WO2016172982A1 - Data recording method, device and system, and computer storage medium - Google Patents

Abstract

A data recording method, device and system, and a computer storage medium. The method comprises: collecting data of each state of each party in an e-commerce transaction (202); generating an image according to the collected data (204); obtaining a key of the data (206); correspondingly storing the collected data and the key of the data (208); embedding the key within the image (210); storing the image having the embedded key (212); performing digital signing on the image having the embedded key to generate a data image electronic certificate (214); generating check data with regard to the image having the embedded key (216); storing the check data (218). In the data recording method, device and system, and the computer storage medium, digital signing is performed on the image having the embedded key to generate the data image electronic certificate, it is not easy to tamper with the generated image and the data image electronic certificate, the data and the key are correspondingly stored, and the image having the embedded key and the check data are stored separately, not easily obtained at the same time, subject to multiple instances of security protection, and highly secure.

Description

Data recording method, device and system, computer storage medium Technical field

The present invention relates to the field of data processing, and in particular, to a data recording method, apparatus and system, and computer storage medium.

Background technique

With the development of network technology, e-commerce is constantly evolving, and various physical objects, tickets, receipts, etc. used in tradition are replaced by electronic ones. There are three main forms of expression: character data, image data, and streaming media data. The physical objects in the e-commerce activities are replaced by image data, which represents the real attributes of the items, and security is very important in e-commerce activities.

Electronic credential images, cargo images, etc. used in traditional e-commerce activities can be freely copied, even tampered with, and have low security.

Summary of the invention

Based on this, it is necessary to provide a data recording method, device and system, and computer storage medium for improving the security of data in e-commerce activities in view of the problem that data is easily copied and falsified in traditional e-commerce activities, resulting in low security. .

A data recording method comprising:

Collect data on the status of each party of the e-commerce transaction;

Generating an image based on the collected data;

Obtaining a key for the data;

Correspondingly storing the collected data and the key of the data;

Embedding the key in the image;

Storing an image in which the key is embedded;

Digitally signing the image with the embedded key to generate a data image electronic voucher;

Generating verification data for the image in which the key is embedded;

The verification data is stored.

A data recording device comprising:

An acquisition module, configured to collect data of each state of each party of the e-commerce transaction;

An image generating module, configured to generate an image according to the collected data;

a key generation module, configured to acquire a key of the data;

a storage module, configured to store the collected data and the key of the data;

An embedding module for embedding the key in the image;

The storage module is further configured to store an image embedded with a key;

a digital signature module, configured to digitally sign the image with the embedded key to generate a data image electronic voucher;

a verification generating module, configured to generate verification data for the image embedded with the key;

The storage module is further configured to store the verification data.

A data recording system includes an image generation processing server, a verification server, a signature server, and a cloud database server connected to each other through a network;

The image generation processing server is configured to collect data of each state of each party of the e-commerce transaction, generate an image according to the collected data, acquire a key of the data, and embed the key in the image. ;

The verification server is configured to generate verification data for the embedded key image;

The signature server is configured to digitally sign the image with the embedded key to generate a data image electronic voucher;

The cloud database server is configured to store the data and the key correspondingly, and store an image embedded with the key and the verification data.

One or more computer storage media containing computer executable instructions for performing a data recording method, the method comprising the steps of:

Collect data on the status of each party of the e-commerce transaction;

Generating an image based on the collected data;

Obtaining a key for the data;

Correlating the collected data with a key of the data; embedding the key in the image;

Storing an image in which the key is embedded;

Digitally signing the image with the embedded key to generate a data image electronic voucher;

Generating verification data for the image in which the key is embedded;

The verification data is stored.

The above data recording method, apparatus and system, and computer storage medium generate an image by generating an image and embedding a key of the data in the image, and digitally signing the image embedded with the key to generate a data image electronic voucher, and the generated image And the data image electronic voucher is not easy to be tampered with, the security is high, and the data and the key are stored correspondingly, the image embedded with the key and the verification data are stored separately, which is difficult to be acquired at the same time, and has multiple security fortification and high security. . The data of each state of the parties to the e-commerce transaction generates an image, and the transaction data of each stage is relatively fixedly recorded, thereby ensuring the continuity and integrity of the data; the generated electronic image voucher of the data can be circulated in various electronic devices. Through the background authentication system to identify its authenticity, and then identify the authenticity, and then extract the important data of the transaction status from the image.

