Summary of the invention
For the problems of the prior art, the embodiment of the present invention provides a kind of user data management based on block chain
And device.
In a first aspect, the embodiment of the invention provides a kind of user data managements based on block chain, comprising:
Establish the block chain data management system for being used for user data management;Include in the block chain data management system
Subscriber terminal equipment node and Internet Service Provider's node;
Subscriber terminal equipment node and each Internet Service Provider's node are real by the block chain data management system
The rights management and safety management of current user data.
Further, the subscriber terminal equipment node and each Internet Service Provider's node pass through the block chain number
The rights management and safety management of user data are realized according to management system, comprising:
Target terminal user device node is the data addition that the network service of target terminal user equipment access target generates
User tag forms general data, and is stored after encrypting to the general data to the target terminal user device node
In;Wherein, the data structure of the general data is that user tag data head adds target terminal user equipment access target net
The data that network service generates;Wherein, the user tag is used to determine the ownership of the general data;
Target web service provider node, which is collected and stores the target terminal user device node, accesses the target
The data that network service generates;
Whenever the target terminal user equipment and target web service provider node determine the target user
When terminal device accesses the target web service and generates new data, the target terminal user equipment and the target network
Newly generated data are carried out Hash calculation respectively and store cryptographic Hash if the two cryptographic Hash is consistent by service provider node
Into block chain data management system, for removing the target terminal user equipment section in the block chain data management system
Other users terminal device node and other Internet Service Providers other than point and target web service provider node
Node obtains the general data by way of data grant application, otherwise proposes arbitration Shen to block chain data management system
Please, decision is carried out by block chain data management system.
Further, the target terminal user device node is stored after being also used to encrypt user information to block chain number
According to management system.
Further, the target terminal user device node symbiosis is at three kinds of code keys, respectively master key, user information
Key and data key;
The master key is used to authorize the access for other the new subscriber terminal equipment nodes for belonging to same user management and deletes
It removes and the update and abolishment of user information key and data key;
The user information key is for encrypting the user information;
The data key is for encrypting the general data.
Further, the method also includes:
The target terminal user device node and the target network are removed in the block chain data management system
Other users terminal device node and other Internet Service Provider's nodes other than service provider node are intended to obtain described logical
When with data, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and saves through the audit
Point obtains the general data that the target terminal user equipment saves after the approval, at the same the general data that will acquire with
The cryptographic Hash stored in block chain data management system is verified, to determine the integrality and consistency of data.
Further, the method also includes:
When target terminal user device node is intended to operate the general data that target terminal user equipment saves
When, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and through audit node audit
The general data is operated by rear, and by after operation data and operation note store to target terminal user and set
It is standby.
Further, the method also includes:
When block chain data management system carries out decision to the request for arbitration, in the block chain data management system
The other users terminal in addition to the target terminal user device node and target web service provider node set
Slave node and other Internet Service Provider's nodes and audit node participate in the decision.
Second aspect, the embodiment of the invention also provides a kind of user data management devices based on block chain, comprising:
Module is set up, for establishing the block chain data management system for being used for user data management;Wherein, the block chain
It include subscriber terminal equipment node and Internet Service Provider's node in data management system;
Data management module is used for so that subscriber terminal equipment node and each Internet Service Provider's node are described in
The rights management and safety management of block chain data management system realization user data.
The third aspect the embodiment of the invention also provides a kind of electronic equipment, including memory, processor and is stored in
On reservoir and the computer program that can run on a processor, the processor are realized when executing described program such as first aspect institute
The step of stating the user data management based on block chain.
Fourth aspect, the embodiment of the invention also provides a kind of non-transient computer readable storage mediums, are stored thereon with
Computer program is realized when the computer program is executed by processor as described in relation to the first aspect based on the user data pipe of block chain
The step of reason method.
As shown from the above technical solution, the user data management and dress provided in an embodiment of the present invention based on block chain
It sets, based on the mode of block chain, establishes the block chain data management system for being used for user data management, the block chain data pipe
It include subscriber terminal equipment node and Internet Service Provider's node in reason system, subscriber terminal equipment node and each network take
Business provider's node realizes the rights management and safety management of user data by the block chain data management system.As it can be seen that
The embodiment of the present invention realizes the rights management and safety management of user data by way of block chain.
Specific embodiment
In order to make the object, technical scheme and advantages of the embodiment of the invention clearer, below in conjunction with the embodiment of the present invention
In attached drawing, the technical scheme in the embodiment of the invention is clearly and completely described, it is clear that described embodiment is
A part of the embodiment of the present invention, instead of all the embodiments.Based on the embodiments of the present invention, those of ordinary skill in the art
Every other embodiment obtained without creative efforts, shall fall within the protection scope of the present invention.
