CN110851843A - Data management method and device based on block chain - Google Patents

Abstract

The embodiment of the specification discloses a data management method and device based on a block chain, the data management method and device based on the block chain are applied to terminal equipment, and the method at least comprises the following steps: determining target data to be stored in a block chain and identification information of the target data; calculating a first abstract value of the target data according to a preset abstract algorithm; encrypting the target data by using a first key to form ciphertext data; and storing the ciphertext data, the first abstract value and the identification information in a block chain in an associated manner. Through the technical scheme of the embodiment of the specification, the data can be more effectively prevented from being stolen and tampered by an intruder, so that the data security is improved.

Description

Blockchain-based data management method and device

technical field

This specification relates to the field of computer technology, and in particular, to a method and device for data management based on blockchain.

Background technique

Blockchain uses chain data structure to verify and store data, uses distributed node consensus algorithm to generate and update data, and uses cryptography to ensure the security of data transmission and access between distributed nodes. Blockchain technology is essentially a decentralized distributed database technology. The data is openly and transparently stored in each accounting node of the blockchain network, so that the data stored in the blockchain can not be tampered with. characteristic.

For ordinary users, the user's data is openly and transparently stored in each accounting node of the blockchain network, which increases the risk of malicious theft of user data by intruders. Moreover, the terminal equipment that users use on a daily basis can usually access the blockchain network, but it may not join the blockchain network as a node of the blockchain network; in this way, the intruder may also be in the terminal equipment. In the process of obtaining data from the blockchain, the data is tampered with in order to achieve a specific business purpose.

Therefore, how to more effectively prevent data from being stolen and tampered with by intruders, so as to improve data security, has become an urgent problem to be solved.

SUMMARY OF THE INVENTION

The embodiments of this specification provide a blockchain-based data management method and device, which can more effectively prevent data from being stolen and tampered with by intruders, thereby improving data security.

In a first aspect, a blockchain-based data management method is provided, the method is applied to a terminal device, and the method includes:

Determine the target data to be stored in the blockchain and the identification information of the target data;

Calculate the first digest value of the target data according to a preset digest algorithm;

encrypting the target data with the first key to form ciphertext data;

The ciphertext data, the first digest value and the identification information are associated and stored in the blockchain.

In one possible implementation,

After the ciphertext data, the first digest value and the identification information are associated and stored in the blockchain, the method further includes: adding the identification information as an index item to a data index table.

In one possible implementation,

The identification information includes: a file name corresponding to the target data, and a first moment corresponding to the determination of the target data.

In one possible implementation,

The described adding the identification information as an index item to the data index table includes:

Detecting whether there is a first index entry in each of the index entries included in the data index table, and the first index entry includes the file name;

If the first index entry exists, the second time included in the first index entry is updated to the first time.

In one possible implementation,

The storing the ciphertext data, the first digest value and the identification information in association with the blockchain includes:

Write the ciphertext data, the first digest value and the identification information into the data field of a transaction, and publish the transaction to the blockchain network through the nodes of the blockchain network, so that the transaction is Packed into a block, the block is added to the blockchain.

In a second aspect, a blockchain-based data management method is provided, the method is applied to a terminal device, and the method includes:

Determine the identification information of the target data to be acquired;

Obtain the ciphertext data and the first digest value associated with the identification information from the blockchain;

Decrypt the ciphertext data with a second key to obtain the target data, wherein the second key is the same as the first key used to encrypt the target data to form the ciphertext data or Corresponding;

Calculate the second digest value of the target data according to a preset digest algorithm;

In the case that the first digest value and the second digest value are the same, it is determined that the target data has not been tampered with, and the target data is provided.

In one possible implementation,

Before determining the identification information of the target data to be acquired, the method further includes: providing a data index table to the user, the data index table including at least one index item;

The determining of the identification information of the target data to be acquired includes: in response to a user triggering a second index item in the at least one index item, determining that the second index item is the identification information of the target data to be acquired.

