The content of the invention
It is an object of the invention to provide a kind of authority method of control concluded the business based on block chain and system, it is intended to block
In chain network, the authority of issued transaction control effectively.
For achieving the above object, the present invention provides a kind of authority method of control concluded the business based on block chain, described based on area
The authority method of control of block chain transaction includes:
S1, is that each node of block chain network builds the authority processing system processed for encryption information issue and encryption and decryption
System, and dispose for transmitting the intelligent contract of encryption and decryption information in the block chain network;
S2, if the information to be transacted that a publisher has encryption is decrypted mandate, publisher at least one authorized party
Authorization process system on corresponding publisher node obtains public encryption/decryption parameter corresponding with each authorized party, and by with mandate
The corresponding security parameter in side encrypts the key of the information to be transacted, is sent out in the block chain network using the intelligent contract
Public encryption/decryption parameter and security parameter described in cloth;
The information to be transacted is passed through intelligent contract to the block chain by S3, the authorization process system of the publisher node
Each node of network is issued;
S4, the corresponding authorization node of the authorized party are after the information to be transacted is received by intelligent contract, described
Key of the authorization process system of authorization node using deciphering parameter corresponding with the security parameter to the information to be transacted
It is decrypted, the information to be transacted is decrypted with the public encryption/decryption parameter based on the key after decryption, waits to hand over by described
Easily information is decrypted mandate to the authorization node.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, also includes after step S4:
S5, after the corresponding feedback information of information to be transacted after the authorization node generates decryption, the authorization node
Authorization process system be based on the cryptographic protocol and feedback information described in secret key pair and be encrypted, and utilize the intelligent contract
Feedback information after encryption is broadcasted to each node of the block chain network;
S6, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S7, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Perform absolutely trade transactions corresponding to the authorization node transaction information to be transacted.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, also includes after step S4:
S8, after the corresponding feedback information of information to be transacted after the authorization node generates decryption, the authorization node
Public key of the authorization process system based on the cryptographic protocol and the publisher node feedback information is encrypted, and profit
The feedback information after encryption is broadcasted to each node of block chain network with intelligent contract;
S9, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S10, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Perform absolutely trade transactions corresponding to the authorization node transaction information to be transacted.
Preferably, also include after step S4:
If the intelligent contract without authorization node sends to publisher node for the information to be transacted of the encryption and carries identity
The decryption authorization requests of authentication information, then the authorization process system of the publisher node used based on the authentication information
Family authentication;
If authentication fails, described in the publisher node refusal respond, authorization requests are decrypted;
If authentication success, the publisher node obtains result of the user for the decryption authorization requests;
If the result is by the decryption authorization requests, the authorization process system of the publisher node is utilized
It is described to encrypt the key without the corresponding security parameter of authorization node, and the key after encryption is closed by the intelligence of publisher node
Each node of the block chain network is about distributed to, and the letter to be transacted is decrypted for the data permission system without authorization node
The information to be transacted is decrypted mandate without authorization node to described by breath;
If the result is the refusal decryption authorization requests, the publisher node refusal for encryption wait hand over
Easily information is decrypted mandate without authorization node to described.