Fig. 1 shows the flow chart of the user data management provided in an embodiment of the present invention based on block chain.Such as Fig. 1
Shown, the user data management provided in an embodiment of the present invention based on block chain includes the following steps:
Step 101: establishing the block chain data management system for being used for user data management;The block chain data management system
It include subscriber terminal equipment node and Internet Service Provider's node in system.
In this step, the block chain data management system for being used for user data management is established, so that subsequent can use
The block chain data management system of foundation realizes the management of user data.Step 102: subscriber terminal equipment node and each network
Service provider node realizes the rights management and safety management of user data by the block chain data management system.
In this step, be difficult to tamper with using block chain, it is transparent trace to the source, the higher feature of safety so that user is whole
End equipment node and each Internet Service Provider's node realize the power of user data by the block chain data management system
Limit management and safety management.
As shown from the above technical solution, the user data management and dress provided in an embodiment of the present invention based on block chain
It sets, based on the mode of block chain, establishes the block chain data management system for being used for user data management, the block chain data pipe
It include subscriber terminal equipment node and Internet Service Provider's node in reason system, subscriber terminal equipment node and each network take
Business provider's node realizes the rights management and safety management of user data by the block chain data management system.As it can be seen that
The embodiment of the present invention realizes the rights management and safety management of user data by way of block chain.
Content based on the above embodiment, above-mentioned steps 102 are realized especially by such as under type:
Target terminal user device node is the data addition that the network service of target terminal user equipment access target generates
User tag forms general data, and is stored after encrypting to the general data to the target terminal user device node
In;Wherein, the data structure of the general data is that user tag data head adds target terminal user equipment access target net
The data that network service generates;Wherein, the user tag is used to determine the ownership of the general data;
Target web service provider node, which is collected and stores the target terminal user device node, accesses the target
The data that network service generates;
Whenever the target terminal user equipment and target web service provider node determine the target user
When terminal device accesses the target web service and generates new data, the target terminal user equipment and the target network
Newly generated data are carried out Hash calculation respectively and store cryptographic Hash if the two cryptographic Hash is consistent by service provider node
Into block chain data management system, for removing the target terminal user equipment section in the block chain data management system
Other users terminal device node and other Internet Service Providers other than point and target web service provider node
Node obtains the general data by way of data grant application, otherwise proposes arbitration Shen to block chain data management system
Please, decision is carried out by block chain data management system.
In the present embodiment, using the label model that subscriber terminal equipment is arranged in is target terminal user equipment because accessing
The data addition user tag that target web service generates forms general data, and the label model belongs to user terminal data processing
The functional module of plug-in unit is mainly used for adding unification user label to the data that user generates, increases ownership property for data,
Each user tag is the unique identification (user identifier) to data ownership of user.In addition, the label model can be with
For the identification of customer access equipment, the terminal device newly accessed has been obtained by user using master key or by other
User equipment information table is added after being authorized in the equipment of authorization.
In the present embodiment, the ownership concept that data are introduced for user data, specifies number by user tag
According to ownership, the management of user data and corresponding general data is realized based on block chain, firstly, being all subscriber terminal equipments
The data of production add dependent attributes, specify the ownership of data;Secondly, the structure of general data is " user tag data
Head+subscriber terminal equipment accesses the data that the target web service generates ", due to being free of user identity privacy information,
Privacy of user preferably is protected, furthermore, general data is stored using the mode of distributed decentralization, takes full advantage of distribution
The low advantage of formula system operation expense.Finally, using each Site autonomy management, the mode of unified verifying realizes data
Controllable circulation, not only ensure that system have block chain be difficult to tamper with, it is transparent trace to the source, the higher feature of safety, but also avoid
The complete performance bottleneck that may cause using block chain storage architecture.
Content based on the above embodiment, the target terminal user device node are deposited after being also used to encrypt user information
It stores up to block chain data management system.
Content based on the above embodiment, the target terminal user device node symbiosis at three kinds of code keys, respectively based on
Key, user information key and data key;
The master key is used to authorize the access for other the new subscriber terminal equipment nodes for belonging to same user management and deletes
It removes and the update and abolishment of user information key and data key;
The user information key is for encrypting the user information;
The data key is for encrypting the general data.
In the present embodiment, the generation of three kinds of code keys is realized by the way that the code key module of subscriber terminal equipment is arranged in, code key
Module belongs to user terminal data processing pin function module, selects to install by user in the form of browser plug-in or client
To the terminal device of oneself, major function: it is generated for user, manages code key.Cipher key module will generate and use three kinds of differences
The code key of permission and function is master key, user information key and data key respectively.Master key is set for operating user terminal
The update and abolishment of standby access and deletion and user information key and data key;User information key is for encrypting user
Information;Data key is for encrypting user's end data.
