments of the present invention in conjunction with the accompanying drawings. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making any creative efforts are within the scope of protection of the present invention.

[0017] To meet the basic data privacy requirements of core business scenarios, this invention solves the following technical problems: 1. Secure Isolation of Private Data Storage: Existing blockchain systems store all ledger data in the same database across blockchain nodes, making them impractical for applications such as the financial industry, which require high levels of data privacy. This invention, through ledger partitioning and a multi-data source storage architecture, effectively achieves this level of data security isolation.

[0018] Support for customized storage media: Most existing blockchain systems only support structured or unstructured databases as storage methods, which cannot meet the needs of actual application scenarios where different participants in the blockchain system need to adopt different storage methods due to different business needs. This invention uses plug-in management to achieve support for various general and customized storage architectures, including storage architectures that support distributed scalability such as IPFS / HDFS.

[0019] The specific implementation process of the present invention to solve the above technical problems is shown in the following embodiments.

[0020] Example 1: Figure 1 This is a flowchart of a blockchain data privacy storage method proposed in one embodiment of the present invention. Figure 1 As shown, the blockchain data privacy storage method of the embodiment of the present invention mainly includes the following steps: S1: Partition the blockchain ledger to obtain multiple ledger partitions; S2: Bind multiple ledger partitions to different data sources and use the ledger partition names as storage identifiers; S3: Receive the target transaction in the ledger partition, execute the target transaction, and obtain transaction execution data; S4: Determine the data source of the ledger partition based on the ledger partition to which the target transaction belongs, and call a storage interface to write the transaction execution data into the data source of the corresponding ledger partition.

[0021] For example, the embodiment of the present invention provides an implementation process of data privacy storage to facilitate understanding of the concept of the embodiment of the present invention. The implementation process specifically includes: 1. The current blockchain has two ledger partitions: Partition 1 and Partition 2; 2. Each partition is bound to its own data source and uses the partition name as an identifier; 3. At this point, the blockchain executes a transaction from partition 1. 4. First, obtain the data source of partition 1 based on the partition name in the transaction data; 5. Call the storage layer abstract interface to write the transaction execution data to the data source of partition 1.

[0022] The above implementation process shows that the embodiment of the present invention abstracts a layer of ledger partitioning concept on top of the blockchain ledger to achieve privacy of partitioned ledger data in the same blockchain system. Different partitions are bound to different data sources to achieve physical isolation of partitioned ledger data. That is, partitioning achieves privacy isolation of data flowing in the blockchain system, while multiple data sources achieve privacy isolation of data at the physical storage layer.

[0023] In addition, the embodiment of the present invention abstracts and plugs the storage medium, and provides a unified adaptation interface to support various customized storage methods, including structured and unstructured databases, distributed file systems, etc. Different business needs can be quickly deployed by simply specifying the corresponding storage plug-in in the configuration.

[0024] Furthermore, in one embodiment, partitioning the blockchain ledger in step S1 of the embodiment of the present invention to obtain multiple ledger partitions specifically includes the following process: Based on the type of blockchain business, specify the scope of organizations that can run the corresponding blockchain business in the blockchain network; According to the institutional scope specified by the blockchain business, the blockchain ledger is divided into multiple ledger partitions, and the ledger data of each ledger partition is maintained by the institution within the specified institutional scope.

[0025] Specifically, the ledger partitions defined in this embodiment of the present invention are based on blockchain services. Organizations within a ledger partition are determined based on the service content. These organizations typically include partition parameters, transaction organization, and simulation execution organization. Ledger data within a ledger partition is jointly maintained by organizations within the specified scope and is invisible to organizations outside of the specified scope.

[0026] The ledger partition of the embodiment of the present invention includes information such as the ledger partition name and the ledger partition ID. When an institution within the ledger partition submits a target transaction, it carries the ledger partition name, the ledger partition ID and other information so that the corresponding data source can be subsequently obtained based on the ledger partition name.

[0027] Furthermore, in one embodiment, step S2 of the embodiment of the present invention binds multiple ledger partitions to different data sources, and uses the ledger partition name as a storage identifier, including but not limited to the following sub-steps: S21: Determine the data storage method for each ledger partition based on the data privacy requirements of each ledger partition; S22: Select the corresponding data source according to the data storage method of the ledger partition, bind the ledger data of each ledger partition to the corresponding data source, and use the ledger partition name as the storage identifier of the ledger data.

