+

CN109903046A - User data management and device based on block chain - Google Patents

User data management and device based on block chain Download PDF

Info

Publication number
CN109903046A
CN109903046A CN201910107550.6A CN201910107550A CN109903046A CN 109903046 A CN109903046 A CN 109903046A CN 201910107550 A CN201910107550 A CN 201910107550A CN 109903046 A CN109903046 A CN 109903046A
Authority
CN
China
Prior art keywords
data
node
data management
management system
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201910107550.6A
Other languages
Chinese (zh)
Inventor
李洪涛
陈闻宇
杨学
马永征
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Internet Network Information Center
Original Assignee
China Internet Network Information Center
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Internet Network Information Center filed Critical China Internet Network Information Center
Priority to CN201910107550.6A priority Critical patent/CN109903046A/en
Publication of CN109903046A publication Critical patent/CN109903046A/en
Pending legal-status Critical Current

Links

Landscapes

  • Storage Device Security (AREA)

Abstract

本发明实施例提供了一种基于区块链的用户数据管理方法及装置,所述方法包括:建立用于用户数据管理的区块链数据管理系统;所述区块链数据管理系统中包括用户终端设备节点和网络服务提供商节点;用户终端设备节点和各个网络服务提供商节点通过所述区块链数据管理系统实现用户数据的权限管理和安全管理。本发明实施例通过区块链的方式,实现了用户数据的权限管理和安全管理。

Embodiments of the present invention provide a blockchain-based user data management method and device. The method includes: establishing a blockchain data management system for user data management; the blockchain data management system includes user data The terminal equipment node and the network service provider node; the user terminal equipment node and each network service provider node realize the authority management and security management of the user data through the blockchain data management system. The embodiment of the present invention realizes authority management and security management of user data by means of blockchain.