For achieving the above object, the present invention also provides a kind of authority control system concluded the business based on block chain, described to be based on
The authority control system of block chain transaction includes:
Module is built, for building what is processed for encryption information issue and encryption and decryption for each node of block chain network
Authorization process system, and dispose for transmitting the intelligent contract of encryption and decryption information in the block chain network;
First release module, if the information to be transacted for having encryption for a publisher is decrypted at least one authorized party
Authorize, then the authorization process system on the corresponding publisher node of publisher obtains public encryption and decryption ginseng corresponding with each authorized party
Number, and the key of the information to be transacted is encrypted by security parameter corresponding with authorized party, using the intelligent contract in institute
State and in block chain network, issue the public encryption/decryption parameter and security parameter;
The information to be transacted is closed by the second release module, the authorization process system for the publisher node by intelligence
About issue to each node of the block chain network;
Deciphering module, is receiving the to be transacted letter by intelligent contract for the corresponding authorization node of the authorized party
After breath, the authorization process system of the authorization node is using deciphering parameter corresponding with the security parameter to the letter to be transacted
The key of breath is decrypted, and decrypts the to be transacted information with the public encryption/decryption parameter based on the key after decryption, will
The information to be transacted is decrypted mandate to the authorization node.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, the authority control system concluded the business based on block chain
System also includes:
First encrypting module, for the corresponding feedback information of information to be transacted after the authorization node generates decryption
Afterwards, the authorization process system of the authorization node is based on the cryptographic protocol and feedback information described in secret key pair is encrypted, and
The feedback information after encryption is broadcasted to each node of the block chain network using the intelligent contract;
First transaction modules, are the corresponding confirmation Transaction Information of the information to be transacted for the feedback information, then institute
State publisher node and perform trade transactions corresponding to the authorization node transaction information to be transacted;
First refusal module, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, the authority control system concluded the business based on block chain
System also includes:
Second encrypting module, for the corresponding feedback information of information to be transacted after the authorization node generates decryption
Afterwards, public key of the authorization process system of the authorization node based on the cryptographic protocol and the publisher node is believed to the feedback
Breath is encrypted, and the feedback information after encryption is broadcasted to each node of block chain network using intelligent contract;
Second transaction modules, if being the corresponding confirmation Transaction Information of the information to be transacted for the feedback information,
The publisher node performs trade transactions corresponding to the authorization node transaction information to be transacted;
Second refusal module, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
Preferably, the authority control system concluded the business based on block chain is also included:
Authentication module, if being directed to the information to be transacted of the encryption to issue for the intelligent contract without authorization node
Node sends the decryption authorization requests for carrying authentication information, then the authorization process system of the publisher node is based on the body
Part authentication information carries out authenticating user identification;
3rd refusal module, if failing for authentication, decryption described in the publisher node refusal respond is authorized please
Ask;
Acquisition module, if for authentication success, the publisher node obtains user please for the decryption mandate
The result asked;
Authorization module, if being by the decryption authorization requests, the power of the publisher node for the result
Limit processing system encrypts the key without the corresponding security parameter of authorization node using described, and by the key after encryption by sending out
The intelligent contract of cloth node is distributed to each node of the block chain network, for the data permission Solutions of Systems without authorization node
The information to be transacted is decrypted mandate without authorization node to described by the close information to be transacted;
Refusal authorization module, if being the refusal decryption authorization requests, the publisher node for the result
Refusal is decrypted mandate without authorization node to described for the information to be transacted of encryption.
The invention has the beneficial effects as follows:The present invention builds authorization process system and deployment in each node of block chain network
Intelligent contract, carries out information sharing by the authorization process system processing authority control of each node and by intelligent contract, if one
The information to be transacted that there is encryption cloth side is decrypted mandate at least one authorized party, then publisher node is corresponding using authorized party
Security parameter encrypts the key of information to be transacted, then issues public encryption/decryption parameter and security parameter by intelligent contract, awards
Power node is decrypted using the key that deciphering parameter corresponding with security parameter treats Transaction Information, may finally pass through key
Encryption/decryption parameter decrypts information to be transacted together, and information to be transacted is carried out at least one authorization node by realization from publisher node
Decryption is authorized, and authorization node can obtain the authority for reading information to be transacted executable follow-up transaction, in addition to authorization node
Other nodes do not have correlation authority, the authority of issued transaction in block chain network can be control effectively, improve system
System reliability.
Specific embodiment
The principle and feature of the present invention are described below in conjunction with accompanying drawing, example is served only for explaining the present invention, and
It is non-for limiting the scope of the present invention.
As shown in figure 1, the flow process that Fig. 1 is one embodiment of authority method of control that the present invention is concluded the business based on block chain is illustrated
Figure, the authority method of control that should be concluded the business based on block chain are comprised the following steps:
Step S1, is that each node of block chain network is built at the authority processed for encryption information issue and encryption and decryption
Reason system, and dispose for transmitting the intelligent contract of encryption and decryption information in the block chain network;
In block chain network, a node corresponds to one or more intelligent contract, when a parameter transaction passes to area
When on the node of block chain, this parameter transaction can be recorded in the corresponding transaction journal of the node and while pass to and the transaction
The corresponding intelligent contract of parameter goes operation, by itself the counting to intelligent contract of the code on the corresponding intelligent contract of the parameter transaction
According to being updated.
