Data processing method and device based on block chain, equipment, medium and product

Abstract

The embodiment of the invention provides a data processing method and device based on a block chain, equipment, a medium and a product, and relates to the technical field of data processing, and the method comprises the steps: responding to a received data analysis request sent by first terminal equipment, and generating a corresponding target task; the target terminal equipment comprises first terminal equipment and second terminal equipment; verifying the first terminal device based on the data analysis request to obtain a target verification result; if the target verification result is that the verification is passed, sending a target verification notification to the first terminal device; triggering a preset smart contract on a preset alliance chain based on the target application data; receiving a first target result sent by the first terminal device, and receiving a second target result sent by the second terminal device; and verifying the target task based on the first target result and the second target result, and sending an operation record in the target task to the first block chain for recording.

Description

Technical Field

[0001] This application relates to the field of data processing technology, and in particular to a data processing method, apparatus, device, medium and product based on blockchain. Background Technology

[0002] With the booming development of the data economy, the flow of data elements has become a key factor driving economic growth. Data flow, aggregation, and use involve various methods, such as cross-organizational sharing and industry collaboration, but data security risks are constantly increasing in different environments. Therefore, how to protect data privacy during multi-party collaborative computing is a core issue that urgently needs to be addressed.

[0003] Currently, data transfer typically employs centralized node management, where multiple participants verify and manage data through a single blockchain node, which can lead to single points of failure. Summary of the Invention

[0004] This application provides a data processing method, apparatus, device, medium, and product based on blockchain to address the problem that in the prior art, data transfer typically employs centralized node management, where multiple participants verify and manage data through a unified blockchain node, leading to single points of failure.

[0005] In a first aspect, embodiments of this application provide a blockchain-based data processing method applied to a cloud service device, wherein multiple target terminal devices are connected to the cloud service device, including:

[0006] In response to receiving a data analysis request sent by a first terminal device, a corresponding target task is generated; the target terminal devices include a first terminal device and a second terminal device; the first terminal device is the initiator of the data analysis request; the second terminal device is a participant in the data analysis request; the data analysis request includes target requested data; the target task is used to represent the event corresponding to the data analysis request.

[0007] The first terminal device is verified based on the data analysis request to obtain the target verification result;

[0008] If the target verification result is successful, a target verification notification is sent to the first terminal device;

[0009] Based on the target application data, a preset smart contract on a preset consortium blockchain is triggered, so that the first terminal device and the second terminal device can perform data analysis based on the preset smart contract;

[0010] Receive the first target result sent by the first terminal device, and receive the second target result sent by the second terminal device;

[0011] The target task is verified based on the first target result and the second target result, and the operation records in the target task are sent to the first blockchain for recording.

[0012] In one possible implementation, verifying the first terminal device based on the data analysis request to obtain a target verification result includes:

[0013] Read the digital signature of the first terminal device from the target application data;

[0014] The first terminal device is verified based on the target consortium blockchain and the digital signature of the first terminal device.

[0015] If the first verification of the first terminal device is successful, the second blockchain state corresponding to the first terminal device is determined.

[0016] A second verification is performed based on the second blockchain state;

[0017] If both the first verification and the second verification pass, then the target verification result is determined to be a successful verification.

[0018] If the first verification and / or the second verification fails, the target verification result is determined to be verification failure.

[0019] In one possible implementation, before generating the corresponding target task in response to receiving a data analysis request from the first terminal device, the method further includes:

[0020] Register each of the target terminal devices and establish a corresponding target service node for each of the target terminal devices;

[0021] Receive target alliance creation request initiated by each of the target terminal devices; the target alliance creation request includes target data permissions;

[0022] Verify the digital signatures of each of the target terminal devices;

[0023] If the digital signatures of all the target terminal devices are verified, a preset consortium blockchain network address is assigned to each of the target terminal devices, and corresponding data permissions are assigned to each of the target terminal devices based on the target data permissions.

[0024] Secondly, embodiments of this application provide a blockchain-based data processing method applied to a first terminal device, comprising:

[0025] Send data analysis requests to cloud service devices;

[0026] Receive the target verification result sent by the cloud service device;

[0027] Send the first target result to the cloud service device.

[0028] In one possible implementation, the method further includes:

[0029] Obtain the raw data;

[0030] The original data is encrypted using a preset encryption algorithm to obtain the target data;

[0031] Obtain preset data permissions;

[0032] A preset first data space is created based on the target data and the preset data permissions.

[0033] In one possible implementation, after receiving the target verification result sent by the cloud service device, the method further includes:

[0034] Obtain the target data to be analyzed from the preset first data space;

[0035] The target data to be analyzed is encrypted using a first key to obtain the first encrypted data;

[0036] Send the first encrypted data to the second terminal device;

[0037] The device receives second encrypted data sent by the second terminal device; the second encrypted data is obtained by the second terminal device encrypting the first encrypted data using a second key.

[0038] The second encrypted data is decrypted using the first key to obtain the decrypted second encrypted data;

[0039] Obtain third encrypted data; the third encrypted data is obtained by the second terminal device using the second key;

[0040] The first target result is determined based on the decrypted second encrypted data and the third encrypted data.