In a third aspect, a block chain-based data management apparatus is provided, the apparatus is applied to terminal equipment, and the apparatus includes:

an information determination unit, configured to determine target data to be stored in the blockchain and identification information of the target data;

The digest calculation unit is configured to calculate the first digest value of the target data according to a preset digest algorithm;

an encryption processing unit configured to encrypt the target data with the first key to form ciphertext data;

A storage processing unit, configured to associate and store the ciphertext data, the first digest value and the identification information in the blockchain.

In one possible implementation,

The apparatus further includes: an index management unit configured to add the identification information as an index item to the data index table.

In a fourth aspect, a blockchain-based data management apparatus is provided, the apparatus is applied to terminal equipment, and the apparatus includes:

an information determination unit, configured to determine the identification information of the target data to be acquired;

a data acquisition unit, configured to acquire the ciphertext data and the first digest value associated with the identification information from the blockchain;

A decryption processing unit configured to use a second key to decrypt the ciphertext data to obtain the target data, wherein the second key is the same as the one used when encrypting the target data to form the ciphertext data The first key is the same or corresponding;

A digest calculation unit, configured to calculate a second digest value of the target data according to a preset digest algorithm;

A data providing unit, configured to determine that the target data has not been tampered with, and provide the target data when the first digest value and the second digest value are the same.

A fifth aspect provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed in a computing device, the computing device implements any one of the first aspect and the second aspect the method described.

In a sixth aspect, a terminal device is provided, including a memory and a processor, wherein executable code is stored in the memory, and when the processor executes the executable code, any one of the first and second aspects is implemented. one of the methods described.

Through the data management method and device provided in the embodiments of this specification, on the one hand, the target data is not directly stored in the blockchain, even if the intruder can obtain the ciphertext data of the target data from the blockchain, it will be impossible to obtain the target data. On the other hand, the ciphertext data, the first digest value and the identification information are associated and stored in the block chain, so that the terminal device can extract the target data from the block chain based on the identification information. The ciphertext data and the first digest value associated with it are obtained from the chain, and the first digest value can be used to verify the integrity of the target data corresponding to the ciphertext data, which is beneficial to reduce the possibility of intruders tampering with the target data. sex. To sum up, the technical solutions provided in the embodiments of this specification can more effectively prevent data from being stolen and tampered with by intruders, thereby improving data security.

Description of drawings

1 is a schematic diagram of a system framework of an embodiment of the present specification;

2 is a flowchart of a blockchain-based data management method provided in an embodiment of this specification;

3 is a flowchart of another blockchain-based data management method provided in the embodiment of this specification;

FIG. 4 is a flowchart of another blockchain-based data management method provided in the embodiment of this specification;

5 is a schematic structural diagram of a blockchain-based data management device provided in the embodiment of this specification;

6 is a schematic structural diagram of another blockchain-based data management device provided in the embodiment of this specification;

FIG. 7 is a schematic structural diagram of another block chain-based data management apparatus provided in an embodiment of the present specification.

Detailed ways

FIG. 1 shows a schematic diagram of a system framework of an embodiment of the present specification. As shown in FIG. 1, a blockchain network (or a blockchain system) 10 may include a plurality of blockchain nodes 101; each blockchain node 101 of the blockchain network 10 has a transaction that will contain data The ability to broadcast to the entire blockchain network 10; the blockchain node 101 as an accounting node can package the transactions it receives into blocks and add them to the blockchain to store data in the blockchain.

In each blockchain node 101 included in the blockchain network 10, each node stores the same transaction, that is, each node in the blockchain network 10 stores the same data; and, the blockchain stored in the node Of the two adjacent blocks included, the later-packed block is associated with the earlier-packed block. In this way, the data stored in the blockchain is immutable.

The terminal device 20 used by the user may join the blockchain network 10 as a blockchain node 101 , and may also be connected to one or more blockchain nodes 101 of the blockchain network 10 . When the terminal device 20 is connected to a blockchain node 101 of the blockchain network 10, the terminal device 20 can send a transaction containing data to the blockchain node 101 connected to it, and the node 101 can publish the transaction containing data to The blockchain network 10 ultimately enables transactions containing data to be stored in the blockchain.