In the present embodiment, each node in block chain network builds what is processed for encryption information issue and encryption and decryption
Authorization process system, each authorization process system are corresponding independently of on each node, mainly for the treatment of mandate matters, and in area
Block chain network is disposed for transmitting the intelligent contract of encryption and decryption information, and intelligent contract is mainly used to letter is shared in block chain network
Breath.
Step S2, if the information to be transacted that a publisher has encryption is decrypted mandate at least one authorized party, sends out
Authorization process system on the corresponding publisher node in cloth side obtains public encryption/decryption parameter corresponding with each authorized party, and by with
The corresponding security parameter of authorized party encrypts the key of the information to be transacted, using the intelligent contract in the block chain network
It is upper to issue the public encryption/decryption parameter and security parameter;
In the present embodiment, information to be transacted is the information of encryption, and its corresponding decryption protocol of needs and key are decrypted.
User can be processed by the corresponding publisher node of publisher and authorize relevant issues, the corresponding authorization node of authorized party to have one or many
It is individual.Authorization process system on the corresponding publisher node of publisher obtains public encryption/decryption parameter corresponding with each authorized party, example
Such as, public encryption/decryption parameter can be stored in a database, the authorization process system on publisher node by it is each it is public plus solution
The authorization node of one authorized party of close parameter correspondence.In addition, each authorization node correspond to a security parameter, the security parameter with it is right
The deciphering parameter answered is a pair, and each node in block chain network can have corresponding security parameter and deciphering parameter, is protected
Close parameter is disclosed part, and deciphering parameter is private part.The security parameter is, for example, the public key of authorization node, each
Public key and private key in node is a key pair, wherein, public key is disclosed part, and private key is then private part.
If the information to be transacted that publisher has encryption is decrypted mandate at least one authorized party, due to security parameter
It is disclosed part, therefore the authorization process system of publisher node can gets the security parameter of each authorization node, then
The key that information to be transacted is needed in decryption is encrypted using the security parameter of each authorization node.Public encryption/decryption parameter includes
Analysis protocol, decryption protocol can for example be DES decryption protocols, AES decryption protocols, RSA decryption protocols etc..For utilization is awarded
Key after the security parameter encryption of power node, its deciphering parameter only in the authorization node of the security parameter can just be solved
It is close, and other nodes can not be decrypted to the key after its encryption, in such manner, it is possible to ensure that only authorization node could be obtained
To key.
In the present embodiment, from authorization node intelligent contract by public encryption/decryption parameter and security parameter to block chain network
Each node issue, it is public that all nodes in step 1 as shown in Figure 2, i.e. the block chain network can receive this
Encryption/decryption parameter and security parameter, but only each authorization node could obtain key to decrypt using corresponding deciphering parameter,
Other nodes are due to no corresponding deciphering parameter, therefore cannot be decrypted.
Preferably, public encryption/decryption parameter and security parameter are issued out by the intelligent contract of authorization node by peer-to-peer network
Go, then notify that the user of each authorization node reads public encryption/decryption parameter and security parameter.
The information to be transacted is passed through intelligent contract to the area by step S3, the authorization process system of the publisher node
Each node of block chain network is issued;
Step S4, the corresponding authorization node of the authorized party after the information to be transacted is received by intelligent contract,
The authorization process system of the authorization node is using deciphering parameter corresponding with the security parameter to the information to be transacted
Key is decrypted, and decrypts the to be transacted information with the public encryption/decryption parameter based on the key after decryption, will be described
Information to be transacted is decrypted mandate to the authorization node.
Refering to the step 2 shown in Fig. 2,3 and 4, information to be transacted is closed by the authorization process system of publisher node by intelligence
About issue to each node of block chain network, each node can receive the information to be transacted of the encryption.
In the present embodiment, if authorization node have read the public encryption/decryption parameter of publisher node issue and secrecy ginseng
Number, as authorization node has the corresponding deciphering parameter of security parameter, therefore the authorization process system of authorization node can be by being somebody's turn to do
The corresponding deciphering parameter of security parameter is decrypted to key.Additionally, the authorization process system of authorization node is reading encryption
After information to be transacted, it is possible to use the key and public encryption/decryption parameter after decryption is decrypted to the information to be transacted for reading,
Specifically, the information to be transacted for reading is decrypted using the decryption protocol in key and public encryption/decryption parameter so that award
The information to be transacted after node can be decrypted is weighed, is realized information to be transacted from publisher node at least one authorization node
It is decrypted mandate, that is to say, that only authorization node just has permission the information to be transacted for knowing that publisher node is issued, Jin Erneng
The related affairs of information to be transacted are processed enough.