DRAWINGS

1 is a block diagram showing the structure of a data recording system in an embodiment;

2 is a flow chart of a data recording method in an embodiment;

Figure 3 is a block diagram showing the structure of a data recording apparatus in an embodiment;

4 is a schematic diagram showing the internal structure of a server in an embodiment.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

1 is a block diagram showing the architecture of a data recording system in one embodiment. As shown in FIG. 1, a data recording system includes an image generation processing server 110, a verification server 120, a digital certificate management server 130, a signature server 140, and a cloud database server 150. The image generation processing server 110, the verification server 120, the digital certificate management server 130, the signature server 140, and the cloud database server 150 are connected through a local area network, and are connected to the Internet 170 through the firewall 160.

The image generation processing server 110 is configured to collect data of each state of the e-commerce transaction, generate an image based on the collected data, and acquire a key of the data, and embed the key in the image.

Specifically, the data of each state of the parties of the e-commerce transaction may include data information such as warehouse information, generated order information, shipping information, receipt information, transaction end, and ownership of the goods. The warehouse information may include a warehouse to which the item belongs, such as the warehouse No. 1 of the ABC Building in Futian District, Shenzhen. The order information may include the order generation time, the item information in the order, the order number, the consignee information, and the like. The consignee information may include the consignee's name, the consignee's address, and the consignee's contact information. The shipping information may include the name of the logistics company, the invoice number, the delivery time, and the shipper information. The shipper information may include the shipper name, the shipper's address, the shipper's contact information, and the like. The receipt information may include the signer information, the time of receipt, and the like. The signer information can be signed by the person's name, avatar, ID card information, and so on.

Data for each state of the parties to the e-commerce transaction can be generated at various points and stored on the cloud database server 150.

The image generation processing server 110 can acquire data of respective states of the e-commerce transaction from the cloud database server 150.

In one embodiment, the image generation processing server 110 is further configured to generate a key for the data using the order number, or generate a key for the data using the order number and the system clock.

Specifically, the key of the data is generated by using the order number, and the key of the data can be the same as the order number. The key of the data generated by the order number and the system clock can be used to calculate the MD5 value of the order number and the system clock to generate the corresponding key. The key can also be generated using the UUID (Universally Unique Identifier) algorithm, which is a number generated on a machine that is guaranteed to be unique to all machines in the same time and space. The key can be represented by a string of 8 bits, 16 bits, 32 bits, 64 bits, and the like. It is simple and convenient to use the order number or order number and the key for generating data by the system. And high security.

In one embodiment, image generation processing server 110 is also operative to add the key to the binary code of the image.

Specifically, the key is a character string, and the key can be embedded in the binary code of the image. The specific typing position can be at the head, or the middle, or the tail of the image binary code, as long as the original image file is not destroyed.

The verification server 120 is configured to generate verification data for the image in which the key is embedded.

Specifically, the verification server 120 may perform a function operation on the image embedded with the key to generate verification data by using another algorithm such as a hash algorithm.

The digital certificate management server 130 is for providing a digital certificate. The data certificate management server 130 is used to issue and manage digital certificates. Digital certificates can be used for encryption, signing, etc.

The signature server 140 is configured to digitally sign the image in which the key is embedded to generate a data image electronic voucher.

Specifically, the signature server 140 is further configured to digitally sign the image embedded with the key to generate a data image electronic voucher by using the provided digital certificate.

Digital signatures are a common physical signature written on paper, but use techniques implemented in the field of public key cryptography to identify digital information. A set of digital signatures usually defines two complementary operations, one for signature and one for verification. The digital signature encrypts the digest information with the sender's private key and transmits it to the recipient along with the original text. The receiver can decrypt the encrypted digest information only by using the sender's public key, and then use the hash function to generate a digest message for the received original text, which is compared with the decrypted digest information. If they are the same, the received information is complete. It has not been modified during the transmission process, otherwise the information has been modified, so the digital signature can verify the integrity of the information. There are many digital signature algorithms, such as RSA (public key encryption algorithm), ECC, and so on. The RSA public key encryption algorithm was proposed in 1977 by Ron Rivest, Adi Shamir, and Leonard Adleman. ECC is an ellipse encryption algorithm, a public key encryption system originally proposed by Koblitz and Miller in 1985. Its mathematical basis is to use the rational points on elliptic curves to form the computational difficulty of elliptic discrete logarithms on Abel addition groups. .