It should be noted that user information using user terminal data processing plug-in unit encrypting module to user information code key into
Data management system is stored in after row encryption, application obtains user information and needs user by secondary key authorization and by audit section
Point verifying confirmation;The general data that user generates is stored in subscriber terminal equipment after being encrypted by data key.
Content based on the above embodiment, the method also includes:
The target terminal user device node and the target network are removed in the block chain data management system
Other users terminal device node and other Internet Service Provider's nodes other than service provider node are intended to obtain described logical
When with data, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and saves through the audit
Point obtains the general data that the target terminal user equipment saves after the approval, at the same the general data that will acquire with
The cryptographic Hash stored in block chain data management system is verified, to determine the integrality and consistency of data.
In the present embodiment, it not only specifies the ownership of data, and by the design of multi-key cipher, makes different information
Corresponding code key is respectively adopted to be managed, to enhance the safety of data.
Content based on the above embodiment, the method also includes:
When target terminal user device node is intended to operate the general data that target terminal user equipment saves
When, the audit node in Xiang Suoshu block chain data management system proposes data grant application, and through audit node audit
The general data is operated by rear, and by after operation data and operation note store to target terminal user and set
It is standby.
In the present embodiment, target terminal user device node can to audit node propose to owned data into
Row access, inquiry and the authorized application modified.In the present embodiment, block chain data management system intelligence contract refers to according to authorization
Order automatically operates the data in block chain data management system.
In the present embodiment, audit node is served as by the third-party institution, mainly to each in block chain data management system
Kind request (such as authorize, appeal, modification) carry out audit verifying, using a ticket agree to system, operation note deposit block chain with
It is standby to verify and trace to the source.
Content based on the above embodiment, the method also includes:
When block chain data management system carries out decision to the request for arbitration, in the block chain data management system
The other users terminal in addition to the target terminal user device node and target web service provider node set
Slave node and other Internet Service Provider's nodes and audit node participate in the decision.
In the present embodiment, the target terminal user device node and the target are removed in block chain data management system
Other users terminal device node and other Internet Service Provider's nodes other than Internet Service Provider's node each may participate in
Various decisions in verification management system, and possess the power to lodge a complaint to the result of decision.
In the present embodiment, it is reconstructed, is made based on Enterprise Operation System (EOS) standard Open Source Code
With common recognition algorithm is represented based on authority classification, the member node of block chain data management system is used as block chain management system simultaneously more
The main chain node of system, all systems are interior with the verifying and supervision that can be used as verifying node participative management system per family.
It should be noted that operation note all in block chain data management system is saved, to realize with to user
The various operation notes of privacy information can not distort, can supervise and can be traced.
It should be noted that block chain data management system is made of multicenter authorization block chain, respectively saved on block chain
Point has different participations to behaviors such as decision, certification, verifyings on chain according to different permissions.Data management system will be led
The user information of encryption, the hash value of general data data and various system operatios record are saved, and uses intelligent contract
It is automatic to execute corresponding instruction.In addition, all nodes use standard P2P communication protocol in block chain data management system, complete logical
Telecommunication function.
The user data management provided in this embodiment based on block chain is carried out below by a specific example
It is described in detail, specific implementation process step is described as follows:
The plug-in unit (based on browser or being implanted directly into system) that S1, user terminal are installed;
S2, plug-in unit produce key: master key, user information key, data key;
S3, plug-in unit generate user and uniformly identify label;
S4, user tag data are stored in data management system application by block chain;
S5, new terminal equipment using master key or have verified that equipment carries out access verifying, and new terminal equipment is included in user and is set
Standby list;
S6, user terminal plug-in unit service generated data using network to user and add subscriber identity data head, are formed
General data;
S7, user terminal plug-in unit carry out hash calculating to general data;
S8, encryption storage is carried out into user equipment to general data according to user option;
S9, service node collect user's creation data, and carry out hash calculating, and corresponding hash value and user terminal are verified;It tests
Hash value is stored in data management system block chain after card is consistent;
Data in S10, universal data system are saved according to institute's storing data position by corresponding node, and data correspond to hash
Value is saved by data management system;
S11, data consumer apply decrypting inquired encryption data to data owner;
S12, data owner issue authorized application to data management system using user information key or data key;
Any audit node verification user's authorized application of S13, data management system;
S14, it is required according to specific authorization, block chain management system carries out operation pipe to application automatically using intelligent contract
Reason.
As seen from the above description, the present embodiment uses internet information website (portal website) and social category website with user
For target, the concept of data ownership is introduced, explicit data creator (user) controls data and supervise permission.In addition, this
The data (general data) that embodiment creates user are handled, using user identification tag with the ownership of explicit data.