Correspondingly, the terminal device 20 can also obtain the data contained in each transaction stored in the blockchain through the blockchain node 101 connected to it.

It can be understood that each blockchain node 101 may be one or more computing devices with certain data storage capability and certain computing capability, such as a server.

It can be understood that the terminal device 20 used by the user includes, but is not limited to, various forms of electronic devices such as notebook computers, tablet computers, and smart phones that can communicate with the computing device serving as the blockchain node 101 .

It can be understood that for the blockchain network 10, each blockchain node 101 itself and its connected terminal device 20 can query the data stored in the blockchain, and the blockchain node 101 may be hosted by different custodians. (enterprise, organization or individual) for hosting. If the intruder successfully invades a certain terminal device 20 or a certain blockchain node 101, he can directly steal the data that is openly and transparently stored on each node of the blockchain network 10; moreover, the terminal device 20 is not used as a block When the chain node 101 joins the blockchain network 10, the data may be stolen or tampered with by intruders during the transmission of the data between the terminal device 20 and the connected blockchain node 101, and the security of the data is low.

In view of this, the embodiments of the present application provide at least a blockchain-based data management method and apparatus, in order to more effectively prevent data from being stolen and tampered with by intruders, thereby improving data security.

The technical solutions of the embodiments of the present specification will be described in detail below in conjunction with the above-mentioned system framework.

FIG. 2 is a flowchart of a blockchain-based data management method provided in an embodiment of this specification. The method is executed by the terminal device 20. As shown in FIG. 2, the method may include at least the following steps 21 to 27: Step 21, determine the target data to be stored in the blockchain and the identification information of the target data; Step 23 , calculate the first digest value of the target data according to the preset digest algorithm; Step 25, encrypt the target data with the first key to form ciphertext data; Step 27, encrypt the ciphertext data, all The first digest value and the identification information are associated and stored in the blockchain.

First, in step 21, target data to be stored in the blockchain and identification information of the target data are determined.

In the embodiment of this specification, the target data includes, but is not limited to, files in various formats such as audio, video, and documents.

In the embodiment of this specification, the identification information of the target data should be able to be used to uniquely identify the target data, so that after the relevant information of the target data is stored in the blockchain in the subsequent process, the identification information of the target data can be passed through. The relevant information of the target data is queried in the blockchain.

For files that are not allowed to be edited by the user or are not normally edited by the user, the file name of the file can often be used to uniquely identify the file. Therefore, in a possible implementation manner, the identification information of the target data may include the file name of the target data.

However, when a file is edited by a user, the file name before and after editing may be the same but the file content is not exactly the same, so it is difficult to use only the file of the file whether in the terminal device or in the blockchain Name to uniquely identify the file before and after editing. For example, for a text file whose file name is "XXX", the user may edit the file within the time period of T1 to T2, such as adding, modifying or deleting the corresponding text content in the text file; if the file A time T0 before time T1 is determined as the target data to be stored, and a time Ti after time T2 is determined as the target data to be stored again, and the file name of the file cannot be used in the terminal device. Or uniquely identify these two target data with different text content in the blockchain.

Therefore, in another possible implementation manner, the identification information of the target data may further include the corresponding first moment when the target data is determined. For example, the file with the file name "XXX" is determined as the target data to be stored at time T0, that is, the combination of the file name "XXX" and the first time T0 can be used as the identification information of the target data.

Next, in step 23, a first digest value of the target data is calculated according to a preset digest algorithm.

It can be understood that the preset digest algorithm includes, but is not limited to, the MD5 algorithm, the SHA-1 algorithm, and various forms of variants thereof.

It can be understood that the first digest value can be used to check the integrity of the target data.

Next, in step 25, the target data is encrypted with the first key to form ciphertext data.

The encryption algorithm used for encrypting the target data can be either various forms of symmetric encryption algorithms or various forms of asymmetric encryption algorithms. be limited.