The cloud database server 150 is configured to store the data and the key correspondingly, and store the image in which the key is embedded and the verification data.

The digital certificate management server 130 may not be included in other data recording systems.

The above data recording system, by generating an image of data, embedding the key of the data in the image, and digitally signing the image embedded with the key to generate a data image electronic voucher, the generated image and the data image electronic voucher are not easily falsified The security is high, and the data and the key are stored correspondingly. The image embedded with the key and the verification data are stored separately, and are not easily acquired at the same time, and are subjected to multiple security fortification and high security. The data of each state of the parties to the e-commerce transaction generates an image, and the transaction data of each stage is relatively fixedly recorded, thereby ensuring the continuity and integrity of the data; the generated electronic image voucher of the data can be circulated in various electronic devices. Through the background authentication system to identify its authenticity, and then identify the authenticity, and then extract the important data of the transaction status from the image.

2 is a flow chart of a data recording method in one embodiment. As shown in FIG. 2, the data recording method includes:

Step 202: Collect data of each state of each party of the e-commerce transaction.

Specifically, the data of each state of the e-commerce transaction may include data information such as warehouse information, generated order information, shipping information, receipt information, transaction end, and ownership of the goods. The warehouse information may include a warehouse to which the item belongs, such as the warehouse No. 1 of the ABC Building in Futian District, Shenzhen. The order information may include the order generation time, the item information in the order, the order number, the consignee information, and the like. The consignee information may include the consignee's name, the consignee's address, and the consignee's contact information. The shipping information may include the name of the logistics company, the invoice number, the delivery time, and the shipper information. The shipper information may include the shipper name, the shipper's address, the shipper's contact information, and the like. The receipt information may include the signer information, the time of receipt, and the like. The signer information can be signed by the person's name, avatar, ID card information, and so on.

Data for each state of the e-commerce transaction can be generated at each link and stored on the cloud database server.

Step 204: Generate an image according to the collected data.

Step 206: Acquire a key of the data.

In one embodiment, the step of obtaining a key for the data comprises: generating a key for the data using the order number; or generating the key for the data using the order number and the system clock.

Specifically, the key of the data is generated by using the order number, and the key of the data can be the same as the order number. The key of the data generated by the order number and the system clock can be used to calculate the MD5 value of the order number and the system clock to generate the corresponding key. The key can also be generated using the UUID algorithm, which is a number generated on a machine that is guaranteed to be unique to all machines in the same time and space. The key can be represented by a string of 8 bits, 16 bits, 32 bits, 64 bits, and the like. The order number or order number and the key for generating data by the system are simple and convenient, and the security is high.

Step 208: Store the collected data and the key of the data.

Specifically, the collected data and the key of the data are stored together in the cloud database server.

Step 210, embedding the key in the image.

In one embodiment, the step of embedding the key in the image includes adding the key to a binary code of the image.

Specifically, the key is a character string, and the key can be embedded in the binary code of the image. The specific typing position can be at the head, or the middle, or the tail of the image binary code, as long as the original image file is not destroyed.

Step 212, storing an image in which the key is embedded.

Step 214, digitally signing the image embedded with the key to generate a data image electronic voucher.

Specifically, the image embedded with the key is digitally signed by using a pre-provided digital certificate to generate a data image electronic voucher.

There are many ways to digitally sign it, which can be implemented by algorithms such as RSA and ECC.

Step 216, generating verification data for the image in which the key is embedded.

Other algorithms such as a hash algorithm are used to generate check data for the image in which the key is embedded.

Step 218, storing the verification data.

The above data recording method, by generating an image of data, embedding the key of the data in the image, and digitally signing the image embedded with the key to generate a data image electronic voucher, the generated image and the data image electronic voucher are not easily falsified , high security, and storage of data and keys, The image in which the key is embedded and the verification data are stored separately, which are not easily acquired at the same time, and are subjected to multiple security fortification and high security. The data of each state of the parties to the e-commerce transaction generates an image, and the transaction data of each stage is relatively fixedly recorded, thereby ensuring the continuity and integrity of the data; the generated electronic image voucher of the data can be circulated in various electronic devices. Through the background authentication system to identify its authenticity, and then identify the authenticity, and then extract the important data of the transaction status from the image.

