Electronic data evidence preservation and verification method and system based on blockchain and distributed storage

Abstract

The application discloses a kind of electronic data archiving and checking method and system based on block chain and distributed storage.The method comprises the following steps: extracting the subject information of the text data to be archived to generate a first digital fingerprint and store it on the chain; generate a symmetric key to encrypt sensitive user information to obtain a first ciphertext, and encrypt the symmetric key with the receiver's public key to obtain a second ciphertext; upload the first and second ciphertexts to a distributed storage gateway to obtain a content locator and store it on the chain; in response to a verification request, check the receiver's authority, obtain the two ciphertexts, decrypt them using the receiver's private key and symmetric key to obtain sensitive information and text data; recalculate the second digital fingerprint and compare it with the first digital fingerprint on the chain to check for tampering.

Description

Technical Field

[0001] This invention relates to the fields of blockchain and information security technology, specifically to a method for electronic data storage and verification based on blockchain and distributed storage. Background Technology

[0002] With the rapid development of capital markets and various digital businesses, the content of interactive information disclosure and electronic data is becoming increasingly comprehensive and complex. In the event of false records, misleading statements, or data tampering, regulatory agencies or relevant departments need to initiate investigations, collect evidence, and take corresponding measures. Therefore, the solidification, storage, verification, and retrieval of electronic data evidence are particularly important.

[0003] However, existing methods of electronic data storage and retrieval have the following drawbacks in practical applications: First, the data retrieval process is lengthy and data transmission poses a risk of leakage. In existing technologies, electronic data is primarily stored within the specific business and technical systems of enterprises or platforms. When regulatory agencies or reviewing parties need to investigate and collect evidence, they must go through layers of approval and application processes and transfer data based on offline cooperation documents, resulting in an extremely lengthy overall process. Furthermore, because the offline transfer or direct transmission process includes sensitive user registration information and contact details, the lack of efficient and secure encryption and authorization mechanisms greatly increases the risk of data leakage.

[0004] Secondly, the authenticity and tamper-proof nature of point-in-time data are difficult to guarantee, resulting in low accuracy of evidence collection. In existing platform systems, investors or platform publishers can modify, revoke, or delete interactive information disclosures or published electronic data. Due to the lack of immutable and solidified evidence preservation methods, the authenticity, accuracy, and timeliness of the obtained point-in-time data are easily questioned. Once the original data is unilaterally altered or overwritten, subsequent investigations and evidence collection will find it difficult to restore the original data state, directly affecting the final outcome of case investigation and liability determination. Summary of the Invention

[0005] The following provides a brief overview of one or more aspects to offer a basic understanding of them. This overview is not an exhaustive summary of all conceived aspects, nor is it intended to identify key or decisive elements of all aspects, nor to define the scope of any or all aspects. Its sole purpose is to present some concepts of one or more aspects in a simplified form to prepare for the more detailed descriptions that follow.

[0006] The purpose of this invention is to solve the above-mentioned problems and to provide a method and system for electronic data storage and verification based on blockchain and distributed storage. This method achieves the synergy of blockchain-based solidified digests and distributed storage-based encrypted packaging, which greatly simplifies the cross-departmental data access process. While effectively preventing the leakage of sensitive user information, it ensures the immutability and high transparency of point-in-time electronic data, and significantly improves the accuracy and timeliness of data investigation and evidence collection.

[0007] The technical solution of this invention is as follows: This invention discloses a method for electronic data storage and verification based on blockchain and distributed storage, comprising: Extract the main information of the text data to be stored, generate the corresponding first digital fingerprint, and upload it to the blockchain for storage. Generate a symmetric key, encrypt the sensitive user information to be stored using the symmetric key to obtain the first ciphertext, and encrypt the symmetric key using the public key of the designated recipient to obtain the second ciphertext. Upload the first ciphertext and the second ciphertext to the distributed storage gateway and obtain the corresponding content addressing character; The content addresser is uploaded to the blockchain for authorization and evidence storage; In response to the verification request, the system verifies whether the receiver has the right to access the content address; if so, it retrieves the first ciphertext and the second ciphertext from the distributed storage gateway. The second ciphertext is decrypted using the recipient's private key to obtain the symmetric key, and the first ciphertext is decrypted using the symmetric key to obtain the sensitive user information and the text data. The second digital fingerprint of the text data is recalculated, and the first digital fingerprint is obtained from the blockchain. The first digital fingerprint and the second digital fingerprint are compared to verify whether the text data has been tampered with.