[0041] Thirdly, embodiments of this application provide a blockchain-based data processing device located in a cloud service device, the device comprising:

[0042] A generation module is used to generate a corresponding target task in response to receiving a data analysis request sent by a first terminal device; the target terminal devices include a first terminal device and a second terminal device; the first terminal device is the initiator of the data analysis request; the second terminal device is a participant in the data analysis request; the data analysis request includes target request data; the target task is used to represent the event corresponding to the data analysis request.

[0043] The verification module is used to verify the first terminal device based on the data analysis request in order to obtain the target verification result;

[0044] The first sending module is used to send a target verification notification to the first terminal device if the target verification result is a successful verification.

[0045] The triggering module is used to trigger a preset smart contract on a preset consortium blockchain based on the target application data, so that the first terminal device and the second terminal device can perform data analysis based on the preset smart contract.

[0046] The first receiving module is configured to receive a first target result sent by the first terminal device and a second target result sent by the second terminal device.

[0047] The verification module is used to verify the target task based on the first target result and the second target result, and to send the operation records in the target task to the first blockchain for recording.

[0048] Fourthly, embodiments of this application provide a blockchain-based data processing device located in a first terminal device, the device comprising:

[0049] The second sending module is used to send data analysis requests to cloud service devices;

[0050] The second receiving module is used to receive the target verification result sent by the cloud service device;

[0051] The second sending module is also used to send the first target result to the cloud service device.

[0052] Fifthly, embodiments of this application provide an electronic device, including: a memory, a processor, and a transceiver;

[0053] The memory stores computer-executed instructions; the transceiver is used for sending and receiving data.

[0054] The processor executes computer execution instructions stored in the memory, causing the processor to perform the first aspect and / or various possible implementations of the first aspect as described above.

[0055] In a sixth aspect, embodiments of this application provide a computer-readable storage medium storing computer-executable instructions, which, when executed by a processor, are used to implement the first aspect and / or various possible implementations of the first aspect.

[0056] In a seventh aspect, embodiments of this application provide a computer program product, including a computer program that, when executed by a processor, implements the first aspect and / or various possible implementations of the first aspect.

[0057] The blockchain-based data processing method, apparatus, device, medium, and product provided in this application, upon receiving a data analysis request from a first terminal device, first verifies the legitimacy of the first terminal device (the data analysis request initiator) through a cloud service device, establishing a secure starting point for the process. It then employs a pre-set smart contract on a consortium blockchain to constrain the data analysis collaboration between the first and second terminal devices, preventing collaborative chaos. Finally, the accuracy of the data analysis is ensured through result verification by the first and second terminal devices, and the entire process operation record is uploaded to the first blockchain for immutable traceability. This solves the trust crisis of centralized processing and guarantees data security through blockchain. Attached Figure Description

[0058] The accompanying drawings, which are incorporated in and form part of this specification, illustrate embodiments consistent with this application and, together with the description, serve to explain the principles of this application.

[0059] Figure 1 This is a diagram illustrating an application scenario for the blockchain-based data processing method applicable to the embodiments of this application.

[0060] Figure 2 A flowchart illustrating a blockchain-based data processing method provided in an embodiment of this application;

[0061] Figure 3 A flowchart illustrating a blockchain-based data processing method provided in another embodiment of this application;

[0062] Figure 4 A schematic diagram of the structure of a blockchain-based data processing device provided in an embodiment of this application;

[0063] Figure 5 A schematic diagram of the structure of a blockchain-based data processing device provided in another embodiment of this application;

[0064] Figure 6 A schematic diagram of the structure of the electronic device provided in this application.

[0065] The accompanying drawings illustrate specific embodiments of this application, which will be described in more detail below. These drawings and descriptions are not intended to limit the scope of the concept in any way, but rather to illustrate the concept of this application to those skilled in the art through reference to particular embodiments. Detailed Implementation

[0066] Exemplary embodiments will now be described in detail, examples of which are illustrated in the accompanying drawings. When the following description relates to the drawings, unless otherwise indicated, the same numbers in different drawings denote the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with this application. Rather, they are merely examples of apparatuses and methods consistent with some aspects of this application as detailed in the appended claims.

[0067] The collection, storage, use, processing, transmission, provision, and disclosure of financial data or user data involved in the technical solution of this application all comply with the provisions of relevant laws and regulations and do not violate public order and good morals.

[0068] It should be noted that in the embodiments of this application, certain software, components, models and other existing solutions in the industry may be mentioned. These should be regarded as exemplary and are only intended to illustrate the feasibility of implementing the technical solution of this application. However, it does not mean that the applicant has used or necessarily used the solution.

[0069] With the booming development of the data economy, the circulation of data elements has become a key factor driving economic growth. Data flow, aggregation, and use involve various methods, such as cross-organizational sharing and industry collaboration, but data security risks are constantly increasing in different environments. Therefore, how to protect data privacy during multi-party collaborative computing and achieve cross-organizational and cross-industry data sharing and value release is a core issue that urgently needs to be addressed. Currently, data flow typically employs centralized node management, where multiple participants verify and manage data through a unified blockchain node, leading to single points of failure. Furthermore, excessive power at the central point can easily trigger a crisis of trust; if the central point makes a mistake, data leakage may occur.