Compared with prior art, the present embodiment builds authorization process system and deployment intelligence in each node of block chain network
Energy contract, carries out information sharing by the authorization process system processing authority control of each node and by intelligent contract, if one issues
The information to be transacted that there is encryption side is decrypted mandate at least one authorized party, then publisher node utilizes the corresponding guarantor of authorized party
Close parameter encrypts the key of information to be transacted, then issues public encryption/decryption parameter and security parameter by intelligent contract, authorizes
Node is decrypted using the key that deciphering parameter corresponding with security parameter treats Transaction Information, may finally by key with
Encryption/decryption parameter decrypts information to be transacted altogether, and information to be transacted is solved at least one authorization node by realization from publisher node
Close mandate, authorization node can obtain the authority for reading information to be transacted executable follow-up transaction, in addition to authorization node
Other nodes do not have the authority of correlation, and the authority of issued transaction in block chain network can be control effectively, and improve system
Reliability.
In a preferred embodiment, as shown in figure 3, on the basis of the embodiment of above-mentioned Fig. 1, public encryption/decryption parameter
Including cryptographic protocol, also include after above-mentioned steps S4:
S5, after the corresponding feedback information of information to be transacted after the authorization node generates decryption, the authorization node
Authorization process system be based on the cryptographic protocol and feedback information described in secret key pair and be encrypted, and utilize the intelligent contract
Feedback information after encryption is broadcasted to each node of the block chain network;
S6, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S7, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Perform absolutely trade transactions corresponding to the authorization node transaction information to be transacted.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (for example reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node is generated
Corresponding feedback information.In order to the feedback information is only disclosed to publisher node and each authorization node, so as to publisher node and
Other each authorization nodes can know which node possesses the associated rights of information to be transacted, and the authority of the authorization node is processed
System is encrypted based on the cryptographic protocol in public encryption/decryption parameter and secret key pair feedback information, cryptographic protocol be, for example, with it is upper
The DES decryption protocols stated, AES decryption protocols, the corresponding des encryption agreement of RSA decryption protocols, AES encryption agreement, rsa encryption
Agreement etc..Then the feedback information after encryption is broadcasted to each node of block chain network using intelligent contract, for
Publisher node and other each authorization nodes read and decrypt feedback information.If feedback information is that information to be transacted is corresponding really
Recognize Transaction Information, then publisher node performs trade transactions corresponding with authorization node transaction information to be transacted;If feedback information
For the corresponding refusal Transaction Information of information to be transacted, then the execution of publisher node refusal is corresponding with authorization node transaction information to be transacted
Trade transactions.
The present embodiment encrypts feedback information using key and cryptographic protocol in the management and control of authority so that only issue section
Point and other each authorization nodes can know which node possesses the associated rights of information to be transacted, can be to block chain network
The authority of middle issued transaction further carries out effective management and control.
In a preferred embodiment, as shown in figure 4, on the basis of the embodiment of above-mentioned Fig. 1, public encryption/decryption parameter
Including cryptographic protocol, also include after above-mentioned steps S4:
S8, after the corresponding feedback information of information to be transacted after the authorization node generates decryption, the authorization node
Public key of the authorization process system based on the cryptographic protocol and the publisher node feedback information is encrypted, and profit
The feedback information after encryption is broadcasted to each node of block chain network with intelligent contract;
S9, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S10, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Perform absolutely trade transactions corresponding to the authorization node transaction information to be transacted.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (for example reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node is generated
Corresponding feedback information.In order to the feedback information is only disclosed to publisher node, and authorization node and other nodes are not disclosed,
So that publisher node can know which node possesses the associated rights of information to be transacted, the authorization process system of the authorization node
Feedback information is encrypted based on the public key of cryptographic protocol and publisher node in public encryption/decryption parameter, cryptographic protocol is for example
Be des encryption agreement corresponding with above-mentioned DES decryption protocols, AES decryption protocols, RSA decryption protocols, AES encryption agreement,
Rsa encryption agreement etc..Then the feedback information after encryption is carried out extensively to each node of block chain network using intelligent contract
Broadcast, so that publisher node reads and the corresponding private key of public key using publisher node and decryption protocol decryption feedback information.If
Feedback information is the corresponding confirmation Transaction Information of information to be transacted, then publisher node is performed and authorization node transaction information to be transacted
Corresponding trade transactions;If feedback information is the corresponding refusal Transaction Information of information to be transacted, publisher node refusal is performed
Trade transactions corresponding with authorization node transaction information to be transacted.