[0008] According to an embodiment of the electronic data notarization and verification method based on blockchain and distributed storage of the present invention, the step of extracting the main information of the text data to be notarized, generating the corresponding first digital fingerprint, and uploading it to the blockchain for notarization includes: Extract the question ID, investor user ID, listed company name, question time, question content, and target response fields from the text data; The fields are sorted and serialized in a preset order, and a SHA-256 hash value is generated using a cryptographic hash function, which serves as the first digital fingerprint. The first digital fingerprint is uploaded to the blockchain for storage.

[0009] According to an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention, the process of uploading the first digital fingerprint to the blockchain for storage further includes: The initial hash value corresponding to each text data in the first digital fingerprint is used as the leaf node of the Merkle tree. The hash value of the next level node is generated sequentially by pairwise hash superposition operation until the root hash value of the Merkle tree is generated. The constructed Merkle tree represents the first digital fingerprint. The root hash value is uploaded to the blockchain for storage to provide on-chain batch verification.

[0010] According to an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention, the sensitive user information includes at least one of investor ID, investor registration information and contact information; The process involves generating a symmetric key, then using this key to encrypt the sensitive user information to be authenticated, resulting in a first ciphertext, which includes: Generate a random key as the symmetric key, and generate a random initialization vector; The sensitive user information is encrypted using the symmetric key and the random initialization vector based on the encryption algorithm to obtain the first ciphertext, wherein the encryption algorithm includes the AES-256-CBC algorithm.

[0011] According to an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention, the step of uploading the first ciphertext and the second ciphertext to the distributed storage gateway and obtaining the corresponding content addressing identifier includes: The first ciphertext, the second ciphertext, the string representation of the random initial vector, and the corresponding encryption algorithm identifier are packaged and encapsulated. The encapsulated data is uploaded to the gateway, and the content addressing symbol returned by the gateway is received as the content addressing symbol.

[0012] According to an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention, uploading the content address to the blockchain for authorized storage includes: The smart contract on the blockchain is invoked to bind and store the content address with the on-chain address of the recipient, thereby completing the authorization for the recipient to access the content.

[0013] According to an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention, the step of verifying whether the recipient has the right to access the content address in response to a verification request includes: The authorization verification interface of the smart contract is invoked through the on-chain address of the recipient; The smart contract queries the binding mapping relationship between the receiver's on-chain address and the content addresser to verify whether the receiver has access rights.

[0014] According to an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention, the step of comparing whether the first digital fingerprint and the second digital fingerprint are consistent to verify whether the text data has been tampered with includes: When the second digital fingerprint matches the first digital fingerprint, it is determined that the data has not been tampered with, and a verification result is output. When the second digital fingerprint is inconsistent with the first digital fingerprint, it is determined that the data has been tampered with, and the verification failure result and the comparison details between the on-chain evidence hash and the recalculated hash value are output.

[0015] This invention also discloses an electronic data storage and verification system based on blockchain and distributed storage, used to execute the electronic data storage and verification method based on blockchain and distributed storage as described above. The system includes: The hash calculation module is used to extract the main information of the text data to be stored and generate the corresponding first digital fingerprint; An encryption module is used to generate a symmetric key, encrypt the sensitive user information to be stored using the symmetric key to obtain a first ciphertext, and encrypt the symmetric key using the public key of a designated recipient to obtain a second ciphertext. A distributed storage gateway is used to store the first ciphertext and the second ciphertext, and generate corresponding content addressing characters; A blockchain network is used to store the first digital fingerprint and record the content addressing symbol and the authorization mapping relationship of the recipient; The decryption and verification module is used to respond to verification requests. After verifying the recipient's permissions, it obtains the first ciphertext and the second ciphertext from the distributed storage gateway, performs two-level decryption using the recipient's private key and symmetric key, and recalculates the second digital fingerprint and compares it with the first digital fingerprint stored on the chain for verification.