[0070] To address the aforementioned technical issues, this application proposes the following technical concept: Upon receiving a data analysis request from a first terminal device, the cloud service device first verifies the legitimacy of the first terminal device (the data analysis request initiator), establishing a secure starting point for the process. A pre-defined smart contract on the consortium blockchain provides standardized and automated rules for data analysis collaboration between the first and second terminal devices, preventing collaborative chaos. Finally, dual-terminal result verification ensures the accuracy of the data analysis, and the entire process is recorded and uploaded to the first blockchain for immutable traceability. This not only resolves the trust crisis of centralized processing but also ensures the security, reliability, and efficiency of multi-party data processing through "on-chain + off-chain" collaboration.

[0071] The technical solution of this application and how the technical solution of this application solves the above-mentioned technical problems are described in detail below with specific embodiments. These specific embodiments can be combined with each other, and the same or similar concepts or processes may not be described again in some embodiments. The embodiments of this application will now be described with reference to the accompanying drawings.

[0072] Figure 1 This is an application scenario diagram of the blockchain-based data processing method applicable to the embodiments of this application, such as... Figure 1 As shown. The system corresponding to the blockchain-based data processing method in this embodiment may include: a cloud service device 11 and a target terminal device 12. Multiple target terminal devices are connected to the cloud service device. The target terminal device 12 includes a first terminal device 121 and a second terminal device 122, wherein the first terminal device is the initiator of the data analysis request, and the second terminal device is a participant in the data analysis request. In response to receiving the data analysis request sent by the first terminal device 121, the cloud service device 11 generates a corresponding target task. The cloud service device 11 verifies the first terminal device according to the data analysis request and obtains the target verification result. If the target verification result is successful, a target verification notification is sent to the first terminal device 121. Based on the target application data, a preset smart contract on the preset consortium blockchain is triggered, so that the first terminal device 121 and the second terminal device 122 perform data analysis according to the preset smart contract. After the data analysis is completed by the first terminal device 121 and the second terminal device 122, the first target result and the second target result are sent to the cloud service device 11 to verify the target task, and the operation record in the target task is sent to the first blockchain for recording.

[0073] Figure 2 A flowchart of a blockchain-based data processing method provided in an embodiment of this application is shown below. Figure 2As shown, the execution subject of this embodiment is a blockchain-based data processing device. This blockchain-based data processing device can be implemented through a computer program, or through a medium storing the relevant computer program, such as a USB flash drive and / or optical disc; alternatively, it can be implemented through a physical device that integrates or installs the relevant computer program, such as an electronic device. The blockchain-based data processing method provided in this embodiment is applied to cloud service devices, and the blockchain-based data processing method provided in this embodiment includes the following steps:

[0074] S201: In response to receiving a data analysis request sent by the first terminal device, generate a corresponding target task.

[0075] The target terminal devices include a first terminal device and a second terminal device. The first terminal device is the initiator of the data analysis request. The second terminal device is a participant in the data analysis request. The data analysis request includes target requested data. The target task represents the event corresponding to the data analysis request.

[0076] Among them, cloud service equipment refers to platform equipment that provides Blockchain as a Service (BaaS).

[0077] The target application data includes, but is not limited to, the unique identification information of the first terminal device, the unique identification information of the second terminal, the data type, the time range, and the digital signature of the first terminal device.

[0078] The target task is the event corresponding to the data analysis proposed by the first terminal device.

[0079] Specifically, in this embodiment, after receiving the data analysis request sent by the first terminal device, the cloud service device reads the target application data from the data analysis request, creates the target task, and generates structured target task data.

[0080] The target task includes, but is not limited to, a unique task identifier, an associated request identifier, a first terminal device identifier, a second terminal device identifier, a task type (corresponding to a data analysis request event), and a task creation timestamp.

[0081] S202: Verify the first terminal device based on the data analysis request to obtain the target verification result.

[0082] As an optional implementation, before generating the corresponding target task in response to receiving a data analysis request sent by the first terminal device, the method further includes:

[0083] Register each target terminal device and establish a corresponding target service node for each target terminal device;

[0084] Receive target alliance creation request requests initiated by each target terminal device; the target alliance creation request request includes target data permissions;

[0085] Verify the digital signatures of each target terminal device;

[0086] If the digital signatures of each target terminal device are verified, a pre-set consortium blockchain network address is assigned to each target terminal device, and corresponding data permissions are assigned to each target terminal device based on the target data permissions.

[0087] The target service node is used to communicate with the cloud service device and can manage the privacy computing nodes and blockchain inside each target terminal device by logging in to the target terminal device.

[0088] Specifically, in this embodiment, the cloud service device verifies the registration request data sent by each target terminal device. After successful verification, the cloud service device assigns a unique "registration number" to the corresponding target terminal device and creates each target service node. The terminal device information is then associated with the target service node information to generate a registration file, which is synchronized to the cloud service device's trusted storage module.

[0089] Specifically, in this embodiment, each target terminal device submits a target alliance creation application request through the cloud service platform. The target alliance creation application request includes its own digital signature and target data permissions. The cloud service device verifies the digital signature of each target terminal device against the registered digital signature. If the verification is successful, the target alliance creation application request and authorization application of each target terminal device are forwarded to the preset alliance smart contract, and the authorization result is synchronized to the BaaS management chain for storage.