Description

User data management and device based on block chain
Technical field
The present embodiments relate to field of computer technology, and in particular to a kind of user data management side based on block chain Method and device.
Background technique
With the popularity of the internet, mass data is interconnected network users production and creates, these data are by pay attention to day by day It utilizes, this concept of data assets is gradually received by various circles of society, but the data that the producer of data creates it And personal information lacks management authority.The problem of personal privacy protection and data ownership and right of disposal, is increasingly weighed Depending on.
Internet data has the following problems at present:
1) data collection disperses, and each mechanism is only capable of obtaining data by the Internet service oneself provided, can not be formed The circulation of data;
2) data information security is poor, target terminal user equipment access internet and is generated using various application software Data are abused, usurp, and lack effective supervision and management method, even make because largely harassing information caused by individual privacy leakage At property loss;
3) data ownership is indefinite, and the data that data creator (user) creates oneself do not have any power, number Occupy according to the company that the income overwhelming majority of generation is possessed data.
Summary of the invention
For the problems of the prior art, the embodiment of the present invention provides a kind of user data management based on block chain And device.
In a first aspect, the embodiment of the invention provides a kind of user data managements based on block chain, comprising:
Establish the block chain data management system for being used for user data management;Include in the block chain data management system Subscriber terminal equipment node and Internet Service Provider's node;
Subscriber terminal equipment node and each Internet Service Provider's node are real by the block chain data management system The rights management and safety management of current user data.
Further, the subscriber terminal equipment node and each Internet Service Provider's node pass through the block chain number The rights management and safety management of user data are realized according to management system, comprising:
Target terminal user device node is the data addition that the network service of target terminal user equipment access target generates User tag forms general data, and is stored after encrypting to the general data to the target terminal user device node In;Wherein, the data structure of the general data is that user tag data head adds target terminal user equipment access target net The data that network service generates;Wherein, the user tag is used to determine the ownership of the general data;
Target web service provider node, which is collected and stores the target terminal user device node, accesses the target The data that network service generates;
Whenever the target terminal user equipment and target web service provider node determine the target user When terminal device accesses the target web service and generates new data, the target terminal user equipment and the target network Newly generated data are carried out Hash calculation respectively and store cryptographic Hash if the two cryptographic Hash is consistent by service provider node Into block chain data management system, for removing the target terminal user equipment section in the block chain data management system Other users terminal device node and other Internet Service Providers other than point and target web service provider node Node obtains the general data by way of data grant application, otherwise proposes arbitration Shen to block chain data management system Please, decision is carried out by block chain data management system.
Further, the target terminal user device node is stored after being also used to encrypt user information to block chain number According to management system.
Further, the target terminal user device node symbiosis is at three kinds of code keys, respectively master key, user information Key and data key;
The master key is used to authorize the access for other the new subscriber terminal equipment nodes for belonging to same user management and deletes It removes and the update and abolishment of user information key and data key;
The user information key is for encrypting the user information;
The data key is for encrypting the general data.
Further, the method also includes:
The target terminal user device node and the target network are removed in the block chain data management system Other users terminal device node and other Internet Service Provider's nodes other than service provider node are intended to obtain described logical When with data, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and saves through the audit Point obtains the general data that the target terminal user equipment saves after the approval, at the same the general data that will acquire with The cryptographic Hash stored in block chain data management system is verified, to determine the integrality and consistency of data.
Further, the method also includes:
When target terminal user device node is intended to operate the general data that target terminal user equipment saves When, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and through audit node audit The general data is operated by rear, and by after operation data and operation note store to target terminal user and set It is standby.
Further, the method also includes:
When block chain data management system carries out decision to the request for arbitration, in the block chain data management system The other users terminal in addition to the target terminal user device node and target web service provider node set Slave node and other Internet Service Provider's nodes and audit node participate in the decision.
Second aspect, the embodiment of the invention also provides a kind of user data management devices based on block chain, comprising:
Module is set up, for establishing the block chain data management system for being used for user data management;Wherein, the block chain It include subscriber terminal equipment node and Internet Service Provider's node in data management system;
Data management module is used for so that subscriber terminal equipment node and each Internet Service Provider's node are described in The rights management and safety management of block chain data management system realization user data.
The third aspect the embodiment of the invention also provides a kind of electronic equipment, including memory, processor and is stored in On reservoir and the computer program that can run on a processor, the processor are realized when executing described program such as first aspect institute The step of stating the user data management based on block chain.
Fourth aspect, the embodiment of the invention also provides a kind of non-transient computer readable storage mediums, are stored thereon with Computer program is realized when the computer program is executed by processor as described in relation to the first aspect based on the user data pipe of block chain The step of reason method.