[0016] The present invention also discloses a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor executes the computer program to implement the steps of the electronic data storage and verification method based on blockchain and distributed storage as described above.

[0017] The present invention also discloses a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the electronic data storage and verification method based on blockchain and distributed storage as described above.

[0018] The present invention also discloses a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps of the electronic data storage and verification method based on blockchain and distributed storage as described above.

[0019] Compared with the prior art, the present invention has the following advantages: First, by using a symmetric key to encrypt the sensitive user information to be stored as evidence to obtain the first ciphertext, and using the public key of the designated recipient to encrypt the symmetric key to obtain the second ciphertext, the first and second ciphertexts are uploaded to a distributed storage gateway to obtain a content addressing symbol. The content addressing symbol is then uploaded to the blockchain for authorized storage. In response to a verification request, the system verifies whether the recipient has the right to access the information and decrypts it using the recipient's private key. This technical feature achieves privacy protection and efficient and secure access to sensitive user information. It avoids the data leakage risks in the existing offline multi-layered approval and plaintext data transfer process, significantly shortens the time required for the retrieval process, and improves the timeliness of cross-departmental collaborative investigation and evidence collection.

[0020] Second, by extracting the main information of the text data to be stored, generating the corresponding first digital fingerprint, uploading it to the blockchain for storage, and recalculating the technical feature of comparing the second digital fingerprint with the first digital fingerprint obtained on the chain during verification, the system achieves "tamper-proof, traceable, and highly transparent" solidified storage of electronic data throughout its entire lifecycle. This effectively solves the problem in existing technologies where the authenticity of data at a given time point is difficult to guarantee because investors or listed companies can arbitrarily modify or withdraw interactive content, thus ensuring the accuracy and objectivity of judicial supervision, investigation, and evidence collection. Attached Figure Description

[0021] The above-described features and advantages of the present invention will be better understood after reading the following detailed description of embodiments of the present disclosure in conjunction with the accompanying drawings. In the drawings, components are not necessarily drawn to scale, and components having similar related characteristics or features may have the same or similar reference numerals.

[0022] Figure 1 A flowchart of an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention is shown.

[0023] Figure 2 A schematic diagram of an embodiment of the electronic data storage and verification system based on blockchain and distributed storage of the present invention is shown. Detailed Implementation

[0024] The present invention will now be described in detail with reference to the accompanying drawings and specific embodiments. It should be noted that the aspects described below with reference to the accompanying drawings and specific embodiments are merely exemplary and should not be construed as limiting the scope of protection of the present invention in any way.

[0025] Figure 1 The flowchart illustrates an embodiment of the electronic data storage and verification method based on blockchain and distributed storage of the present invention. (See reference...) Figure 1 The implementation steps of the method in this embodiment are described in detail below.

[0026] Step 1: Extract the main information of the text data to be notified, generate the corresponding first digital fingerprint, and upload it to the blockchain for notarization.

[0027] In this embodiment, especially in the scenario of interactive information disclosure by listed companies, the text data to be stored and verified usually refers to the question-and-answer interaction content data between investors and listed companies on the interactive information disclosure platform (i.e., interactive question-and-answer data), which specifically includes the following core fields: Question ID, stock code / listed company name, investor user identifier (ID) for asking / posting the question, specific text content of the interactive question or reply, question or posting time, and target identifier of the reply.

[0028] The detailed processing steps for step one are as follows: Extract the question ID, investor user ID, listed company name, question time, question content, and target response fields from the text data.

[0029] The above fields are sorted and serialized (e.g., JSON serialization) according to a preset order (e.g., lexicographical order), and a cryptographic hash function is used to calculate and generate a SHA-256 hash value as the first digital fingerprint.

[0030] The first digital fingerprint is uploaded to the blockchain for storage.

[0031] The specific processing steps for storing the first digital fingerprint on the blockchain are as follows.

[0032] The initial hash value corresponding to each text data in the first digital fingerprint is used as the leaf node of the Merkle tree. The hash value of the next level node is generated sequentially by pairwise hash superposition operation until the root hash value of the Merkle tree is generated. The constructed Merkle tree represents the first digital fingerprint. The root hash value is uploaded to the blockchain for storage, providing on-chain batch verification.