Fig. 3 is a block diagram showing the structure of a data recording apparatus in an embodiment. As shown in FIG. 3, a data recording apparatus includes an acquisition module 310, an image generation module 320, a key generation module 330, an embedding module 340, a digital signature module 350, a verification generation module 360, and a storage module 370. among them:

The acquisition module 310 is configured to collect data of various states of the parties of the e-commerce transaction.

Specifically, the data of each state of the e-commerce transaction may include data information such as warehouse information, generated order information, shipping information, receipt information, transaction end, and ownership of the goods. The warehouse information may include a warehouse to which the item belongs, such as the warehouse No. 1 of the ABC Building in Futian District, Shenzhen. The order information may include the order generation time, the item information in the order, the order number, the consignee information, and the like. The consignee information may include the consignee's name, the consignee's address, and the consignee's contact information. The shipping information may include the name of the logistics company, the invoice number, the delivery time, and the shipper information. The shipper information may include the shipper name, the shipper's address, the shipper's contact information, and the like. The receipt information may include the signer information, the time of receipt, and the like. The signer information can be signed by the person's name, avatar, ID card information, and so on.

The image generation module 320 is configured to generate an image according to the collected data.

The key obtaining module 330 is configured to acquire a key of the data.

In one embodiment, the key acquisition module 330 is further configured to generate a key of the data by using an order number, or generate a key of the data by using an order number and a system clock.

Specifically, the key of the data is generated by using the order number, and the key of the data can be the same as the order number. The key of the data generated by the order number and the system clock can be used to calculate the MD5 value of the order number and the system clock to generate the corresponding key. The key can also be generated using the UUID algorithm, which is a number generated on a machine that is guaranteed to be unique to all machines in the same time and space. The key can be represented by a string of 8 bits, 16 bits, 32 bits, 64 bits, and the like. The order number or order number and the key for generating data by the system are simple and convenient, and the security is high.

The storage module 370 is configured to store the collected data and the key of the data correspondingly.

The embedding module 340 is for embedding the key in the image.

In one embodiment, the embedding module 340 is also used to add the key to the binary code of the image. Specifically, the key is a character string, and the key can be embedded in the binary code of the image. The specific typing position can be at the head, or the middle, or the tail of the image binary code, as long as the original image file is not destroyed.

The storage module 370 is also used to store an image in which the key is embedded.

The digital signature module 350 is configured to digitally sign the image embedded with the key to generate a data image electronic voucher. Specifically, the image embedded with the key is digitally signed by using a pre-provided digital certificate to generate a data image electronic voucher. There are many digital signature algorithms, such as RSA, ECC and other algorithms.

The verification generation module 360 is configured to generate verification data for the image in which the key is embedded. Other algorithms such as a hash algorithm are used to generate check data for the image in which the key is embedded.

The storage module 370 is configured to store verification data.

The above data recording device generates an image by embedding an image, embedding the key of the data in the image, and digitally signing the image embedded with the key to generate a data image electronic voucher, and the generated image and the data image electronic voucher are not easily falsified The security is high, and the data and the key are stored correspondingly. The image embedded with the key and the verification data are stored separately, and are not easily acquired at the same time, and are subjected to multiple security fortification and high security. The data of each state of the parties to the e-commerce transaction generates an image, and the transaction data of each stage is relatively fixedly recorded, thereby ensuring the continuity and integrity of the data; the generated electronic image voucher of the data can be circulated in various electronic devices. Through the background authentication system to identify its authenticity, and then identify the authenticity, and then extract the important data of the transaction status from the image.

4 is a schematic diagram showing the internal structure of a server in an embodiment. As shown in FIG. 4, the server includes a processor, a storage medium, a memory and network interface, a display screen, and an input device connected through a system bus. The storage medium of the server stores an operating system, a database, and a data recording device, and the database stores data, a key, an image, and verification data in the e-commerce transaction, and the data record is loaded. Used to implement a data logging method for the server. The server's processor is used to provide computing and control capabilities that support the operation of the entire server. The memory of the server provides an environment for the operation of the data logging device in the storage medium. The display screen of the server may be a liquid crystal display or an electronic ink display. The input device may be a touch layer covered on the display screen, or may be a button, a trackball or a touchpad provided on the terminal housing, or may be an external device. Keyboard, trackpad or mouse. The network interface of the server is used to communicate with an external terminal via a network connection, such as receiving a request sent by the terminal and returning data to the terminal. The server can be implemented with a stand-alone server or a server cluster consisting of multiple servers.