As shown from the above technical solution, the user data management and dress provided in an embodiment of the present invention based on block chain It sets, based on the mode of block chain, establishes the block chain data management system for being used for user data management, the block chain data pipe It include subscriber terminal equipment node and Internet Service Provider's node in reason system, subscriber terminal equipment node and each network take Business provider's node realizes the rights management and safety management of user data by the block chain data management system.As it can be seen that The embodiment of the present invention realizes the rights management and safety management of user data by way of block chain.
Detailed description of the invention
In order to more clearly explain the embodiment of the invention or the technical proposal in the existing technology, to embodiment or will show below There is attached drawing needed in technical description to be briefly described, it should be apparent that, the accompanying drawings in the following description is the present invention Some embodiments for those of ordinary skill in the art without creative efforts, can also basis These attached drawings obtain other attached drawings.
Fig. 1 is the flow chart for the user data management based on block chain that one embodiment of the invention provides;
Fig. 2 be another embodiment of the present invention provides the user data management device based on block chain structural schematic diagram;
Fig. 3 is the structural schematic diagram for the electronic equipment that further embodiment of this invention provides.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention In attached drawing, the technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art Every other embodiment obtained without creative efforts, shall fall within the protection scope of the present invention.
Fig. 1 shows the flow chart of the user data management provided in an embodiment of the present invention based on block chain.Such as Fig. 1 Shown, the user data management provided in an embodiment of the present invention based on block chain includes the following steps:
Step 101: establishing the block chain data management system for being used for user data management;The block chain data management system It include subscriber terminal equipment node and Internet Service Provider's node in system.
In this step, the block chain data management system for being used for user data management is established, so that subsequent can use The block chain data management system of foundation realizes the management of user data.Step 102: subscriber terminal equipment node and each network Service provider node realizes the rights management and safety management of user data by the block chain data management system.
In this step, be difficult to tamper with using block chain, it is transparent trace to the source, the higher feature of safety so that user is whole End equipment node and each Internet Service Provider's node realize the power of user data by the block chain data management system Limit management and safety management.
As shown from the above technical solution, the user data management and dress provided in an embodiment of the present invention based on block chain It sets, based on the mode of block chain, establishes the block chain data management system for being used for user data management, the block chain data pipe It include subscriber terminal equipment node and Internet Service Provider's node in reason system, subscriber terminal equipment node and each network take Business provider's node realizes the rights management and safety management of user data by the block chain data management system.As it can be seen that The embodiment of the present invention realizes the rights management and safety management of user data by way of block chain.
Content based on the above embodiment, above-mentioned steps 102 are realized especially by such as under type:
Target terminal user device node is the data addition that the network service of target terminal user equipment access target generates User tag forms general data, and is stored after encrypting to the general data to the target terminal user device node In;Wherein, the data structure of the general data is that user tag data head adds target terminal user equipment access target net The data that network service generates;Wherein, the user tag is used to determine the ownership of the general data;
Target web service provider node, which is collected and stores the target terminal user device node, accesses the target The data that network service generates;
Whenever the target terminal user equipment and target web service provider node determine the target user When terminal device accesses the target web service and generates new data, the target terminal user equipment and the target network Newly generated data are carried out Hash calculation respectively and store cryptographic Hash if the two cryptographic Hash is consistent by service provider node Into block chain data management system, for removing the target terminal user equipment section in the block chain data management system Other users terminal device node and other Internet Service Providers other than point and target web service provider node Node obtains the general data by way of data grant application, otherwise proposes arbitration Shen to block chain data management system Please, decision is carried out by block chain data management system.
In the present embodiment, using the label model that subscriber terminal equipment is arranged in is target terminal user equipment because accessing The data addition user tag that target web service generates forms general data, and the label model belongs to user terminal data processing The functional module of plug-in unit is mainly used for adding unification user label to the data that user generates, increases ownership property for data, Each user tag is the unique identification (user identifier) to data ownership of user.In addition, the label model can be with For the identification of customer access equipment, the terminal device newly accessed has been obtained by user using master key or by other User equipment information table is added after being authorized in the equipment of authorization.
In the present embodiment, the ownership concept that data are introduced for user data, specifies number by user tag According to ownership, the management of user data and corresponding general data is realized based on block chain, firstly, being all subscriber terminal equipments The data of production add dependent attributes, specify the ownership of data;Secondly, the structure of general data is " user tag data Head+subscriber terminal equipment accesses the data that the target web service generates ", due to being free of user identity privacy information, Privacy of user preferably is protected, furthermore, general data is stored using the mode of distributed decentralization, takes full advantage of distribution The low advantage of formula system operation expense.Finally, using each Site autonomy management, the mode of unified verifying realizes data Controllable circulation, not only ensure that system have block chain be difficult to tamper with, it is transparent trace to the source, the higher feature of safety, but also avoid The complete performance bottleneck that may cause using block chain storage architecture.
Content based on the above embodiment, the target terminal user device node are deposited after being also used to encrypt user information It stores up to block chain data management system.