[0033] Step 2: Generate a symmetric key, use the symmetric key to encrypt the sensitive user information to be stored, obtain the first ciphertext, and use the public key of the designated recipient to encrypt the symmetric key, obtain the second ciphertext.

[0034] Sensitive user information includes at least one of the following: investor ID, investor registration information, and contact information.

[0035] Step two further includes the following specific processes: Generate a random key as a symmetric key, and generate a random initialization vector; Sensitive user information is encrypted using a symmetric key and a random initialization vector based on an encryption algorithm to obtain the first ciphertext, where the encryption algorithm includes the AES-256-CBC algorithm.

[0036] Step 3: Upload the first and second ciphertexts to the distributed storage gateway and obtain the corresponding content addressing symbols.

[0037] This step includes the following specific processing: The first ciphertext, the second ciphertext, the string representation of the random initial vector, and the corresponding encryption algorithm identifier are packaged and encapsulated. The encapsulated data is uploaded to the gateway, and the content address returned by the gateway is received as the content address.

[0038] Step 4: Upload the content address to the blockchain for authorization and notarization.

[0039] The smart contract on the blockchain is invoked to bind and store the content address with the recipient's on-chain address in order to complete the authorization for the recipient to access the content.

[0040] In one example scenario of this invention, after the client / certificate holder uploads the encrypted sensitive data package to the IPFS gateway to obtain the content address, it calls the smart contract on the blockchain to store the content address and the public key address of the designated regulatory / judicial recipient as input parameters into an on-chain data structure (such as a mapping table).

[0041] By directly associating the content address with the recipient's on-chain address and embedding it on the blockchain, an immutable authorization credential is constructed. Only when the bound recipient address initiates subsequent verification can it pass the smart contract's permission verification and retrieve the corresponding encrypted packet from the IPFS gateway, thus achieving a secure and transparent cross-departmental authorization retrieval mechanism.

[0042] Step 5: In response to the verification request, verify whether the receiver has the right to access the content addresser; if so, obtain the first ciphertext and the second ciphertext from the distributed storage gateway.

[0043] Step five further includes the following processing: The authorization verification interface of the smart contract is invoked through the recipient's on-chain address; The smart contract queries the binding mapping relationship between the receiver's on-chain address and the content address, and verifies whether the receiver has access rights.

[0044] In one example scenario of this invention, the recipient (such as a regulatory agency / judicial access party) calls the pre-set authorization verification interface in the smart contract through the on-chain address corresponding to its private key, and passes in the address of the content to be accessed.

[0045] The smart contract searches in the on-chain state variables (such as the authorization mapping table) whether there is a valid binding record between the on-chain address and the content address; if a binding record exists, it returns a verification pass flag; if no binding record exists, it returns an unauthorized prompt and terminates the subsequent data acquisition process, thereby completing decentralized trust-dependent access control on the chain.

[0046] Step Six: Use the recipient's private key to decrypt the second ciphertext, obtain the symmetric key, and use the symmetric key to decrypt the first ciphertext to obtain sensitive user information and text data.

[0047] Step 7: Recalculate the second digital fingerprint of the text data and obtain the first digital fingerprint from the blockchain. Compare the first digital fingerprint with the second digital fingerprint to verify whether the text data has been tampered with.

[0048] Based on the received text data to be verified, the receiving client uses the same preset serialization rules and cryptographic hash algorithm as in the evidence storage stage to recalculate and generate a local second digital fingerprint; at the same time, it calls the query interface of the blockchain smart contract to obtain the first digital fingerprint stored on the chain.

[0049] Verifying whether text data has been tampered with further includes: When the second digital fingerprint matches the first digital fingerprint, it is determined that the data has not been tampered with, and the verification result is output. When the second digital fingerprint does not match the first digital fingerprint, it is determined that the data has been tampered with, and the verification failure result and the comparison details between the on-chain evidence hash and the recalculated hash value are output.