The present embodiment encrypts feedback information using the public key and cryptographic protocol of publisher node in the management and control of authority so that
Only publisher node can know which node possesses the associated rights of information to be transacted, can be to office in block chain network
The authority of reason further carries out effective management and control.
In a preferred embodiment, on the basis of the embodiment of above-mentioned Fig. 1, also include after above-mentioned steps S4:
If the intelligent contract without authorization node sends to publisher node for the information to be transacted of the encryption and carries identity
The decryption authorization requests of authentication information, then the authorization process system of the publisher node used based on the authentication information
Family authentication;
If authentication fails, described in the publisher node refusal respond, authorization requests are decrypted;
If authentication success, the publisher node obtains result of the user for the decryption authorization requests;
If the result is by the decryption authorization requests, the authorization process system of the publisher node is utilized
It is described to encrypt the key without the corresponding security parameter of authorization node, and the key after encryption is closed by the intelligence of publisher node
Each node of the block chain network is about distributed to, and the letter to be transacted is decrypted for the data permission system without authorization node
The information to be transacted is decrypted mandate without authorization node to described by breath;
If the result is the refusal decryption authorization requests, the publisher node refusal for encryption wait hand over
Easily information is decrypted mandate without authorization node to described.
In the present embodiment, it is the node in addition to publisher node and authorization node without authorization node, as authorizes without decryption
Node, in order to be decrypted mandate relief to reading information to be transacted without authorization node, the intelligent contract without authorization node is directed to
The information to be transacted of the encryption generates the decryption authorization requests for carrying authentication information, and publisher node in acquisition, award by the decryption
Authentication is carried out after power request, authentication information is, for example, digital certificate etc., and the authorization process system of publisher node is based on
To carrying out authentication without authorization node, that is, analysing whether can be to be transacted without authorization node reading to this for the authentication information
Information is decrypted mandate.Can the be stored with identity of other nodes and corresponding user of the authorization process system of publisher node is recognized
Card information, specifically, if one of authentication information of authorization process system storage of publisher node is awarded with the nothing
Power node and corresponding user's ID authentication information are identical, then authentication success, then by publisher to decrypting authorization requests
Processed, that is, to grant and be decrypted mandate without authorization node reading information to be transacted to this or not grant to this without mandate section
Point reads information to be transacted and is decrypted mandate, to obtain the result that corresponding decryption is authorized.
If result is by decrypting authorization requests, the authorization process system of publisher node is using without authorization node
Corresponding security parameter encrypts key, and the key after encryption is distributed to the block link network by the intelligent contract of publisher node
Each node of network, decrypts the information to be transacted for the data permission system without authorization node, realizes the authority of publisher node
Processing system is directed to the information to be transacted of encryption to being decrypted mandate without authorization node;If result is awarded for refusal decryption
Power is asked, then the authorization process system refusal of publisher node is awarded to being decrypted without authorization node for the information to be transacted of encryption
Power.
The present embodiment can be to being decrypted the relief of mandate, i.e. the authorization process system base of publisher node without authorization node
Carry out authentication in the authentication information without authorization node, and authentication by when obtain publisher decryption authorized
Corresponding result is asked, if the result is by decrypting authorization requests, publisher node is realized to without mandate section
Point reads the decryption mandate of the information to be transacted, that is, realize the relief authorized to the decryption without authorization node, improve block chain power
The flexibility of limit management and control.