Content based on the above embodiment, the target terminal user device node symbiosis at three kinds of code keys, respectively based on Key, user information key and data key;
The master key is used to authorize the access for other the new subscriber terminal equipment nodes for belonging to same user management and deletes It removes and the update and abolishment of user information key and data key;
The user information key is for encrypting the user information;
The data key is for encrypting the general data.
In the present embodiment, the generation of three kinds of code keys is realized by the way that the code key module of subscriber terminal equipment is arranged in, code key Module belongs to user terminal data processing pin function module, selects to install by user in the form of browser plug-in or client To the terminal device of oneself, major function: it is generated for user, manages code key.Cipher key module will generate and use three kinds of differences The code key of permission and function is master key, user information key and data key respectively.Master key is set for operating user terminal The update and abolishment of standby access and deletion and user information key and data key;User information key is for encrypting user Information;Data key is for encrypting user's end data.
It should be noted that user information using user terminal data processing plug-in unit encrypting module to user information code key into Data management system is stored in after row encryption, application obtains user information and needs user by secondary key authorization and by audit section Point verifying confirmation;The general data that user generates is stored in subscriber terminal equipment after being encrypted by data key.
Content based on the above embodiment, the method also includes:
The target terminal user device node and the target network are removed in the block chain data management system Other users terminal device node and other Internet Service Provider's nodes other than service provider node are intended to obtain described logical When with data, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and saves through the audit Point obtains the general data that the target terminal user equipment saves after the approval, at the same the general data that will acquire with The cryptographic Hash stored in block chain data management system is verified, to determine the integrality and consistency of data.
In the present embodiment, it not only specifies the ownership of data, and by the design of multi-key cipher, makes different information Corresponding code key is respectively adopted to be managed, to enhance the safety of data.
Content based on the above embodiment, the method also includes:
When target terminal user device node is intended to operate the general data that target terminal user equipment saves When, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and through audit node audit The general data is operated by rear, and by after operation data and operation note store to target terminal user and set It is standby.
In the present embodiment, target terminal user device node can to audit node propose to owned data into Row access, inquiry and the authorized application modified.In the present embodiment, block chain data management system intelligence contract refers to according to authorization Order automatically operates the data in block chain data management system.
In the present embodiment, audit node is served as by the third-party institution, mainly to each in block chain data management system Kind request (such as authorize, appeal, modification) carry out audit verifying, using a ticket agree to system, operation note deposit block chain with It is standby to verify and trace to the source.
Content based on the above embodiment, the method also includes:
When block chain data management system carries out decision to the request for arbitration, in the block chain data management system The other users terminal in addition to the target terminal user device node and target web service provider node set Slave node and other Internet Service Provider's nodes and audit node participate in the decision.
In the present embodiment, the target terminal user device node and the target are removed in block chain data management system Other users terminal device node and other Internet Service Provider's nodes other than Internet Service Provider's node each may participate in Various decisions in verification management system, and possess the power to lodge a complaint to the result of decision.
In the present embodiment, it is reconstructed, is made based on Enterprise Operation System (EOS) standard Open Source Code With common recognition algorithm is represented based on authority classification, the member node of block chain data management system is used as block chain management system simultaneously more The main chain node of system, all systems are interior with the verifying and supervision that can be used as verifying node participative management system per family.
It should be noted that operation note all in block chain data management system is saved, to realize with to user The various operation notes of privacy information can not distort, can supervise and can be traced.
It should be noted that block chain data management system is made of multicenter authorization block chain, respectively saved on block chain Point has different participations to behaviors such as decision, certification, verifyings on chain according to different permissions.Data management system will be led The user information of encryption, the hash value of general data data and various system operatios record are saved, and uses intelligent contract It is automatic to execute corresponding instruction.In addition, all nodes use standard P2P communication protocol in block chain data management system, complete logical Telecommunication function.
The user data management provided in this embodiment based on block chain is carried out below by a specific example It is described in detail, specific implementation process step is described as follows:
The plug-in unit (based on browser or being implanted directly into system) that S1, user terminal are installed;
S2, plug-in unit produce key: master key, user information key, data key;
S3, plug-in unit generate user and uniformly identify label;
S4, user tag data are stored in data management system application by block chain;
S5, new terminal equipment using master key or have verified that equipment carries out access verifying, and new terminal equipment is included in user and is set Standby list;
S6, user terminal plug-in unit service generated data using network to user and add subscriber identity data head, are formed General data;
S7, user terminal plug-in unit carry out hash calculating to general data;
S8, encryption storage is carried out into user equipment to general data according to user option;
S9, service node collect user's creation data, and carry out hash calculating, and corresponding hash value and user terminal are verified;It tests Hash value is stored in data management system block chain after card is consistent;
Data in S10, universal data system are saved according to institute's storing data position by corresponding node, and data correspond to hash Value is saved by data management system;
S11, data consumer apply decrypting inquired encryption data to data owner;
S12, data owner issue authorized application to data management system using user information key or data key;