[0050] Figure 2 This illustrates the principle of an embodiment of the electronic data storage and verification system based on blockchain and distributed storage of the present invention. (Reference) Figure 2 The system execution in this embodiment is as follows: Figure 1 The steps of the embodiment of the electronic data storage and verification method based on blockchain and distributed storage shown are described. The system of this embodiment includes: a hash calculation module, an encryption module, a distributed storage gateway, a blockchain network, and a decryption and verification module.

[0051] The hash calculation module extracts the text data to be stored (such as interactive Q&A text data), generates text data and sends it to the encryption module for subsequent encapsulation and encryption with sensitive user information.

[0052] The hash calculation module generates a corresponding first digital fingerprint based on the main information of the extracted text data to be notified. The generated first digital fingerprint (such as a single SHA-256 hash or Merkle root hash) is sent to the blockchain network, which then performs on-chain persistent notification.

[0053] The encryption module generates a symmetric key to encrypt the sensitive user information to be certified (generating the first ciphertext), and encrypts the symmetric key with the public key of the designated recipient (generating the second ciphertext). The packaged data (containing the first ciphertext, the second ciphertext, the random initialization vector, and the algorithm identifier) ​​is sent to the distributed storage gateway (such as IPFS) for storage. After receiving the data, the distributed storage gateway returns the corresponding content address to the encryption module.

[0054] After obtaining the content address returned by the distributed storage gateway, the encryption module transmits the content address and the recipient's on-chain address (which represents the authorization mapping relationship of the recipient) to the blockchain network, and realizes on-chain binding authorization and evidence storage by calling the smart contract.

[0055] After responding to the verification request and passing the authorization verification, the distributed storage gateway transmits the stored encrypted data packets, namely the first ciphertext and the second ciphertext, to the decryption verification module according to the content addressing request sent by the decryption verification module.

[0056] The decryption verification module transmits the recipient's on-chain address and content address to the blockchain network. After verification via smart contract, the blockchain network returns an authorization status result (authorization passed / unauthorized) to the decryption verification module. The decryption verification module then sends a text data identifier to the blockchain network to initiate a query request. The blockchain network returns the previously stored first digital fingerprint to the decryption verification module for subsequent tamper-proof comparison.

[0057] The decryption and verification module receives a first ciphertext and a second ciphertext from the distributed storage gateway, as well as a first digital fingerprint from the blockchain network. It decrypts the second ciphertext using the recipient's private key to obtain a symmetric key, then uses this symmetric key to decrypt the first ciphertext, restoring sensitive user information and the original text data. Based on the restored text data, it recalculates and generates a second digital fingerprint, and outputs the final verification result by comparing the first and second digital fingerprints.

[0058] Furthermore, this invention also discloses a computer device, including a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, it implements... Figure 1The steps of an embodiment of the electronic data storage and verification method based on blockchain and distributed storage are shown.

[0059] Furthermore, this invention also discloses a computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, it implements as follows: Figure 1 The steps of an embodiment of the electronic data storage and verification method based on blockchain and distributed storage are shown.

[0060] Furthermore, this invention also discloses a computer program product, including a computer program / instructions. When the computer program / instructions are executed by a processor, they implement... Figure 1 The steps of an embodiment of the electronic data storage and verification method based on blockchain and distributed storage are shown.

[0061] Although the methods described above are illustrated and depicted as a series of actions for the sake of simplicity, it should be understood and appreciated that these methods are not limited by the order of the actions, as some actions may occur in a different order and / or concurrently with other actions from the illustrations and descriptions herein or not illustrated and described herein but which may be understood by those skilled in the art, according to one or more embodiments.

[0062] Those skilled in the art will further appreciate that the various illustrative logic blocks, modules, circuits, and algorithm steps described in conjunction with the embodiments disclosed herein can be implemented as electronic hardware, computer software, or a combination of both. To clearly illustrate this interchangeability between hardware and software, the various illustrative components, blocks, modules, circuits, and steps are described above in a generalized manner in terms of their functionality. Whether such functionality is implemented as hardware or software depends on the specific application and the design constraints imposed on the overall system. Those skilled in the art may implement the described functionality in different ways for each specific application, but such implementation decisions should not be construed as departing from the scope of the invention.