[0028] The data privacy requirements for each ledger partition are determined through consultation by the organizations within the partition, facilitating the maintenance of the ledger partition within the blockchain network. Organizations within a ledger partition can choose to set up a specific data structure to store ledger data, or they can choose to store ledger data in an unstructured file format. The specific data structure can be set based on actual business needs.

[0029] For example, a certain ledger partition can convert ledger data into structured data for storage. The data source can be selected from databases such as MySQL, PostgreSQL, and Oracle. After selecting the data source, the structured ledger data can be quickly stored in the database by configuring the corresponding storage plug-in.

[0030] Furthermore, in one embodiment, the method of the embodiment of the present invention further includes: Abstract and plug-inize multiple storage media, and determine the storage plug-in based on the abstraction and plug-inization results.

[0031] Interface configuration is performed according to the storage plug-in to obtain a unified storage interface.

[0032] Specifically, the storage plug-in can be selected from the FlexVolume plug-in and the CSI plug-in. The specific process of configuring the storage interface using the plug-in can be configured by the organization within the ledger partition.

[0033] When using the FlexVolume plug-in to implement the storage interface, you need to install the storage plug-in execution script on each node in the partition. This script needs to implement the FlexVolume-related storage interface.

[0034] Furthermore, in one embodiment, step S4 of the embodiment of the present invention determines the data source of the ledger partition based on the ledger partition to which the target transaction belongs, and calls a storage interface to write the transaction execution data into the data source of the corresponding ledger partition, including but not limited to the following sub-steps: S41: Parse the target transaction in the ledger partition to obtain the ledger partition name to which the target transaction belongs; S42: According to the name of the ledger partition to which the target transaction belongs, obtain the data source bound to the ledger partition; S43: Calling a preset storage interface, converting the format of the transaction execution data according to the data storage method of the ledger partition, and writing the transaction execution data after format conversion into the data source.

[0035] Specifically, when submitting a target transaction for a ledger partition, the node will sign and encrypt the transaction data to ensure data privacy and security. Therefore, when executing a target transaction, the transaction is first parsed to obtain the corresponding transaction ID, transaction data, and ledger partition information. When storing transaction execution data, simply query the corresponding ledger partition information based on the transaction ID to obtain the ledger partition name to which the target transaction belongs.

[0036] The embodiment of the present invention first partitions the blockchain ledger to obtain multiple ledger partitions. A layer of ledger partitioning is abstracted above the blockchain ledger to achieve privacy for partitioned ledger data within the same blockchain system. Multiple ledger partitions are then bound to different data sources. Different partitions are bound to different data sources to achieve physical isolation of the partitioned ledger data. Specifically, partitioning achieves privacy isolation for data flowing within the blockchain system, while multiple data sources achieve privacy isolation for data at the physical storage layer. The method also abstracts and plugs different storage media into a storage interface. After executing the target transaction, the storage interface is called to write the transaction execution data to the data source of the corresponding ledger partition. This method can adapt to various customized storage methods and meet the business needs of each participant.

[0037] Example 2: Reference Figure 2 As shown, based on the above-mentioned embodiment 1, the embodiment of the present invention further provides a blockchain data privacy storage device, including: The ledger management module is used to partition the blockchain ledger and obtain multiple ledger partitions; A data source binding module is used to bind multiple ledger partitions to different data sources and use the ledger partition name as a storage identifier; A transaction execution module, configured to receive a target transaction in the ledger partition, execute the target transaction, and obtain transaction execution data; The data storage module is used to determine the data source of the ledger partition based on the ledger partition to which the target transaction belongs, and call the storage interface to write the transaction execution data into the data source of the corresponding ledger partition.

[0038] Furthermore, an embodiment of the present invention further provides an electronic device, including: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the blockchain data privacy storage method in Example 1.

[0039] Furthermore, an embodiment of the present invention also provides a computer-readable medium on which a computer program is stored. When the computer program is executed by a processor, the blockchain data privacy storage method in Example 1 is implemented.