As shown in figure 5, Fig. 5 is the structural representation of one embodiment of authority control system that the present invention is concluded the business based on block chain
Figure, the authority control system that should be concluded the business based on block chain are included:
Module 101 is built, for building at encryption information issue and encryption and decryption for each node of block chain network
The authorization process system of reason, and dispose for transmitting the intelligent contract of encryption and decryption information in the block chain network;
In block chain network, a node corresponds to one or more intelligent contract, when a parameter transaction passes to area
When on the node of block chain, this parameter transaction can be recorded in the corresponding transaction journal of the node and while pass to and the transaction
The corresponding intelligent contract of parameter goes operation, by itself the counting to intelligent contract of the code on the corresponding intelligent contract of the parameter transaction
According to being updated.
In the present embodiment, each node in block chain network builds what is processed for encryption information issue and encryption and decryption
Authorization process system, each authorization process system are corresponding independently of on each node, mainly for the treatment of mandate matters, and in area
Block chain network is disposed for transmitting the intelligent contract of encryption and decryption information, and intelligent contract is mainly used to letter is shared in block chain network
Breath.
First release module 102, if the information to be transacted for having encryption for a publisher is carried out at least one authorized party
Decryption is authorized, then the authorization process system on the corresponding publisher node of publisher obtains public encryption and decryption corresponding with each authorized party
Parameter, and the key of the information to be transacted is encrypted by security parameter corresponding with authorized party, existed using the intelligent contract
The public encryption/decryption parameter and security parameter are issued in the block chain network;
In the present embodiment, information to be transacted is the information of encryption, and its corresponding decryption protocol of needs and key are decrypted.
User can be processed by the corresponding publisher node of publisher and authorize relevant issues, the corresponding authorization node of authorized party to have one or many
It is individual.Authorization process system on the corresponding publisher node of publisher obtains public encryption/decryption parameter corresponding with each authorized party, example
Such as, public encryption/decryption parameter can be stored in a database, the authorization process system on publisher node by it is each it is public plus solution
The authorization node of one authorized party of close parameter correspondence.In addition, each authorization node correspond to a security parameter, the security parameter with it is right
The deciphering parameter answered is a pair, and each node in block chain network can have corresponding security parameter and deciphering parameter, is protected
Close parameter is disclosed part, and deciphering parameter is private part.The security parameter is, for example, the public key of authorization node, each
Public key and private key in node is a key pair, wherein, public key is disclosed part, and private key is then private part.
If the information to be transacted that publisher has encryption is decrypted mandate at least one authorized party, due to security parameter
It is disclosed part, therefore the authorization process system of publisher node can gets the security parameter of each authorization node, then
The key that information to be transacted is needed in decryption is encrypted using the security parameter of each authorization node.Public encryption/decryption parameter includes
Analysis protocol, decryption protocol can for example be DES decryption protocols, AES decryption protocols, RSA decryption protocols etc..For utilization is awarded
Key after the security parameter encryption of power node, its deciphering parameter only in the authorization node of the security parameter can just be solved
It is close, and other nodes can not be decrypted to the key after its encryption, in such manner, it is possible to ensure that only authorization node could be obtained
To key.
In the present embodiment, from authorization node intelligent contract by public encryption/decryption parameter and security parameter to block chain network
Each node issue, i.e., all nodes in the block chain network can receive the public encryption/decryption parameter and secrecy ginseng
Number, but only each authorization node could obtain key to decrypt using corresponding deciphering parameter, and other nodes are not due to having
Corresponding deciphering parameter, therefore cannot be decrypted.
Preferably, public encryption/decryption parameter and security parameter are issued out by the intelligent contract of authorization node by peer-to-peer network
Go, then notify that the user of each authorization node reads public encryption/decryption parameter and security parameter.
The information to be transacted is passed through intelligence by the second release module 103, the authorization process system for the publisher node
Energy contract is issued to each node of the block chain network;
Deciphering module 104, described waits to hand over receiving by intelligent contract for the corresponding authorization node of the authorized party
Easily after information, the authorization process system of the authorization node is waited to hand over to described using deciphering parameter corresponding with the security parameter
The key of easily information is decrypted, and decrypts the to be transacted information with the public encryption/decryption parameter based on the key after decryption,
So that the information to be transacted is decrypted mandate to the authorization node.
In the present embodiment, information to be transacted is passed through intelligent contract to block chain network by the authorization process system of publisher node
Each node issue, each node can receive the information to be transacted of the encryption.