For the first key used for encrypting the target data, if the encryption algorithm used for encrypting the target data is a symmetric encryption algorithm, the first key may be a random number randomly generated for the target data. For the first key used to encrypt the target data, if the encryption algorithm used to encrypt the target data is an asymmetric encryption algorithm, the first key may be one of two random numbers randomly generated for the target data; two The other of the random numbers is used as the second key corresponding to the first key, and can be used to decrypt the ciphertext data corresponding to the target data in the subsequent process to obtain the target data. In this way, for any two target data that need to be stored and processed, different first keys may be used to encrypt them to form their corresponding ciphertext data, so as to prevent the intruder from knowing the data used to encrypt a certain target data. After the first key or the second key required to decrypt a certain target data, a large number of second keys are used to continue stealing or tampering with other target data.

Next, in step 27, the ciphertext data, the first digest value and the identification information are associated and stored in the blockchain.

Specifically, the terminal device can write the ciphertext data, the first digest value and the identification information into the data field of a transaction, and send the transaction to a blockchain node 101 connected to it in the blockchain network, so as to pass the The blockchain node 101 connected to it publishes the transaction to the entire blockchain network 10, so that each blockchain node 101 serving as an accounting node in the blockchain network 10 packs the transaction into a block, and puts the transaction into a block. The block is added to the blockchain.

Here, the ciphertext data corresponding to the target data, its first digest value, and the identification information are associated and stored in the blockchain, so that the user can obtain the ciphertext corresponding to the target data from the blockchain through the identification information of the target data. data and the first summary value.

Correspondingly, in order to enable the user to obtain the ciphertext data and the first digest value corresponding to the target data from the blockchain through the identification information of the target data, as shown in FIG. 3 , in a possible implementation manner , the method may further include the following step 29: adding the identification information as an index item to the data index table.

In a more specific example, the identification information of the target data may be added to the data index table as a new index item. Taking the identification information of the target data including the file name of the target data, optionally including the first moment corresponding to the target data, as an example, please refer to the data index table shown in Table 1 below:

Table 1

file name time XXX T_i ZZZ NULL XXX T_j

As shown in Table 1 above, for a file named "XXX", the file is determined as the target data for the first time at the first time _Ti , and the data content contained in the file may be within a certain time period after the time _Ti If it is edited by the user, then the file name "XXX" and the time "T _i " of the file can be combined into an index item and added to the data index table; for a file named "ZZZ", the file is in the first Time T _n is determined as the target data for the first time, but the data content contained in the file does not allow the user to edit or the user usually does not edit the file after time T _n , then the file name of the file "ZZZ" ” is added to the data index table as the index item corresponding to the data. Assuming that the user edits the data content contained in the file with the file name "XXX" after time T _i , and determines the file as the target data again at time T _j , the file name "XXX" and Time "T _j " is combined into an index item and added to the data index table.

In this way, for the user side, it is convenient for the user to obtain target data with the same file name but different data contents through the data index table, that is, it is convenient for the user to obtain files of various versions through the data index table.

In another specific example, it can also be detected whether there is a first index entry containing the file name of the target data in each index entry included in the data index table, and if there is a first index entry, the first index entry contains The second moment of is updated to the first moment corresponding to the determination of the target data. Taking the identification information of the target data including the file name of the target data, optionally including the first moment corresponding to the target data, as an example, please refer to the data index table shown in Table 2 below:

Table 2

file name time XXX T_j ZZZ NULL

As shown in Table 2 above, for a file named "XXX", the file is determined as the target data for the first time at the first time _Ti , and the data content contained in the file may be within a certain time period after the time _Ti If it is edited by the user, then the file name "XXX" and the time "T _i " of the file can be combined into an index item and added to the data index table; for a file named "ZZZ", the file is in the first Time T _n is determined as the target data for the first time, but the data content contained in the file does not allow the user to edit or the user usually does not edit the file after time T _n , then the file name of the file "ZZZ" ” is added to the data index table as the index item corresponding to the data. Suppose the user edits the data content contained in the file named "XXX" after time T _i , and determines the file as the target data again at time T _j ; at this time, there is already a first one in the data index table. The index entry contains the file name "XXX", and the time "T _i " contained in the first index entry can be directly replaced with T _j .