One of ordinary skill in the art can understand that all or part of the process of implementing the above embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a non-volatile computer readable storage medium. Wherein, the program, when executed, may include the flow of an embodiment of the methods as described above. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or the like.

The above-mentioned embodiments are merely illustrative of several embodiments of the present invention, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention should be determined by the appended claims.

Claims (17)

A data recording method, comprising: Collect data on the status of each party of the e-commerce transaction; Generating an image based on the collected data; Obtaining a key for the data; Correspondingly storing the collected data and the key of the data; Embedding the key in the image; Storing an image in which the key is embedded; Digitally signing the image with the embedded key to generate a data image electronic voucher; Generating verification data for the image in which the key is embedded; The verification data is stored. The data recording method according to claim 1, wherein the step of acquiring a key of the data comprises: Generating a key for the data using an order number; Alternatively, the key of the data is generated using the order number and the system clock. The data recording method according to claim 1 or 2, wherein the step of embedding the key in the image comprises: The key is added to the binary code of the image. The data recording method according to claim 1 or 2, wherein the step of generating verification data for the image in which the key is embedded comprises: The verification data is generated by the hash algorithm on the image in which the key is embedded. A data recording device, comprising: An acquisition module, configured to collect data of each state of each party of the e-commerce transaction; An image generating module, configured to generate an image according to the collected data; a key obtaining module, configured to acquire a key of the data; and a storage module, configured to store the collected data and the key of the data correspondingly; An embedding module for embedding the key in the image; The storage module is further configured to store an image embedded with a key; a digital signature module, configured to digitally sign the image with the embedded key to generate a data image electronic voucher; a verification generating module, configured to generate verification data for the image embedded with the key; The storage module is further configured to store the verification data. The data recording apparatus according to claim 5, wherein the key acquisition module is further configured to generate a key of the data by using an order number, or generate a key of the data by using an order number and a system clock. . A data recording apparatus according to claim 5 or 6, wherein said embedding module is further for adding said key to a binary code of said image. The data recording apparatus according to claim 5 or 6, wherein the verification generating module is further configured to generate the verification data by using a hash algorithm on the image in which the key is embedded. A data recording system, comprising: an image generation processing server, a verification server, a signature server, and a cloud database server connected to each other through a network; The image generation processing server is configured to collect data of each state of each party of the e-commerce transaction, generate an image according to the collected data, acquire a key of the data, and embed the key in the image. ; The verification server is configured to generate verification data for the embedded key image; The signature server is configured to digitally sign the image with the embedded key to generate a data image electronic voucher; The cloud database server is configured to store the data and the key correspondingly, and store the image embedded with the key and the verification data. The data recording system according to claim 9, wherein the image generation processing server is further configured to generate a key of the data by using an order number, or generate a key of the data by using an order number and a system clock. . A data recording system according to claim 9 or 10, wherein said image generation processing server is further adapted to add said key to a binary code of said image. The data recording system according to claim 9 or 10, wherein the data recording system further comprises: a digital certificate management server for providing digital certificates; The signature server is further configured to digitally sign the embedded key image to generate a data image electronic voucher by using the provided digital certificate. The data recording system according to claim 9 or 10, wherein the image generation processing server is further configured to generate the verification data by using a hash algorithm on the image in which the key is embedded. One or more computer storage media containing computer executable instructions for performing a data recording method, the method comprising the steps of: Collect data on the status of each party of the e-commerce transaction; Generating an image based on the collected data; Obtaining a key for the data; Correspondingly storing the collected data and the key of the data; Embedding the key in the image; Storing an image in which the key is embedded; Digitally signing the image with the embedded key to generate a data image electronic voucher; Generating verification data for the image in which the key is embedded; The verification data is stored. The computer storage medium of claim 14, wherein the step of acquiring a key of the data comprises: Generating a key for the data using an order number; Alternatively, the key of the data is generated using the order number and the system clock. A computer storage medium according to claim 14 or 15, wherein the step of embedding said key in said image comprises: The key is added to the binary code of the image. A computer storage medium according to claim 14 or 15, wherein The steps of generating the verification data by embedding the image of the key include: The verification data is generated by the hash algorithm on the image in which the key is embedded.

Images