In the present embodiment, if authorization node have read the public encryption/decryption parameter of publisher node issue and secrecy ginseng
Number, as authorization node has the corresponding deciphering parameter of security parameter, therefore the authorization process system of authorization node can be by being somebody's turn to do
The corresponding deciphering parameter of security parameter is decrypted to key.Additionally, the authorization process system of authorization node is reading encryption
After information to be transacted, it is possible to use the key and public encryption/decryption parameter after decryption is decrypted to the information to be transacted for reading,
Specifically, the information to be transacted for reading is decrypted using the decryption protocol in key and public encryption/decryption parameter so that award
The information to be transacted after node can be decrypted is weighed, is realized information to be transacted from publisher node at least one authorization node
It is decrypted mandate, that is to say, that only authorization node just has permission the information to be transacted for knowing that publisher node is issued, Jin Erneng
The related affairs of information to be transacted are processed enough.
In a preferred embodiment, it is as shown in fig. 6, on the basis of the embodiment of above-mentioned Fig. 5, above-mentioned based on block chain
The authority control system of transaction also includes:
First encrypting module 105, for the corresponding feedback letter of information to be transacted after the authorization node generates decryption
After breath, the authorization process system of the authorization node is encrypted based on the cryptographic protocol and feedback information described in secret key pair,
And the feedback information after encryption is broadcasted to each node of the block chain network using the intelligent contract;
First transaction modules 106, are the corresponding confirmation Transaction Information of the information to be transacted for the feedback information, then
The publisher node performs trade transactions corresponding to the authorization node transaction information to be transacted;
First refusal module 107, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Then publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (for example reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node is generated
Corresponding feedback information.In order to the feedback information is only disclosed to publisher node and each authorization node, so as to publisher node and
Other each authorization nodes can know which node possesses the associated rights of information to be transacted, and the authority of the authorization node is processed
System is encrypted based on the cryptographic protocol in public encryption/decryption parameter and secret key pair feedback information, cryptographic protocol be, for example, with it is upper
The DES decryption protocols stated, AES decryption protocols, the corresponding des encryption agreement of RSA decryption protocols, AES encryption agreement, rsa encryption
Agreement etc..Then the feedback information after encryption is broadcasted to each node of block chain network using intelligent contract, for
Publisher node and other each authorization nodes read and decrypt feedback information.If feedback information is that information to be transacted is corresponding really
Recognize Transaction Information, then publisher node performs trade transactions corresponding with authorization node transaction information to be transacted;If feedback information
For the corresponding refusal Transaction Information of information to be transacted, then the execution of publisher node refusal is corresponding with authorization node transaction information to be transacted
Trade transactions.
The present embodiment encrypts feedback information using key and cryptographic protocol in the management and control of authority so that only issue section
Point and other each authorization nodes can know which node possesses the associated rights of information to be transacted, can be to block chain network
The authority of middle issued transaction further carries out effective management and control.
In a preferred embodiment, it is as shown in fig. 7, on the basis of the embodiment of above-mentioned Fig. 5, above-mentioned based on block chain
The authority control system of transaction also includes:
Second encrypting module 108, for the corresponding feedback letter of information to be transacted after the authorization node generates decryption
After breath, the public key of the authorization process system of the authorization node based on the cryptographic protocol and the publisher node is to the feedback
Information is encrypted, and the feedback information after encryption is broadcasted to each node of block chain network using intelligent contract;
Second transaction modules 109, if being the corresponding confirmation Transaction Information of the information to be transacted for the feedback information,
Then the publisher node performs trade transactions corresponding to the authorization node transaction information to be transacted;
Second refusal module 110, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Then publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (for example reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node is generated
Corresponding feedback information.In order to the feedback information is only disclosed to publisher node, and authorization node and other nodes are not disclosed,
So that publisher node can know which node possesses the associated rights of information to be transacted, the authorization process system of the authorization node
Feedback information is encrypted based on the public key of cryptographic protocol and publisher node in public encryption/decryption parameter, cryptographic protocol is for example
Be des encryption agreement corresponding with above-mentioned DES decryption protocols, AES decryption protocols, RSA decryption protocols, AES encryption agreement,
Rsa encryption agreement etc..Then the feedback information after encryption is carried out extensively to each node of block chain network using intelligent contract
Broadcast, so that publisher node reads and the corresponding private key of public key using publisher node and decryption protocol decryption feedback information.If
Feedback information is the corresponding confirmation Transaction Information of information to be transacted, then publisher node is performed and authorization node transaction information to be transacted
Corresponding trade transactions;If feedback information is the corresponding refusal Transaction Information of information to be transacted, publisher node refusal is performed
Trade transactions corresponding with authorization node transaction information to be transacted.