Any audit node verification user's authorized application of S13, data management system;
S14, it is required according to specific authorization, block chain management system carries out operation pipe to application automatically using intelligent contract Reason.
As seen from the above description, the present embodiment uses internet information website (portal website) and social category website with user For target, the concept of data ownership is introduced, explicit data creator (user) controls data and supervise permission.In addition, this The data (general data) that embodiment creates user are handled, using user identification tag with the ownership of explicit data. In addition, the present embodiment using decentralization distributed storage mechanism store general data, reduce Constructing data center and maintenance at This, improves the circulation of data.In addition, the present embodiment establishes polycentric data management system, each node is not according in system The authorization of user information data and modification additions and deletions are exercised supervision and authenticated with permission.The present embodiment uses authorization block chain, benefit Realize that the mapping of the data of user identity label and universal data system in customer information control system is closed automatically with intelligent contract System and management.
Based on identical inventive concept, another embodiment of the present invention provides a kind of user data managements based on block chain Device, referring to fig. 2, the device include: to set up module 21 and data management module 22, in which:
Module 21 is set up, for establishing the block chain data management system for being used for user data management;The block chain number According in management system include subscriber terminal equipment node and Internet Service Provider's node;
Data management module 22, for so that subscriber terminal equipment node and each Internet Service Provider's node pass through institute State rights management and safety management that block chain data management system realizes user data.
Due to the user data management device provided in an embodiment of the present invention based on block chain, it can be used for executing above-mentioned reality The user data management based on block chain described in example is applied, working principle is similar with beneficial effect, therefore herein no longer in detail It states, particular content can be found in the introduction of above-described embodiment.
Based on identical inventive concept, further embodiment of this invention provides a kind of electronic equipment, referring to Fig. 3, the electricity Sub- equipment specifically includes following content: processor 301, memory 302, communication interface 303 and bus 304;
Wherein, the processor 301, memory 302, communication interface 303 complete mutual lead to by the bus 304 Letter;The communication interface 303 is for realizing the information between the relevant devices such as each modeling software and intelligent manufacturing equipment module library Transmission;
The processor 301 is used to call the computer program in the memory 302, and the processor executes the meter The Overall Steps of the above-mentioned user data management based on block chain are realized when calculation machine program, for example, the processor executes Following processes are realized when the computer program: establishing the block chain data management system for being used for user data management;The area It include subscriber terminal equipment node and Internet Service Provider's node in block chain data management system.Subscriber terminal equipment node and Each Internet Service Provider's node realizes the rights management and safety of user data by the block chain data management system Management.
Based on identical inventive concept, further embodiment of this invention provides a kind of computer readable storage medium, the meter It is stored with computer program on calculation machine readable storage medium storing program for executing, which realizes above-mentioned based on block when being executed by processor The Overall Steps of the user data management of chain, for example, the processor realizes following mistakes when executing the computer program Journey: the block chain data management system for being used for user data management is established;It include user in the block chain data management system Terminal device node and Internet Service Provider's node.Subscriber terminal equipment node and each Internet Service Provider's node pass through The block chain data management system realizes the rights management and safety management of user data.
In addition, the logical order in above-mentioned memory can be realized and as independence by way of SFU software functional unit Product when selling or using, can store in a computer readable storage medium.Based on this understanding, of the invention Technical solution substantially the part of the part that contributes to existing technology or the technical solution can be with software in other words The form of product embodies, which is stored in a storage medium, including some instructions use so that One computer equipment (can be personal computer, server or the network equipment etc.) executes each embodiment institute of the present invention State all or part of the steps of method.And storage medium above-mentioned includes: USB flash disk, mobile hard disk, read-only memory (ROM, Read- Only Memory), random access memory (RAM, Random Access Memory), magnetic or disk etc. are various can be with Store the medium of program code.
The apparatus embodiments described above are merely exemplary, wherein described, unit can as illustrated by the separation member It is physically separated with being or may not be, component shown as a unit may or may not be physics list Member, it can it is in one place, or may be distributed over multiple network units.It can be selected according to the actual needs In some or all of the modules realize the purpose of the embodiment of the present invention.Those of ordinary skill in the art are not paying wound In the case where the labour for the property made, it can understand and implement.
Through the above description of the embodiments, those skilled in the art can be understood that each embodiment can It realizes by means of software and necessary general hardware platform, naturally it is also possible to pass through hardware.Based on this understanding, on Stating technical solution, substantially the part that contributes to existing technology can be embodied in the form of software products in other words, should Computer software product may be stored in a computer readable storage medium, such as ROM/RAM, magnetic disk, CD, including several fingers It enables and using so that a computer equipment (can be personal computer, server or the network equipment etc.) executes each implementation Method described in certain parts of example or embodiment.
Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations;Although Present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that: it still may be used To modify the technical solutions described in the foregoing embodiments or equivalent replacement of some of the technical features; And these are modified or replaceed, technical solution of various embodiments of the present invention that it does not separate the essence of the corresponding technical solution spirit and Range.

