CN112261015B

CN112261015B - Information sharing method, platform, system and electronic equipment based on block chain

Info

Publication number: CN112261015B
Application number: CN202011085361.2A
Authority: CN
Inventors: 贾梦飞
Original assignee: Beijing Jingdong Century Trading Co Ltd; Beijing Wodong Tianjun Information Technology Co Ltd
Current assignee: Beijing Jingdong Century Trading Co Ltd; Beijing Wodong Tianjun Information Technology Co Ltd
Priority date: 2020-10-12
Filing date: 2020-10-12
Publication date: 2023-05-12
Anticipated expiration: 2040-10-12
Also published as: CN112261015A

Abstract

The embodiment of the application provides a blockchain-based information sharing method, a platform, a system, electronic equipment and a storage medium, which relate to the field of Internet and blockchain and comprise the following steps: the first platform receives information of an initial account sent by the second platform, the initial account is one account of a preset blockchain, the initial account is used for storing information to be shared encrypted by the second platform, the first platform carries out re-encryption conversion on the encrypted information to be shared according to the information of the initial account, the first platform stores the information to be shared after the re-encryption conversion to a target account, the target account is the other account of the blockchain, and the defect that the private key of the second platform is possibly leaked due to the fact that the second platform needs to share the private key of the second platform with the third platform in the related art is avoided by introducing the first platform, so that the technical effects of ensuring the safety of the private key of the second platform in the information sharing process and improving the flexibility and diversity of information sharing are achieved.

Description

Information sharing method, platform, system and electronic equipment based on block chain

Technical Field

The embodiment of the application relates to the field of Internet and blockchain, in particular to a blockchain-based information sharing method, platform, system, electronic equipment and storage medium.

Background

Blockchain technology has characteristics of non-tamper and traceability, etc., and therefore, is increasingly being widely used in various fields, such as in order to solve trust problems, blockchain technology is being used in security services for information.

In the prior art, after the information to be shared is fully encrypted and uplink by adopting the information provider, the information provider performs sharing authorization on the information sharing party, and the information sharing party can decrypt the encrypted information to be shared based on the decryption information, so that the analysis information comprises the private key of the information provider and the public key of the information sharing party.

In the process of implementing the present application, the inventor finds that at least the following problems exist in the prior art: how to avoid the disclosure of the private key of the information provider is a urgent problem to be solved.

Disclosure of Invention

The embodiment of the application provides a blockchain-based information sharing method, a blockchain-based information sharing platform, a blockchain-based information sharing system, electronic equipment and a storage medium, which are used for solving the problem of privacy leakage of an information provider side.

In one aspect, an embodiment of the present application provides a blockchain-based information sharing method, applied to a first platform, where the method includes:

receiving information of an initial account sent by a second platform, wherein the initial account is an account preset in a blockchain, and the initial account is used for storing information to be shared after the encryption of the second platform;

re-encrypting and converting the encrypted information to be shared according to the information of the primary account;

storing the information to be shared after the re-encryption conversion to a target account, wherein the target account is another account of the blockchain;

and sending the information of the target account to a third platform, wherein the information of the target account is used for sharing information to be shared.

In this embodiment, by introducing the first platform (equivalent to introducing the intermediate platform), re-encrypting the encrypted information to be shared provided by the second platform through the first platform, and transferring the encrypted information to be shared, so that the third platform shares the information to be shared based on the transferred information (i.e., the information of the target account), the defect that in the related art, the private key of the second platform is possibly leaked because the second platform needs to share the private key of the second platform with the third platform is avoided, thereby realizing the technical effects of ensuring the security of the private key of the second platform in the information sharing process, and improving the flexibility and diversity of the information sharing.

In some embodiments, the re-encrypting conversion of the encrypted information to be shared according to the information of the primary account includes:

locating the primary account in the blockchain according to the information of the primary account;

acquiring encrypted information to be shared from the primary account;

and carrying out re-encryption conversion on the encrypted information to be shared.