[0063] The various illustrative logic blocks, modules, and circuits described in conjunction with the embodiments disclosed herein can be implemented or performed using a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic, discrete hardware components, or any combination thereof designed to perform the functions described herein. The general-purpose processor may be a microprocessor, but in alternatives, it may be any conventional processor, controller, microcontroller, or state machine. The processor may also be implemented as a combination of computing devices, such as a combination of a DSP and a microprocessor, multiple microprocessors, one or more microprocessors cooperating with a DSP core, or any other such configuration.

[0064] The steps of the methods or algorithms described in conjunction with the embodiments disclosed herein may be embodied directly in hardware, in a software module executed by a processor, or in a combination of both. The software module may reside in RAM memory, flash memory, ROM memory, EPROM memory, EEPROM memory, registers, hard disk, removable disk, CD-ROM, or any other form of storage medium known in the art. An exemplary storage medium is coupled to a processor such that the processor can read and write information to / from the storage medium. In an alternative, the storage medium may be integrated into the processor. The processor and storage medium may reside in an ASIC. The ASIC may reside in a user terminal. In an alternative, the processor and storage medium may reside as discrete components in the user terminal.

[0065] In one or more exemplary embodiments, the described functionality may be implemented in hardware, software, firmware, or any combination thereof. If implemented in software as a computer program product, the functionality may be stored or transmitted as one or more instructions or code on or through a computer-readable medium. A computer-readable medium includes both computer storage media and communication media, encompassing any medium that facilitates the transfer of a computer program from one location to another. A storage medium may be any available medium accessible to a computer. By way of example and not limitation, such a computer-readable medium may include RAM, ROM, EEPROM, CD-ROM or other optical disc storage, disk storage or other magnetic storage devices, or any other medium that can be used to carry or store desired program code in the form of instructions or data structures and is accessible to a computer. Any connection is also legitimately referred to as a computer-readable medium. For example, if the software is transmitted from a website, server, or other remote source using coaxial cable, fiber optic cable, twisted pair, digital subscriber line (DSL), or wireless technologies such as infrared, radio, and microwave, then the coaxial cable, fiber optic cable, twisted pair, DSL, or wireless technologies such as infrared, radio, and microwave are included in the definition of a medium. As used in this article, disk and disc include compact discs (CDs), laser discs, optical discs, digital multi-purpose discs (DVDs), floppy disks, and Blu-ray discs. Disks typically reproduce data magnetically, while discs reproduce data optically using lasers. Combinations of these should also be included within the scope of computer-readable media.

[0066] The prior description of this disclosure is provided to enable any person skilled in the art to make or use this disclosure. Various modifications to this disclosure will be apparent to those skilled in the art, and the general principles defined herein may be applied to other variations without departing from the spirit or scope of this disclosure. Therefore, this disclosure is not intended to be limited to the examples and designs described herein, but should be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A method for electronic data storage and verification based on blockchain and distributed storage, characterized in that, include: Extract the main information of the text data to be stored, generate the corresponding first digital fingerprint, and upload it to the blockchain for storage. Generate a symmetric key, encrypt the sensitive user information to be stored using the symmetric key to obtain the first ciphertext, and encrypt the symmetric key using the public key of the designated recipient to obtain the second ciphertext. Upload the first ciphertext and the second ciphertext to the distributed storage gateway and obtain the corresponding content addressing character; The content addresser is uploaded to the blockchain for authorization and evidence storage; In response to the verification request, the system verifies whether the receiver has the right to access the content address; if so, it retrieves the first ciphertext and the second ciphertext from the distributed storage gateway. The second ciphertext is decrypted using the recipient's private key to obtain the symmetric key, and the first ciphertext is decrypted using the symmetric key to obtain the sensitive user information and the text data. The second digital fingerprint of the text data is recalculated, and the first digital fingerprint is obtained from the blockchain. The first digital fingerprint and the second digital fingerprint are compared to verify whether the text data has been tampered with.

2. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 1, characterized in that, The process of extracting the subject information of the text data to be stored, generating the corresponding first digital fingerprint, and uploading it to the blockchain for storage includes: Extract the question ID, investor user ID, listed company name, question time, question content, and target response fields from the text data; The fields are sorted and serialized in a preset order, and a SHA-256 hash value is generated using a cryptographic hash function, which serves as the first digital fingerprint. The first digital fingerprint is uploaded to the blockchain for storage.

3. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 2, characterized in that, The process of uploading the first digital fingerprint to the blockchain for storage further includes: The initial hash value corresponding to each text data in the first digital fingerprint is used as the leaf node of the Merkle tree. The hash value of the next level node is generated sequentially by pairwise hash superposition operation until the root hash value of the Merkle tree is generated. The constructed Merkle tree represents the first digital fingerprint. The root hash value is uploaded to the blockchain for storage to provide on-chain batch verification.

4. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 1, characterized in that, The sensitive user information includes at least one of the following: investor ID, investor registration information, and contact information; The process involves generating a symmetric key, then using this key to encrypt the sensitive user information to be authenticated, resulting in a first ciphertext, which includes: Generate a random key as the symmetric key, and generate a random initialization vector; The sensitive user information is encrypted using the symmetric key and the random initialization vector based on the encryption algorithm to obtain the first ciphertext, wherein the encryption algorithm includes the AES-256-CBC algorithm.

5. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 4, characterized in that, The step of uploading the first ciphertext and the second ciphertext to the distributed storage gateway and obtaining the corresponding content addressing identifier includes: The first ciphertext, the second ciphertext, the string representation of the random initial vector, and the corresponding encryption algorithm identifier are packaged and encapsulated. The encapsulated data is uploaded to the gateway, and the content addressing symbol returned by the gateway is received as the content addressing symbol.

6. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 1, characterized in that, Uploading the content address to the blockchain for authorization and notarization includes: The smart contract on the blockchain is invoked to bind and store the content address with the on-chain address of the recipient, thereby completing the authorization for the recipient to access the content.

7. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 1, characterized in that, The step of responding to a verification request and verifying whether the receiver has the right to access the content addresser includes: The authorization verification interface of the smart contract is invoked through the on-chain address of the recipient; The smart contract queries the binding mapping relationship between the receiver's on-chain address and the content addresser to verify whether the receiver has access rights.

8. The method for electronic data storage and verification based on blockchain and distributed storage according to claim 1, characterized in that, The step of comparing the first digital fingerprint with the second digital fingerprint to verify whether the text data has been tampered with includes: When the second digital fingerprint matches the first digital fingerprint, it is determined that the data has not been tampered with, and a verification result is output. When the second digital fingerprint is inconsistent with the first digital fingerprint, it is determined that the data has been tampered with, and the verification failure result and the comparison details between the on-chain evidence hash and the recalculated hash value are output.

9. An electronic data storage and verification system based on blockchain and distributed storage, characterized in that, The system is used to perform the electronic data storage and verification method based on blockchain and distributed storage as described in any one of claims 1 to 8, and includes: The hash calculation module is used to extract the main information of the text data to be stored and generate the corresponding first digital fingerprint; An encryption module is used to generate a symmetric key, encrypt the sensitive user information to be stored using the symmetric key to obtain a first ciphertext, and encrypt the symmetric key using the public key of a designated recipient to obtain a second ciphertext. A distributed storage gateway is used to store the first ciphertext and the second ciphertext, and generate corresponding content addressing characters; A blockchain network is used to store the first digital fingerprint and record the content addressing symbol and the authorization mapping relationship of the recipient; The decryption and verification module is used to respond to verification requests. After verifying the recipient's permissions, it obtains the first ciphertext and the second ciphertext from the distributed storage gateway, performs two-level decryption using the recipient's private key and symmetric key, and recalculates the second digital fingerprint and compares it with the first digital fingerprint stored on the chain for verification.

10. A computer device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that, When the processor executes the computer program, it implements the steps of the electronic data storage and verification method based on blockchain and distributed storage as described in any one of claims 1 to 8.

11. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by the processor, it implements the steps of the electronic data storage and verification method based on blockchain and distributed storage as described in any one of claims 1 to 8.

12. A computer program product comprising a computer program / instructions, characterized in that, When the computer program / instruction is executed by the processor, it implements the steps of the electronic data storage and verification method based on blockchain and distributed storage as described in any one of claims 1 to 8.

Images