Claims (10)

1.一种基于区块链的用户数据管理方法,其特征在于,包括:1. a block chain-based user data management method is characterized in that, comprising: 建立用于用户数据管理的区块链数据管理系统;所述区块链数据管理系统中包括用户终端设备节点和网络服务提供商节点;Establish a blockchain data management system for user data management; the blockchain data management system includes user terminal equipment nodes and network service provider nodes; 用户终端设备节点和各个网络服务提供商节点通过所述区块链数据管理系统实现用户数据的权限管理和安全管理。The user terminal equipment node and each network service provider node realize the authority management and security management of user data through the blockchain data management system. 2.根据权利要求1所述的方法,其特征在于,所述用户终端设备节点和各个网络服务提供商节点通过所述区块链数据管理系统实现用户数据的权限管理和安全管理,包括:2. The method according to claim 1, wherein the user terminal equipment node and each network service provider node realize the authority management and security management of user data through the blockchain data management system, including: 目标用户终端设备节点为目标用户终端设备访问目标网络服务产生的数据添加用户标签形成通用数据,并对所述通用数据进行加密后存储至所述目标用户终端设备节点中;其中,所述通用数据的数据结构为用户标签数据头加上目标用户终端设备访问目标网络服务产生的数据;其中,所述用户标签用于确定所述通用数据的所有权;The target user terminal equipment node adds a user tag to the data generated by the target user terminal equipment accessing the target network service to form general data, and encrypts the general data and stores it in the target user terminal equipment node; wherein, the general data The data structure is the user tag data header plus the data generated by the target user terminal equipment accessing the target network service; wherein, the user tag is used to determine the ownership of the general data; 目标网络服务提供商节点收集并存储所述目标用户终端设备节点访问所述目标网络服务产生的数据;The target network service provider node collects and stores the data generated by the target user terminal equipment node accessing the target network service; 每当所述目标用户终端设备和所述目标网络服务提供商节点确定所述目标用户终端设备访问所述目标网络服务产生新的数据时,所述目标用户终端设备和所述目标网络服务提供商节点分别将新产生的数据进行哈希计算,若两者哈希值一致,则将哈希值存储至区块链数据管理系统中,以供所述区块链数据管理系统上的除所述目标用户终端设备节点和所述目标网络服务提供商节点以外的其他用户终端设备节点和其他网络服务提供商节点通过数据授权申请的方式获取所述通用数据,否则向区块链数据管理系统提出仲裁申请,由区块链数据管理系统进行决策。Whenever the target user terminal device and the target network service provider node determine that the target user terminal device accesses the target network service to generate new data, the target user terminal device and the target network service provider The nodes perform hash calculation on the newly generated data respectively, and if the hash values of the two are consistent, the hash value is stored in the blockchain data management system for use in the blockchain data management system to remove the The target user terminal equipment node and other user terminal equipment nodes and other network service provider nodes other than the target network service provider node obtain the general data by means of a data authorization application, otherwise, submit an arbitration to the blockchain data management system The application is decided by the blockchain data management system. 3.根据权利要求2所述的方法,其特征在于,所述目标用户终端设备节点还用于将用户信息加密后存储至区块链数据管理系统。3 . The method according to claim 2 , wherein the target user terminal equipment node is further configured to encrypt the user information and store it in the blockchain data management system. 4 . 4.根据权利要求3所述的方法,其特征在于,所述目标用户终端设备节点共生成三种秘钥,分别为主密钥,用户信息密钥以及数据密钥;4. The method according to claim 3, wherein, the target user terminal equipment node generates three kinds of secret keys, which are respectively a master key, a user information key and a data key; 所述主密钥用于授权属于同一用户管理的其他新用户终端设备节点的接入和删除,以及用户信息密钥和数据密钥的更新和废除;The master key is used to authorize the access and deletion of other new user terminal equipment nodes belonging to the same user management, as well as the update and revocation of user information keys and data keys; 所述用户信息密钥用于加密所述用户信息;the user information key is used to encrypt the user information; 所述数据密钥用于加密所述通用数据。