[0090] Among them, a consortium blockchain is a permissioned blockchain network that is jointly maintained and managed by each target terminal device.

[0091] In this context, the consortium blockchain is created by the target terminal devices and technically implemented by the cloud service platform.

[0092] Each pre-defined consortium corresponds to a consortium blockchain. Each target terminal device corresponds to a consortium blockchain node.

[0093] The registration request data includes, but is not limited to, a unique identifier for the registration request, terminal type (such as data initiator / participant), a unique hardware identifier for the terminal device, device model, digital signature of the target terminal device, and a timestamp for sending the registration request.

[0094] Specifically, each participant's identity information is authenticated using digital signatures and blockchain technology. Access permissions are assigned to each member through smart contracts, and access control is implemented based on the participant's role (such as data provider, data user, etc.).

[0095]

[0096] in, As a member of the alliance, For member identification As a member's role, This specifies the access permissions for that member.

[0097] Within the pre-defined consortium, data access and manipulation permissions are dynamically authorized via smart contracts. Each data provider categorizes and classifies its data, sets corresponding access rules, and grants access permissions to qualified requesters through smart contracts. Data access permissions include read, modify, and share operations. When a party requests data access, the smart contract automatically verifies the requester's role and permissions, determines whether to grant access, and the access result is as follows:

[0098]

[0099] in, To access the authorization result, For the identity information of the requester, For access rules, For data objects.

[0100] All authorization and permission change operations are recorded through blockchain nodes.

[0101] Among them, cloud service devices have achieved interface adaptation and protocol unification. By defining cross-chain communication standard interfaces and formulating data transmission protocols (based on HTTP / 2, with TLS1.3 encryption), they have unified data formats and developed adaptation plugins to install cross-chain adaptation plugins on the management nodes of the corresponding target terminal devices of the consortium blockchain.

[0102] Specifically, in this embodiment, the cloud service device serves as the unified network environment for the consortium blockchain. The cloud service device provides a private communication network, and the consortium blockchain nodes of the target terminal device need to access this network to communicate with each other. The core rules of the consortium blockchain are negotiated and determined by the target terminal device. The cloud service device only executes permission allocation according to the rules, and the permission allocation records are written to the management chain and the enterprise consortium blockchain of the cloud service device.

[0103] Among them, the management chain of cloud service devices is a blockchain that records the operation of cloud service devices, and is the first blockchain.

[0104] The cloud devices and each target terminal device use a pre-set communication network.

[0105] Optionally, the preset communication network can be set independently according to needs, and this embodiment does not impose any limitations.

[0106] As an optional implementation, the following steps can be used to verify the first terminal device based on a data analysis request to obtain a target verification result, including: reading the digital signature of the first terminal device from the target application data; performing a first verification on the first terminal device based on the target consortium blockchain and the digital signature of the first terminal device; if the first verification of the first terminal device passes, determining the second blockchain state corresponding to the first terminal device; performing a second verification based on the second blockchain state; if both the first verification and the second verification pass, determining the target verification result as verification passed; if the first verification and / or the second verification fails, determining the target verification result as verification failed.

[0107] The first verification refers to the cloud service device verifying the digital signature of the first terminal device.

[0108] The second verification refers to verifying the status of the consortium blockchain node corresponding to the first terminal device. The second blockchain refers to the consortium blockchain corresponding to the first terminal device.

[0109] Specifically, in this embodiment, the cloud service device reads the digital signature of the first terminal device from the target application data, obtains the digital signature of the first terminal device from the consortium blockchain, and compares the digital signature of the first terminal device read from the target application data with the digital signature of the first terminal device obtained from the consortium blockchain. If they are the same, the first verification passes. The cloud service device reads the consortium node status of the first terminal device from the consortium blockchain. If the consortium node status is normal, the second verification passes. If both the first and second verifications pass, the target verification result is determined to be successful. If the first and / or second verifications fail, the target verification result is determined to be unsuccessful.

[0110] S203: If the target verification result is successful, a target verification notification is sent to the first terminal device.

[0111] The target verification notification can be either "verification passed, proceed to the next step" or other notification text; this embodiment does not impose any limitations.

[0112] Specifically, in this embodiment, if the target verification result of the cloud service device is successful, a target verification notification is sent to the first terminal device.

[0113] S204: Trigger a preset smart contract on the preset consortium blockchain based on the target application data, so that the first terminal device and the second terminal device can perform data analysis based on the preset smart contract.

[0114] Specifically, in this embodiment, the cloud service device sends the data analysis request and target application data sent by the first terminal device to the smart contract on the consortium blockchain, triggering the smart contract to verify the first terminal device and the second terminal device. After the verification is successful, the first terminal device and the second terminal device can perform data analysis according to the smart contract.

[0115] S205: Receive the first target result sent by the first terminal device, and receive the second target result sent by the second terminal device.

[0116] S206: Verify the target task based on the first target result and the second target result, and send the operation records in the target task to the first blockchain for recording.

[0117] The first target result can be the verification passed, the result set passed, and the index generated by the first terminal device after successful verification. The second target result can also be the verification passed, the result set passed, and the index generated by the second terminal device after successful verification.