In this way, for the user side, even if the user frequently edits a certain file and determines the file as the target data for storage at different times, only one index item related to the file is stored in the data index table, and The user can query the last edited file through the data index table, so that the data index table is more concise and the user experience is better.

The foregoing method embodiments focus on describing the process of storing data based on the blockchain. Corresponding to the foregoing process of storing data, another blockchain-based data management method is also provided in the embodiments of the present application. The method is executed by the terminal device 20. As shown in FIG. 4, the method may include at least the following steps 41 to 49: Step 41, determine the identification information of the target data to be acquired; The ciphertext data associated with the identification information and the first digest value; Step 45, use a second key to decrypt the ciphertext data to obtain the target data, wherein the second key is the same as the encrypted target data be the same or correspond to the first key used when forming the ciphertext data; step 47, calculate the second digest value of the target data according to a preset digest algorithm; step 49, between the first digest value and the If the second digest values are the same, it is determined that the target data has not been tampered with, and the target data is provided.

First, in step 41, the identification information of the target data to be acquired is determined.

In a possible implementation manner, the terminal device may provide the user with a data index table, where the data index table includes at least one index item. For the specific contents of the data index table and the data index items, refer to the foregoing embodiments, which will not be repeated here.

Correspondingly, for step 41 , when the terminal device receives the triggering of the second index item in the at least one index item by the user, it may be determined that the second index triggered by the user is the identification information of the target data to be acquired.

Next, in step 43, the ciphertext data and the first digest value associated with the identification information are obtained from the blockchain.

Specifically, the terminal device 20 can query each transaction recorded on the blockchain directly or indirectly through the blockchain node connected to it, so as to directly or indirectly through the blockchain node 101 connected to the terminal device 20 The ciphertext data and the first digest value associated with the identification information are obtained from the blockchain.

Next, in step 45, the ciphertext data is decrypted using the second key to obtain the target data.

Wherein, the second key is the same as or corresponds to the first key used when encrypting the target data to form the ciphertext data. Specifically, if the encryption algorithm used when the terminal device 20 uses the first key to encrypt the target data to form ciphertext data is a symmetric encryption algorithm, the second key is the same as the first key; if the terminal device 20 uses The encryption algorithm used when the first key encrypts the target data to form the ciphertext data is an asymmetric encryption algorithm, and the second key corresponds to the first key.

Next, in step 47, a second digest value of the target data is calculated according to a preset digest algorithm.

It should be noted that the digest algorithm used when calculating the second digest value of the target data should be exactly the same as the digest algorithm used when calculating the first digest value of the target data.

Here, if the ciphertext data and the first digest value are transmitted from the blockchain network to the terminal device, the intruder decrypts the ciphertext data by using the second key that he knows and is used to decrypt the ciphertext data. After the decrypted target data is tampered with, the first digest value of the tampered target data is recalculated, and the tampered target data is re-encrypted with the first key that it knows to form new ciphertext data; then, Also, because the intruder cannot know the preset digest algorithm actually used by the terminal device for calculating the target data, the second digest value calculated by the terminal device is not the same as the first digest value recalculated by the intruder. That is, if the second digest value calculated by the terminal device is different from the first digest value, it means that the intruder has successfully tampered with the target data.

Correspondingly, in step 49, if the first digest value and the second digest value are the same, it is determined that the target data has not been tampered with, and the target data is provided. That is, only when it is confirmed that the target data has not been tampered with, the user is provided with accurate and untampered target data, so that the user can consult the target data or edit the target data.

In a possible implementation, since the ciphertext data and the first digest value of the target data stored in the blockchain will not be tampered with, if the second digest value calculated by the terminal device is different from the first digest value, then This means that the target data is tampered with by the intruder during the transmission from the blockchain network to the terminal device. At this time, the terminal device can prompt the user that the target data has been tampered with by the intruder, so that the user can trigger the terminal device to re-obtain the data in the blockchain. The stored ciphertext data and the first digest value of the target data.