[0040] In the above embodiments, all or part of the embodiments can be implemented using software, hardware, firmware, or any combination thereof. When implemented using software, all or part of the embodiments can be implemented in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, the processes or functions described in accordance with the embodiments of the present invention are generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, optical fiber, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that can be accessed by a computer, or a data storage device such as a server or data center that integrates one or more available media. The available medium can be magnetic media (e.g., floppy disk, hard disk, tape), optical media (e.g., DVD), or semiconductor media (e.g., solid-state disk (SSD)).

[0041] It should be noted that, in this document, relational terms such as first and second, etc., are used only to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply the existence of any such actual relationship or order between these entities or operations. Moreover, the terms "comprises," "comprising," or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article, or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or elements inherent to such process, method, article, or device. In the absence of further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of other identical elements in the process, method, article, or device comprising the element.

[0042] Each embodiment in this specification is described in a related manner. Similar parts between the various embodiments can be referred to in conjunction with each other. Each embodiment focuses on the differences between the other embodiments. In particular, the system embodiment is generally similar to the method embodiment, so the description is relatively simple. For related parts, refer to the description of the method embodiment.

[0043] The above description is only a preferred embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the present invention are included in the scope of protection of the present invention.

Claims

1. A blockchain data privacy storage method, characterized in that: include: Partition the blockchain ledger to obtain multiple ledger partitions; Bind multiple ledger partitions to different data sources and use the ledger partition names as storage identifiers; Receiving a target transaction in the ledger partition, executing the target transaction, and obtaining transaction execution data; The data source of the ledger partition is determined based on the ledger partition to which the target transaction belongs, and a storage interface is called to write the transaction execution data into the data source of the corresponding ledger partition.

2. The blockchain data privacy storage method according to claim 1, characterized in that: Partitioning the blockchain ledger to obtain multiple ledger partitions includes: Based on the type of blockchain business, specify the scope of organizations that can run the corresponding blockchain business in the blockchain network; According to the institutional scope specified by the blockchain business, the blockchain ledger is divided into multiple ledger partitions, and the ledger data of each ledger partition is maintained by the institution within the specified institutional scope.

3. The blockchain data privacy storage method according to claim 1, characterized in that: Binding multiple ledger partitions to different data sources and using the ledger partition names as storage identifiers includes: Determine the data storage method for each ledger partition based on the data privacy requirements of the ledger partition; Select the corresponding data source according to the data storage method of the ledger partition, bind the ledger data of each ledger partition to the corresponding data source, and use the ledger partition name as the storage identifier of the ledger data.

4. The blockchain data privacy storage method according to claim 1, characterized in that: Also includes: Abstract and plug-inize multiple storage media, and determine the storage plug-in based on the abstraction and plug-in results; Interface configuration is performed according to the storage plug-in to obtain a unified storage interface.

5. The blockchain data privacy storage method according to claim 1, characterized in that: The step of determining the data source of the ledger partition according to the ledger partition to which the target transaction belongs, and calling a storage interface to write the transaction execution data into the data source of the corresponding ledger partition, includes: Parse the target transaction in the ledger partition to obtain the ledger partition name to which the target transaction belongs; Get the data source bound to the ledger partition based on the ledger partition name in the target transaction; Call the pre-set storage interface, convert the transaction execution data format according to the data storage method of the ledger partition, and write the converted transaction execution data into the data source.

6. A blockchain data privacy storage device, characterized in that: include: The ledger management module is used to partition the blockchain ledger and obtain multiple ledger partitions; A data source binding module is used to bind multiple ledger partitions to different data sources and use the ledger partition name as a storage identifier; A transaction execution module, configured to receive a target transaction in the ledger partition, execute the target transaction, and obtain transaction execution data; The data storage module is used to determine the data source of the ledger partition based on the ledger partition to which the target transaction belongs, and call the storage interface to write the transaction execution data into the data source of the corresponding ledger partition.

7. An electronic device, characterized in that: include: one or more processors; A storage device for storing one or more programs, which, when executed by the one or more processors, enables the one or more processors to implement the blockchain data privacy storage method according to any one of claims 1 to 5.

8. A computer-readable medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the blockchain data privacy storage method according to any one of claims 1 to 5 is implemented.

Images