[0118] Specifically, in this embodiment, the first target result and the second target result are verified. If they are the same, the evidence storage record summary of the consortium blockchain is synchronized to the cloud service device through the cross-chain adapter, and the "evidence storage synchronization" operation is recorded.

[0119] Specifically, after the computation results are generated in the privacy-preserving computation node, they are first encrypted to ensure that the data is not leaked during transmission. The computation results are then transmitted back to each participant in an encrypted manner. Each participant decrypts the received encrypted results using their own private key, ensuring that the computation results remain confidential in the hands of each party and can only be decrypted by an authorized party.

[0120] In this process, after obtaining the calculation results, each participant stores the data usage records and calculation results through blockchain nodes to ensure the transparency and immutability of the data flow process.

[0121] All data flow operations, including the verification of calculation results, data transmission, and decryption processes, will be documented through smart contracts to ensure the integrity and transparency of the operations.

[0122] The calculation results and related data usage records are stored on the blockchain via smart contracts, ensuring that every step of the calculation and data usage process has a transparent and tamper-proof record. Storage Records:

[0123]

[0124] in, For the preservation of the calculation results, A unique identifier for the data. For the calculation results, To record timestamps, The node identifier for performing the operation.

[0125] The enterprise credit assessment method provided in this application, upon receiving a data analysis request from a first terminal device, first verifies the legitimacy of the first terminal device (the data analysis request initiator) through a cloud service device, establishing a secure starting point for the process. It then employs a pre-set smart contract on a consortium blockchain to constrain the data analysis collaboration between the first and second terminal devices, preventing collaborative chaos. Finally, the accuracy of the data analysis is ensured through result verification by the first and second terminal devices, and the entire process operation record is uploaded to the first blockchain for immutable traceability. This method resolves the trust crisis of centralized processing and guarantees data security through blockchain.

[0126] Figure 3 A flowchart of a blockchain-based data processing method provided in another embodiment of this application is shown below. Figure 3 As shown, the execution subject of this embodiment is a blockchain-based data processing device. This blockchain-based data processing device can be implemented by a computer program, or by a medium storing the relevant computer program, such as a USB flash drive and / or optical disc; or it can be implemented by a physical device that integrates or installs the relevant computer program, such as a chip or electronic device.

[0127] The blockchain-based data processing method provided in this embodiment is a description of the process on the first terminal device side, based on the blockchain-based data processing method provided in the previous embodiment of this application. The blockchain-based data processing method provided in this embodiment includes the following steps.

[0128] S301: Send a data analysis request to the cloud service device.

[0129] In this embodiment, the implementation of S301 is similar to that of S201 in the previous embodiment, and will not be described again here.

[0130] S302: Receive the target verification result sent by the cloud service device.

[0131] Specifically, in this embodiment, the cloud service device sends the target verification node to the first terminal device, which is received by the corresponding node on the first terminal device where the cloud service device is deployed.

[0132] S303: Send the first target result to the cloud service device.

[0133] Specifically, in this embodiment, the first terminal device sends the first target result to the cloud service device.

[0134] As an optional implementation, based on the above embodiments, the method further includes:

[0135] Obtain the raw data;

[0136] The original data is encrypted using a preset encryption algorithm to obtain the target data;

[0137] Obtain preset data permissions;

[0138] A preset first data space is created based on the target data and preset data permissions.

[0139] The original data is the data from the first terminal device.

[0140] Optionally, the preset encryption algorithm can be symmetric encryption, asymmetric encryption, or hash algorithm, etc., and is not limited in this embodiment.

[0141] Among them, the preset data permissions are the level permissions set in advance for various types of data.

[0142] The preset data permissions are set by the first terminal device itself.

[0143] For example, for data in the first terminal device, data is classified and graded, access controlled, and data usage permission managed to ensure that the data is not misused or leaked during circulation. Data is categorized according to its nature into public data, internal data, sensitive data, and confidential data. Within each category, it is further divided into multiple levels based on the sensitivity of the data. For example, sensitive data can be divided into three levels: low-level sensitive data (such as general business data), medium-level sensitive data (such as employee information and financial data), and high-level sensitive data (such as customer privacy and core enterprise technology data), identified as follows:

[0144]

[0145] in, This represents the categorized data. Represents data type, Indicates the security level of the data (e.g., public, sensitive, confidential).

[0146] Specifically, in this embodiment, the first terminal device encrypts the original data using a preset encryption algorithm to obtain the target data, and uses a Hardware Security Module (HSM) for key management to ensure the security and privacy of the keys. Regarding the client's internal data... The data encrypted using the security module is as follows:

[0147]

[0148] in, This indicates the encrypted data. The key is managed using an HSM.

[0149] Specifically, in this embodiment, the first terminal device obtains preset data permissions and creates a data directory, defining the target data, preset data permissions, and data directory as a preset first data space.

[0150] For each target terminal device, the same method is used to create its own corresponding data space.

[0151] Each target terminal device has a data space for storing its own internal data.