The present embodiment encrypts feedback information using the public key and cryptographic protocol of publisher node in the management and control of authority so that
Only publisher node can know which node possesses the associated rights of information to be transacted, can be to office in block chain network
The authority of reason further carries out effective management and control.
In a preferred embodiment, on the basis of the embodiment of above-mentioned Fig. 5, the above-mentioned authority concluded the business based on block chain
Control system also includes:
Authentication module, if being directed to the information to be transacted of the encryption to issue for the intelligent contract without authorization node
Node sends the decryption authorization requests for carrying authentication information, then the authorization process system of the publisher node is based on the body
Part authentication information carries out authenticating user identification;
3rd refusal module, if failing for authentication, decryption described in the publisher node refusal respond is authorized please
Ask;
Acquisition module, if for authentication success, the publisher node obtains user please for the decryption mandate
The result asked;
Authorization module, if being by the decryption authorization requests, the power of the publisher node for the result
Limit processing system encrypts the key without the corresponding security parameter of authorization node using described, and by the key after encryption by sending out
The intelligent contract of cloth node is distributed to each node of the block chain network, for the data permission Solutions of Systems without authorization node
The information to be transacted is decrypted mandate without authorization node to described by the close information to be transacted;
Refusal authorization module, if being the refusal decryption authorization requests, the publisher node for the result
Refusal is decrypted mandate without authorization node to described for the information to be transacted of encryption.
In the present embodiment, it is the node in addition to publisher node and authorization node without authorization node, as authorizes without decryption
Node, in order to be decrypted mandate relief to reading information to be transacted without authorization node, the intelligent contract without authorization node is directed to
The information to be transacted of the encryption generates the decryption authorization requests for carrying authentication information, and publisher node in acquisition, award by the decryption
Authentication is carried out after power request, authentication information is, for example, digital certificate etc., and the authorization process system of publisher node is based on
To carrying out authentication without authorization node, that is, analysing whether can be to be transacted without authorization node reading to this for the authentication information
Information is decrypted mandate.Can the be stored with identity of other nodes and corresponding user of the authorization process system of publisher node is recognized
Card information, specifically, if one of authentication information of authorization process system storage of publisher node is awarded with the nothing
Power node and corresponding user's ID authentication information are identical, then authentication success, then by publisher to decrypting authorization requests
Processed, that is, to grant and be decrypted mandate without authorization node reading information to be transacted to this or not grant to this without mandate section
Point reads information to be transacted and is decrypted mandate, to obtain the result that corresponding decryption is authorized.
If result is by decrypting authorization requests, the authorization process system of publisher node is using without authorization node
Corresponding security parameter encrypts key, and the key after encryption is distributed to the block link network by the intelligent contract of publisher node
Each node of network, decrypts the information to be transacted for the data permission system without authorization node, realizes the authority of publisher node
Processing system is directed to the information to be transacted of encryption to being decrypted mandate without authorization node;If result is awarded for refusal decryption
Power is asked, then the authorization process system refusal of publisher node is awarded to being decrypted without authorization node for the information to be transacted of encryption
Power.
The present embodiment can be to being decrypted the relief of mandate, i.e. the authorization process system base of publisher node without authorization node
Carry out authentication in the authentication information without authorization node, and authentication by when obtain publisher decryption authorized
Corresponding result is asked, if the result is by decrypting authorization requests, publisher node is realized to without mandate section
Point reads the decryption mandate of the information to be transacted, that is, realize the relief authorized to the decryption without authorization node, improve block chain power
The flexibility of limit management and control.
The foregoing is only presently preferred embodiments of the present invention, not to limit the present invention, all spirit in the present invention and
Within principle, any modification, equivalent substitution and improvements made etc. should be included within the scope of the present invention.