In this way, the terminal device 20 can determine whether the target data has been tampered with by the intruder. Even if the intruder maliciously tampered with the target data in order to achieve a specific business purpose, it will be discovered by the terminal device and its business purpose cannot be achieved. The possibility of tampering with the target data during the transmission of the data and the first digest value from the blockchain network 10 to the terminal device 20 .

Corresponding to one or more of the foregoing method embodiments, a blockchain-based data management apparatus 50 is also provided in the embodiments of this specification, and the data management apparatus 50 can be deployed on the terminal device 20, so that the terminal device 20 realizes the The blockchain-based data management method described in one or more of the foregoing embodiments. As shown in FIG. 5, at the software level, the blockchain-based data management device 50 may include:

The information determination unit 51 is configured to determine the target data to be stored in the blockchain and the identification information of the target data;

The digest calculation unit 53 is configured to calculate the first digest value of the target data according to a preset digest algorithm;

an encryption processing unit 55, configured to encrypt the target data by using the first key to form ciphertext data;

The storage processing unit 57 is configured to associate and store the ciphertext data, the first digest value and the identification information in the blockchain.

In a possible implementation manner, as shown in FIG. 6 , the blockchain-based data management apparatus 50 may further include: an index management unit 59 configured to add the identification information as an index item to the data index table.

Corresponding to one or more of the foregoing method embodiments, another blockchain-based data management apparatus 70 is also provided in the embodiments of this specification, and the data management apparatus 70 can be deployed on the terminal device 20, so that the terminal device 20 Implement the blockchain-based data management method described in one or more of the foregoing embodiments. As shown in FIG. 7, at the software level, the blockchain-based data management device 70 may include:

an information determination unit 71, configured to determine the identification information of the target data to be acquired;

A data acquisition unit 73, configured to acquire the ciphertext data and the first digest value associated with the identification information from the blockchain;

The decryption processing unit 75 is configured to decrypt the ciphertext data by using a second key to obtain the target data, wherein the second key is used when encrypting the target data to form the ciphertext data is the same or corresponds to the first key of ;

The digest calculation unit 77 is configured to calculate the second digest value of the target data according to a preset digest algorithm;

The data providing unit 79 is configured to, when the first digest value and the second digest value are the same, determine that the target data has not been tampered with, and provide the target data.

In a possible implementation manner, the data management apparatus 70 may further include: an index management unit; wherein,

The index management unit is configured to provide a user with a data index table, where the data index table includes at least one index item;

The information determining unit 71 is configured to, in response to a user triggering a second index item in the at least one index item, determine that the second index item is identification information of the target data to be acquired.

It should be noted that the above-mentioned blockchain-based data management device 50 and blockchain-based data management device 70 may be integrated into the same data management device and deployed in the terminal device 20 .

Those skilled in the art should appreciate that, in one or more of the above examples, the functions described in this specification may be implemented in hardware, software, firmware, or any combination thereof. When implemented in software, the computer program corresponding to these functions can be stored in a computer-readable medium, or transmitted as one or more instructions/codes on the computer-readable medium, so that the computer program corresponding to these functions can be When executed by a computer, the method described in any one of the embodiments of the present invention is implemented by a computer.

Specifically, the embodiments of this specification also provide a computer-readable storage medium on which a computer program is stored. When the computer program is executed in a computing device, the computing device implements any one of the embodiments of this specification. A blockchain-based approach to data management provided in .

An embodiment of this specification also provides a terminal device, including a memory and a processor, the memory stores executable code, and when the processor executes the executable code, the implementation provided in any one of the embodiments of this specification is implemented. A blockchain-based approach to data management.

Each embodiment in this specification is described in a progressive manner, and the same and similar parts in each embodiment may be referred to each other, and each embodiment focuses on explaining its differences from other embodiments. In particular, the apparatus/equipment/system embodiments are basically similar to the method embodiments, so the description is relatively simple, and reference may be made to some descriptions of the method embodiments for related parts.