The data key is used to encrypt the general data. 5.根据权利要求4所述的方法,其特征在于,所述方法还包括:5. The method according to claim 4, wherein the method further comprises: 在所述区块链数据管理系统上的除所述目标用户终端设备节点和所述目标网络服务提供商节点以外的其他用户终端设备节点和其他网络服务提供商节点欲获取所述通用数据时,向所述区块链数据管理系统上的审核节点提出数据授权申请,并经所述审核节点审核通过后获取所述目标用户终端设备保存的所述通用数据,同时将获取的通用数据与区块链数据管理系统中存储的哈希值进行校验,以确定数据的完整性和一致性。When other user terminal equipment nodes and other network service provider nodes other than the target user terminal equipment node and the target network service provider node on the blockchain data management system want to obtain the general data, Submit a data authorization application to the audit node on the blockchain data management system, and obtain the general data saved by the target user terminal device after being reviewed by the audit node, and at the same time combine the acquired general data with the block The hash value stored in the chain data management system is verified to determine the integrity and consistency of the data. 6.根据权利要求5所述的方法,其特征在于,所述方法还包括:6. The method according to claim 5, wherein the method further comprises: 当目标用户终端设备节点欲对目标用户终端设备保存的所述通用数据进行操作时,向所述区块链数据管理系统上的审核节点提出数据授权申请,并经所述审核节点审核通过后对所述通用数据进行操作,并将操作后的数据和操作记录存储至目标用户终端设备。When the target user terminal equipment node intends to operate the general data saved by the target user terminal equipment, a data authorization application is submitted to the audit node on the blockchain data management system, and after the audit node has passed the audit, the The general data is operated, and the operated data and operation records are stored in the target user terminal device. 7.根据权利要求2所述的方法,其特征在于,所述方法还包括:7. The method according to claim 2, wherein the method further comprises: 当区块链数据管理系统对所述仲裁申请进行决策时,所述区块链数据管理系统上的除所述目标用户终端设备节点和所述目标网络服务提供商节点以外的其他用户终端设备节点和其他网络服务提供商节点以及审核节点参与所述决策。When the blockchain data management system makes a decision on the arbitration application, other user terminal equipment nodes on the blockchain data management system except the target user terminal equipment node and the target network service provider node and other network service provider nodes and audit nodes participate in the decision. 8.一种基于区块链的用户数据管理装置,其特征在于,包括:8. A block chain-based user data management device, comprising: 组建模块,用于建立用于用户数据管理的区块链数据管理系统;所述区块链数据管理系统中包括用户终端设备节点和网络服务提供商节点;A building block is used to establish a blockchain data management system for user data management; the blockchain data management system includes user terminal equipment nodes and network service provider nodes; 数据管理模块,用于使得用户终端设备节点和各个网络服务提供商节点通过所述区块链数据管理系统实现用户数据的权限管理和安全管理。The data management module is used to enable the user terminal equipment node and each network service provider node to realize the authority management and security management of user data through the blockchain data management system. 9.一种电子设备,包括存储器、处理器及存储在存储器上并可在处理器上运行的计算机程序,其特征在于,所述处理器执行所述程序时实现如权利要求1至7任一项所述基于区块链的用户数据管理方法的步骤。9. An electronic device, comprising a memory, a processor and a computer program stored on the memory and running on the processor, wherein the processor implements any one of claims 1 to 7 when the processor executes the program The steps of the blockchain-based user data management method described in item 1. 10.一种非暂态计算机可读存储介质,其上存储有计算机程序,其特征在于,该计算机程序被处理器执行时实现如权利要求1至7任一项所述基于区块链的用户数据管理方法的步骤。10. A non-transitory computer-readable storage medium on which a computer program is stored, characterized in that, when the computer program is executed by a processor, a blockchain-based user according to any one of claims 1 to 7 is implemented Steps of a data management method.
CN201910107550.6A 2019-02-02 2019-02-02 User data management and device based on block chain Pending CN109903046A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201910107550.6A CN109903046A (en) 2019-02-02 2019-02-02 User data management and device based on block chain