[0152] Specifically, each piece of data in the data directory is accompanied by an Access Control List (ACL), which lists which users or systems have the right to access the data and their corresponding operation permissions. Strict access management of data during its circulation is determined according to the following rules:

[0153]

[0154] in, As an authorization result, For the requester's identity information, For access rules, To categorize information into data categories.

[0155] Specifically, in this embodiment, a combination of encrypted storage and hierarchical authorization is used to block the leakage of static data at the source, providing secure data input for subsequent cross-party transfers.

[0156] As an optional implementation, based on the above embodiments, after receiving the target verification result sent by the cloud service device, the method further includes:

[0157] Obtain the target data to be analyzed from the preset first data space;

[0158] The target data to be analyzed is encrypted using the first key to obtain the first encrypted data;

[0159] Send the first encrypted data to the second terminal device;

[0160] The device receives second encrypted data sent by a second terminal device; the second encrypted data is obtained by encrypting the first encrypted data using a second key by the second terminal device.

[0161] The second encrypted data is decrypted using the first key to obtain the decrypted second encrypted data;

[0162] Obtain the third encrypted data; the third encrypted data is obtained by the second terminal device using the second key;

[0163] The first target result is determined based on the decrypted second and third encrypted data.

[0164] The first data space is a data storage and encryption space for the first terminal device.

[0165] Each target terminal device has its own corresponding data space.

[0166] The target data is encrypted data.

[0167] The first key is the key used by the first terminal device. The second key is the key used by the second terminal device.

[0168] For example, the first terminal device selects a random number key and sends the target data to be analyzed. via key After encryption, it is mapped to the encrypted space to generate the first encrypted data. This first encrypted data can only be decrypted by the first terminal device, and a new random key is generated for each batch verification. The first terminal device sends the first encrypted data... The data is sent to the second terminal device, which selects a random number key. The second terminal device then uses this key. For the first encrypted data Secondary encryption is performed to obtain the second encrypted data. Then, the second encrypted data is returned to the first terminal device. The first terminal device processes the second encrypted data. use Decryption yields the second encrypted data. This data only contains data encrypted with the key from the second terminal device. The second terminal device will then send the data to be verified. via key After encryption, it is mapped to the encrypted space to generate third-party encrypted data. This third encrypted data can only be decrypted by the second terminal device, and a new random key is generated for each batch verification. The decrypted second encrypted data... With third-party encrypted data Data is checked in the encrypted space. If they match, the first terminal device determines the verified data based on the location. If they do not match, the first terminal device cannot decrypt the data and cannot obtain the corresponding value.

[0169] The first and second terminal devices each have a dedicated privacy computing node specifically for encrypting or computing data.

[0170] Specifically, a secure intermediate state is created by encrypting with a first key, then encrypting again with a second key, and finally decrypting with the first key. In this state, the second terminal device cannot decipher the original data from the first party, and the data obtained by the first party after decryption is not the original data from the second party, but rather a form protected by the second party's key. Both parties exchange and process encrypted data, fundamentally eliminating the possibility of the original data being spied on during transmission or processing.

[0171] Figure 4 A schematic diagram of the structure of a blockchain-based data processing device provided in an embodiment of this application is shown below. Figure 4 As shown, the blockchain-based data processing device provided in this embodiment is located in an electronic device, such as a cloud service device. The blockchain-based data processing device provided in this embodiment includes: a generation module 41, a verification module 42, a first sending module 43, a triggering module 44, a first receiving module 45, and a verification module 46.

[0172] Specifically, the generation module 41 is used to generate a corresponding target task in response to receiving a data analysis request sent by the first terminal device; the target terminal device includes the first terminal device and the second terminal device; the first terminal device is the initiator of the data analysis request; the second terminal device is a participant in the data analysis request; the data analysis request includes target application data; the target task is used to represent the event corresponding to the data analysis request; the verification module 42 is used to verify the first terminal device based on the data analysis request to obtain the target verification result; the first sending module 43 is used to send a target verification notification to the first terminal device if the target verification result is successful; the triggering module 44 is used to trigger a preset smart contract on the preset consortium blockchain based on the target application data, so that the first terminal device and the second terminal device perform data analysis based on the preset smart contract; the first receiving module 45 is used to receive the first target result sent by the first terminal device and the second target result sent by the second terminal device; the verification module 46 is used to verify the target task based on the first target result and the second target result, and send the operation record in the target task to the first blockchain for recording.

[0173] Optionally, when verifying the first terminal device based on the data analysis request to obtain the target verification result, the verification module 42 is specifically used for: reading the digital signature of the first terminal device from the target application data; performing a first verification on the first terminal device based on the target consortium blockchain and the digital signature of the first terminal device; if the first verification of the first terminal device passes, determining the second blockchain state corresponding to the first terminal device; performing a second verification based on the second blockchain state; if both the first verification and the second verification pass, determining the target verification result as verification passed; if the first verification and / or the second verification fails, determining the target verification result as verification failed.

[0174] Optionally, the blockchain-based data processing device may also include a registration module and an allocation module.

[0175] Accordingly, the registration module is used to register each target terminal device and establish a corresponding target service node for each target terminal device before generating the corresponding target task in response to receiving the data analysis request sent by the first terminal device; the first receiving module 45 is used to receive the target alliance creation application request initiated by each target terminal device; the target alliance creation application request includes target data permissions; the verification module 46 is used to verify the digital signature of each target terminal device; the allocation module is used to allocate a preset alliance chain network address to each target terminal device if the digital signature of each target terminal device passes the verification, and allocate corresponding data permissions to each target terminal device based on the target data permissions.