The foregoing describes specific embodiments of the present specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps recited in the claims can be performed in an order different from that in the embodiments and still achieve desirable results. Additionally, the processes depicted in the figures do not necessarily require the particular order shown, or sequential order, to achieve desirable results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

The specific embodiments described above further describe the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention, and are not intended to limit the scope of the present invention. Any modification, equivalent replacement, improvement, etc. made on the basis of the technical solution of the present invention shall be included within the protection scope of the present invention.

Claims (10)

1. A data management method based on a block chain is applied to terminal equipment and is characterized in that the method comprises the following steps:

determining target data to be stored in a block chain and identification information of the target data;

calculating a first abstract value of the target data according to a preset abstract algorithm;

encrypting the target data by using a first key to form ciphertext data;

and storing the ciphertext data, the first abstract value and the identification information in a block chain in an associated manner.

2. The method of claim 1,

after the storing the ciphertext data, the first digest value, and the identification information in association with a blockchain, the method further comprises: and adding the identification information as an index item to a data index table.

3. The method of claim 2,

the identification information includes: the file name corresponding to the target data and a first time corresponding to the target data when the target data is determined.

4. The method of claim 3,

the adding the identification information as an index entry to a data index table includes:

detecting whether a first index entry exists in each index entry contained in the data index table, wherein the first index entry contains the file name;

and if the first index item exists, updating the second time contained in the first index item to the first time.

5. The method according to any one of claims 1 to 4,

the associating and storing the ciphertext data, the first digest value, and the identification information to a blockchain includes:

writing the ciphertext data, the first digest value, and the identification information into a data field of a transaction, and issuing the transaction to a blockchain network through a node of the blockchain network, such that the transaction is packed into a block, which is added to the blockchain.

6. A data management method based on a block chain is applied to terminal equipment and is characterized by comprising the following steps:

determining identification information of target data to be acquired;

acquiring ciphertext data and a first abstract value which are associated with the identification information from a block chain;

decrypting the ciphertext data by using a second key to obtain the target data, wherein the second key is the same as or corresponds to a first key used when encrypting the target data to form the ciphertext data;

calculating a second abstract value of the target data according to a preset abstract algorithm;

in a case where the first digest value and the second digest value are the same, it is determined that the target data has not been tampered, and the target data is provided.

7. The method of claim 6,

before the determining the identification information of the target data to be acquired, the method further includes: providing a data index table to a user, wherein the data index table comprises at least one index entry;

the determining the identification information of the target data to be acquired includes: and responding to the trigger of a user on a second index item in the at least one index item, and determining the second index item as the identification information of the target data to be acquired.

8. A block chain-based data management device is applied to a terminal device, and is characterized by comprising:

an information determination unit configured to determine target data to be stored to a blockchain and identification information of the target data;

the abstract calculation unit is configured to calculate a first abstract value of the target data according to a preset abstract algorithm;

an encryption processing unit configured to encrypt the target data with a first key to form ciphertext data;

and the storage processing unit is configured to store the ciphertext data, the first digest value and the identification information in a block chain in an associated manner.

9. The apparatus of claim 8,

the device further comprises: and the index management unit is configured to add the identification information as an index item to a data index table.

10. A block chain-based data management device is applied to a terminal device, and is characterized by comprising:

an information determination unit configured to determine identification information of target data to be acquired;

the data acquisition unit is configured to acquire ciphertext data and a first abstract value which are associated with the identification information from a block chain;

a decryption processing unit configured to decrypt the ciphertext data using a second key to obtain the target data, wherein the second key is the same as or corresponds to a first key used when encrypting the target data to form the ciphertext data;

the abstract calculation unit is configured to calculate a second abstract value of the target data according to a preset abstract algorithm;

a data providing unit configured to determine that the target data has not been tampered and provide the target data in a case where the first digest value and the second digest value are the same.

Images