In addition, the present embodiment using decentralization distributed storage mechanism store general data, reduce Constructing data center and maintenance at
This, improves the circulation of data.In addition, the present embodiment establishes polycentric data management system, each node is not according in system
The authorization of user information data and modification additions and deletions are exercised supervision and authenticated with permission.The present embodiment uses authorization block chain, benefit
Realize that the mapping of the data of user identity label and universal data system in customer information control system is closed automatically with intelligent contract
System and management.
Based on identical inventive concept, another embodiment of the present invention provides a kind of user data managements based on block chain
Device, referring to fig. 2, the device include: to set up module 21 and data management module 22, in which:
Module 21 is set up, for establishing the block chain data management system for being used for user data management;The block chain number
According in management system include subscriber terminal equipment node and Internet Service Provider's node;
Data management module 22, for so that subscriber terminal equipment node and each Internet Service Provider's node pass through institute
State rights management and safety management that block chain data management system realizes user data.
Due to the user data management device provided in an embodiment of the present invention based on block chain, it can be used for executing above-mentioned reality
The user data management based on block chain described in example is applied, working principle is similar with beneficial effect, therefore herein no longer in detail
It states, particular content can be found in the introduction of above-described embodiment.
Based on identical inventive concept, further embodiment of this invention provides a kind of electronic equipment, referring to Fig. 3, the electricity
Sub- equipment specifically includes following content: processor 301, memory 302, communication interface 303 and bus 304;
Wherein, the processor 301, memory 302, communication interface 303 complete mutual lead to by the bus 304
Letter;The communication interface 303 is for realizing the information between the relevant devices such as each modeling software and intelligent manufacturing equipment module library
Transmission;
The processor 301 is used to call the computer program in the memory 302, and the processor executes the meter
The Overall Steps of the above-mentioned user data management based on block chain are realized when calculation machine program, for example, the processor executes
Following processes are realized when the computer program: establishing the block chain data management system for being used for user data management;The area
It include subscriber terminal equipment node and Internet Service Provider's node in block chain data management system.Subscriber terminal equipment node and
Each Internet Service Provider's node realizes the rights management and safety of user data by the block chain data management system
Management.
Based on identical inventive concept, further embodiment of this invention provides a kind of computer readable storage medium, the meter
It is stored with computer program on calculation machine readable storage medium storing program for executing, which realizes above-mentioned based on block when being executed by processor
The Overall Steps of the user data management of chain, for example, the processor realizes following mistakes when executing the computer program
Journey: the block chain data management system for being used for user data management is established;It include user in the block chain data management system
Terminal device node and Internet Service Provider's node.Subscriber terminal equipment node and each Internet Service Provider's node pass through
The block chain data management system realizes the rights management and safety management of user data.
In addition, the logical order in above-mentioned memory can be realized and as independence by way of SFU software functional unit
Product when selling or using, can store in a computer readable storage medium.Based on this understanding, of the invention
Technical solution substantially the part of the part that contributes to existing technology or the technical solution can be with software in other words
The form of product embodies, which is stored in a storage medium, including some instructions use so that
One computer equipment (can be personal computer, server or the network equipment etc.) executes each embodiment institute of the present invention
State all or part of the steps of method.And storage medium above-mentioned includes: USB flash disk, mobile hard disk, read-only memory (ROM, Read-
Only Memory), random access memory (RAM, Random Access Memory), magnetic or disk etc. are various can be with
Store the medium of program code.
The apparatus embodiments described above are merely exemplary, wherein described, unit can as illustrated by the separation member
It is physically separated with being or may not be, component shown as a unit may or may not be physics list
Member, it can it is in one place, or may be distributed over multiple network units.It can be selected according to the actual needs
In some or all of the modules realize the purpose of the embodiment of the present invention.Those of ordinary skill in the art are not paying wound
In the case where the labour for the property made, it can understand and implement.
Through the above description of the embodiments, those skilled in the art can be understood that each embodiment can
It realizes by means of software and necessary general hardware platform, naturally it is also possible to pass through hardware.Based on this understanding, on
Stating technical solution, substantially the part that contributes to existing technology can be embodied in the form of software products in other words, should
Computer software product may be stored in a computer readable storage medium, such as ROM/RAM, magnetic disk, CD, including several fingers
It enables and using so that a computer equipment (can be personal computer, server or the network equipment etc.) executes each implementation
Method described in certain parts of example or embodiment.
Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, rather than its limitations;Although
Present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that: it still may be used
To modify the technical solutions described in the foregoing embodiments or equivalent replacement of some of the technical features;
And these are modified or replaceed, technical solution of various embodiments of the present invention that it does not separate the essence of the corresponding technical solution spirit and
Range.