[0176] Figure 5 A schematic diagram of the structure of a blockchain-based data processing device provided in another embodiment of this application is shown below. Figure 5 As shown, the blockchain-based data processing device provided in this embodiment is located in an electronic device, such as a first terminal device. The blockchain-based data processing device 50 provided in this embodiment includes: a second sending module 51 and a second receiving module 52.

[0177] Specifically, the second sending module 51 is used to send a data analysis request to the cloud service device; the second receiving module 52 is used to receive the target verification result sent by the cloud service device; the second sending module 51 is also used to send the first target result to the cloud service device.

[0178] It should be noted that the technical effects of the blockchain-based data processing device provided in this embodiment have been described in the above method embodiments, and will not be repeated here.

[0179] The blockchain-based data processing device provided in this embodiment can execute the methods provided in the above method embodiments. Its implementation principle and technical effect are similar, and will not be described in detail here.

[0180] Figure 6 A schematic diagram of the structure of the electronic device provided in this application, such as... Figure 6 As shown, the electronic device 60 provided in this embodiment includes: a processor 61, a memory 62 and a transceiver 63 that are communicatively connected to the processor.

[0181] The memory 62 stores computer-executed instructions; the transceiver 63 is used for sending and receiving data; and the processor 61 executes the computer-executed instructions stored in the memory 62 to implement the blockchain-based data processing method provided in any of the above embodiments. Related descriptions can be found in the accompanying drawings, which illustrate the steps and their corresponding effects; further elaboration is not provided here.

[0182] The program may include program code, which includes computer-executable instructions. Memory 62 may include high-speed RAM, and may also include non-volatile memory, such as at least one disk drive.

[0183] In this embodiment, the memory 62, transceiver 63, and processor 61 are connected via a bus. The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. The bus can be divided into address bus, data bus, control bus, etc. For ease of representation, Figure 6 The bus is represented by a single thick line, but this does not mean that there is only one bus or one type of bus.

[0184] This application also provides a computer-readable storage medium, which stores computer-executable instructions. When executed by a processor, the computer-executable instructions are used to implement the blockchain-based data processing method provided in any of the above embodiments.

[0185] This application also provides a computer program product, including a computer program that, when executed by a processor, implements the blockchain-based data processing method provided in any of the above embodiments.

[0186] The modules described as separate components may or may not be physically separate. The components shown as modules may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the modules can be selected to implement the solution of this embodiment according to actual needs.

[0187] Furthermore, the functional modules in the various embodiments of this application can be integrated into one processing unit, or each module can exist physically separately, or two or more modules can be integrated into one unit. The unit composed of the above modules can be implemented in hardware or in the form of hardware plus software functional units.

[0188] The integrated modules described above, implemented as software functional modules, can be stored in a computer-readable storage medium. These software functional modules, stored in a storage medium, include several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to execute some steps of the methods of the various embodiments of this application.

[0189] It should be understood that the aforementioned processor can be a Central Processing Unit (CPU), or other general-purpose processors, digital signal processors (DSPs), application-specific integrated circuits (ASICs), etc. A general-purpose processor can be a microprocessor or any conventional processor. The steps of the method disclosed in this invention can be directly manifested as execution by a hardware processor, or execution by a combination of hardware and software modules within the processor.

[0190] The memory may include high-speed RAM, and may also include non-volatile storage (NVM), such as at least one disk storage device, and may also be a USB flash drive, external hard drive, read-only memory, disk or optical disc, etc.

[0191] The bus can be an Industry Standard Architecture (ISA) bus, a Peripheral Component Interconnect (PCI) bus, or an Extended Industry Standard Architecture (EISA) bus, etc. Buses can be categorized as address buses, data buses, control buses, etc. For ease of illustration, the buses shown in the accompanying drawings are not limited to a single bus or a single type of bus.

[0192] The aforementioned storage medium can be implemented by any type of volatile or non-volatile storage device or a combination thereof, such as static random access memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic storage, flash memory, magnetic disk, or optical disk. The storage medium can be any available medium that can be accessed by a general-purpose or special-purpose computer.

[0193] An exemplary storage medium is coupled to a processor, enabling the processor to read information from and write information to the storage medium. Alternatively, the storage medium can be an integral part of the processor. The processor and storage medium can reside in an Application Specific Integrated Circuit (ASIC). Alternatively, the processor and storage medium can exist as discrete components in an electronic control unit or main control device.

[0194] Those skilled in the art will understand that all or part of the steps of the above-described method embodiments can be implemented by hardware related to program instructions. The aforementioned program can be stored in a computer-readable storage medium. When executed, the program performs the steps of the above-described method embodiments; and the aforementioned storage medium includes various media capable of storing program code, such as ROM, RAM, magnetic disks, or optical disks.