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201910107550.6A CN109903046A (en) 2019-02-02 2019-02-02 User data management and device based on block chain

Publications (1)

Publication Number Publication Date
CN109903046A true CN109903046A (en) 2019-06-18

Family

ID=66944673

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201910107550.6A Pending CN109903046A (en) 2019-02-02 2019-02-02 User data management and device based on block chain

Country Status (1)

Country Link
CN (1) CN109903046A (en)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111539005A (en) * 2020-04-23 2020-08-14 中国电子技术标准化研究院 A block chain data identification method and related device oriented to data security policy
CN111723347A (en) * 2020-06-01 2020-09-29 清华大学 Identity authentication method, device, electronic device and storage medium
CN112202565A (en) * 2020-09-21 2021-01-08 中国电子科技网络信息安全有限公司 A method for implementing a password patch plug-in in a blockchain system

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20180079806A (en) * 2017-01-02 2018-07-11 주식회사 코인플러그 Method for authenticating a user without a face-to-face contact by using mobile id based on blockchain and merkle tree structure related thereto, and terminal and server using the same
CN109190410A (en) * 2018-09-26 2019-01-11 华中科技大学 A kind of log behavior auditing method based on block chain under cloud storage environment

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
KR20180079806A (en) * 2017-01-02 2018-07-11 주식회사 코인플러그 Method for authenticating a user without a face-to-face contact by using mobile id based on blockchain and merkle tree structure related thereto, and terminal and server using the same
CN109190410A (en) * 2018-09-26 2019-01-11 华中科技大学 A kind of log behavior auditing method based on block chain under cloud storage environment

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
邹雪皎: "基于Web的数据库安全技术研究", 《中国优秀硕士学位论文全文数据库 信息科技辑》 *

Cited By (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN111539005A (en) * 2020-04-23 2020-08-14 中国电子技术标准化研究院 A block chain data identification method and related device oriented to data security policy
CN111723347A (en) * 2020-06-01 2020-09-29 清华大学 Identity authentication method, device, electronic device and storage medium
CN111723347B (en) * 2020-06-01 2023-06-06 清华大学 Identity authentication method, identity authentication device, electronic equipment and storage medium
CN112202565A (en) * 2020-09-21 2021-01-08 中国电子科技网络信息安全有限公司 A method for implementing a password patch plug-in in a blockchain system

Similar Documents

Publication Publication Date Title
US11314891B2 (en) Method and system for managing access to personal data by means of a smart contract
EP3491572B1 (en) Method for controlling access to a shared resource
Zhonghua et al. Smart contracts attribute-based access control model for security & privacy of IoT system using blockchain and edge computing
CN114513533A (en) Classified and graded fitness and health big data sharing system and method
CN103220141B (en) A kind of protecting sensitive data method and system based on group key strategy
CN109729168A (en) A kind of data share exchange system and method based on block chain
CN111783149A (en) Data processing method, system, processing equipment and authentication equipment based on block chain
Namasudra et al. A new table based protocol for data accessing in cloud computing.
CN110046890A (en) A kind of block chain Rights Management System and method
CN110083604A (en) A kind of data really weigh method and device
KR102450412B1 (en) Service level agreement-based sharing economy service provision system and method in the Internet of Things
CN110266653A (en) A kind of method for authenticating, system and terminal device
EP3817320B1 (en) Blockchain-based system for issuing and validating certificates
CN109255250A (en) A kind of data safety encryption device and application method based on alliance's chain
CN109903046A (en) User data management and device based on block chain
CN105554018A (en) Network real name verification method
CN111352999A (en) National data circulation and data right confirming method and platform based on block chain
CN117332391A (en) Power distribution network data asset security access method and system considering authority hierarchical management and control
CN118349979A (en) A user information security processing control system for smart medical care
CN117077195A (en) Web3.0 data privacy protection method, system and equipment based on distributed storage network
CN119272313B (en) A time-controlled fine-grained traceability method for large-scale supply chain data
Chen et al. BSPPF: Blockchain‐Based Security and Privacy Preventing Framework for Data Middle Platform in the Era of IR 4.0
Vignesh et al. Secured Data Access and Control Abilities Management over Cloud Environment using Novel Cryptographic Principles
CN113592509B (en) A data traceability supervision method and system based on supply chain
CN104378356B (en) The demand response event method for managing security and system of based role

Legal Events

Date Code Title Description
PB01 Publication
PB01 Publication
SE01 Entry into force of request for substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication
RJ01 Rejection of invention patent application after publication

Application publication date: 20190618

点击 这是indexloc提供的php浏览器服务,不要输入任何密码和下载