[0195] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of this application, and are not intended to limit them. Although this application has been described in detail with reference to the foregoing embodiments, those skilled in the art should understand that modifications can still be made to the technical solutions described in the foregoing embodiments, or equivalent substitutions can be made to some or all of the technical features therein. Such modifications or substitutions do not cause the essence of the corresponding technical solutions to deviate from the scope of the technical solutions of the embodiments of this application.

Claims

1. A blockchain-based data processing method, characterized in that, Applied to a cloud service device, wherein multiple target terminal devices are connected to the cloud service device, the method includes: In response to receiving a data analysis request sent by a first terminal device, a corresponding target task is generated; the target terminal devices include a first terminal device and a second terminal device; the first terminal device is the initiator of the data analysis request; the second terminal device is a participant in the data analysis request; the data analysis request includes target requested data; the target task is used to represent the event corresponding to the data analysis request. The first terminal device is verified based on the data analysis request to obtain the target verification result; If the target verification result is successful, a target verification notification is sent to the first terminal device; Based on the target application data, a preset smart contract on a preset consortium blockchain is triggered, so that the first terminal device and the second terminal device can perform data analysis based on the preset smart contract; Receive the first target result sent by the first terminal device, and receive the second target result sent by the second terminal device; The target task is verified based on the first target result and the second target result, and the operation records in the target task are sent to the first blockchain for recording.

2. The method of claim 1, wherein, The step of verifying the first terminal device based on the data analysis request to obtain the target verification result includes: Read the digital signature of the first terminal device from the target application data; The first terminal device is verified based on the target consortium blockchain and the digital signature of the first terminal device. If the first verification of the first terminal device is successful, the second blockchain state corresponding to the first terminal device is determined. A second verification is performed based on the second blockchain state; If both the first verification and the second verification pass, then the target verification result is determined to be a successful verification. If the first verification and / or the second verification fails, the target verification result is determined to be verification failure.

3. The method of claim 1, wherein, Before generating the corresponding target task in response to receiving a data analysis request from the first terminal device, the method further includes: Register each of the target terminal devices and establish a corresponding target service node for each of the target terminal devices; Receive target alliance creation request initiated by each of the target terminal devices; the target alliance creation request includes target data permissions; Verify the digital signatures of each of the target terminal devices; If the digital signatures of all the target terminal devices are verified, a preset consortium blockchain network address is assigned to each of the target terminal devices, and corresponding data permissions are assigned to each of the target terminal devices based on the target data permissions. 4.A blockchain-based data processing method, characterized in that, Applied to a first terminal device, the method includes: Send data analysis requests to cloud service devices; Receive the target verification result sent by the cloud service device; Send the first target result to the cloud service device.

5. The method of claim 4, wherein, The method further includes: Obtain the raw data; The original data is encrypted using a preset encryption algorithm to obtain the target data; Obtain preset data permissions; A preset first data space is created based on the target data and the preset data permissions.

6. The method of claim 5, wherein, After receiving the target verification result sent by the cloud service device, the method further includes: The target data to be analyzed is obtained from the preset first data space; The target data to be analyzed is encrypted using a first key to obtain the first encrypted data; Send the first encrypted data to the second terminal device; The device receives second encrypted data sent by the second terminal device; the second encrypted data is obtained by the second terminal device encrypting the first encrypted data using a second key. The second encrypted data is decrypted using the first key to obtain the decrypted second encrypted data; Obtain third encrypted data; the third encrypted data is obtained by the second terminal device using the second key; The first target result is determined based on the decrypted second encrypted data and the third encrypted data. 7.A blockchain-based data processing apparatus, characterized by comprising: Located in a cloud service device, the device includes: A generation module is used to generate a corresponding target task in response to receiving a data analysis request sent by a first terminal device; the target terminal devices include a first terminal device and a second terminal device; the first terminal device is the initiator of the data analysis request; the second terminal device is a participant in the data analysis request; the data analysis request includes target request data; the target task is used to represent the event corresponding to the data analysis request. The verification module is used to verify the first terminal device based on the data analysis request in order to obtain the target verification result; The first sending module is used to send a target verification notification to the first terminal device if the target verification result is a successful verification. The triggering module is used to trigger a preset smart contract on a preset consortium blockchain based on the target application data, so that the first terminal device and the second terminal device can perform data analysis based on the preset smart contract. The first receiving module is configured to receive a first target result sent by the first terminal device and a second target result sent by the second terminal device. The verification module is used to verify the target task based on the first target result and the second target result, and to send the operation records in the target task to the first blockchain for recording. 8.A blockchain-based data processing apparatus, characterized by comprising: Located in the first terminal device, the device includes: The second sending module is used to send data analysis requests to cloud service devices; The second receiving module is used to receive the target verification result sent by the cloud service device; The second sending module is also used to send the first target result to the cloud service device.

9. An electronic device, comprising: include: Memory, processor, and transceiver; The memory stores computer-executed instructions; the transceiver is used for sending and receiving data. The processor executes computer execution instructions stored in the memory, causing the processor to perform the blockchain-based data processing method as described in any one of claims 1 to 6.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores computer-executable instructions, which, when executed by a processor, are used to implement the blockchain-based data processing method as described in any one of claims 1 to 6.

11. A computer program product, characterized in that, It includes a computer program that, when executed by a processor, implements the blockchain-based data processing method according to any one of claims 1 to 6.

Images