In this embodiment, the first platform determines the primary account based on the information of the primary account, obtains the encrypted information to be shared therefrom, and performs re-encryption conversion, where the encrypted information to be shared is invisible to the first platform, so that leakage of the information to be shared is avoided, and a technical effect of improving security of the information to be shared is achieved.

In some embodiments, the method further comprises:

receiving a re-encryption key sent by the second platform;

and carrying out re-encryption conversion on the encrypted information to be shared according to the information of the primary account, wherein the re-encryption conversion comprises the following steps: and carrying out re-encryption conversion on the encrypted information to be shared according to the information of the primary account and the re-encryption key.

In some embodiments, the re-encryption key is generated based on a private key of the second platform and a public key of the third platform.

In this embodiment, the third platform shares the information to be shared after the re-encryption conversion based on the public key of the third platform by the re-encryption key generated based on the private key of the second platform and the public key of the third platform, so as to achieve the technical effects of flexibility and convenience of information sharing.

In some embodiments, performing the re-encryption conversion on the encrypted information to be shared according to the information of the primary account and the re-encryption key includes:

acquiring encrypted information to be shared according to the information of the primary account;

and encrypting the encrypted information to be shared according to the re-encryption key to obtain re-encrypted and converted information to be shared which is decrypted based on the private key of the third platform.

In some embodiments, the public key of the third platform and the private key of the third platform are a key pair based on a bilinear pair form;

the encrypted information to be shared is encrypted information based on the public key of the second platform, and the public key of the second platform and the private key of the second platform are key pairs based on bilinear pair forms.

In the present embodiment, by generating a key pair in the form of a bilinear pair, the reliability of encryption can be improved, thereby providing the technical effect of security of information sharing.

In another aspect, an embodiment of the present application provides a blockchain-based information sharing method, applied to a second platform, where the method includes:

storing the encrypted information to be shared into a preset initial account of a blockchain;

and sending the information of the primary account to a first platform, wherein the information of the primary account is used for carrying out re-encryption conversion on the encrypted information to be shared and storing the information into a target account of the blockchain, and the information of the target account is used for sharing the information to be shared.

In some embodiments, the information of the primary account is used to locate the primary account in the blockchain and obtain encrypted information to be shared from the primary account.

In some embodiments, the method further comprises:

and sending a re-encryption key to the first platform, wherein the re-encryption key is used for carrying out re-encryption conversion on the encrypted information to be shared.

In some embodiments, the method further comprises:

receiving a sharing request sent by a third platform, wherein the sharing request comprises a public key of the third platform;

and generating the re-encryption secret key according to the private key of the second platform and the public key of the third platform.

In some embodiments, performing re-encryption conversion on the encrypted information to be shared includes: and encrypting the encrypted information to be shared according to the re-encryption key to obtain re-encrypted and converted information to be shared which is decrypted based on the private key of the third platform.

In some embodiments, the encrypted information to be shared is information obtained by encrypting ticket information based on a public key of the second platform.

In another aspect, an embodiment of the present application provides a blockchain-based information sharing method, applied to a third platform, where the method includes:

receiving information of a target account sent by a first platform, wherein the target account is one account of a preset blockchain;

the information to be shared after re-encryption conversion is obtained according to the information of the target account, and the information to be shared after re-encryption conversion is obtained by re-encryption conversion of the encrypted information to be shared in the initial account and is transferred to the target account;

And decrypting the re-encrypted and converted information to be shared to obtain the information to be shared.

In some embodiments, the re-encrypting the information to be converted is generated by re-encrypting the encrypted information to be shared based on a re-encryption key.

In some embodiments, the re-encrypted and converted information to be shared is the information to be shared which is obtained by encrypting the encrypted information to be shared according to the re-encryption key and decrypting the encrypted information to be shared based on the private key of the third platform.

In some embodiments, the re-encrypted information to be shared is generated by positioning the primary account according to the information of the primary account, acquiring the encrypted information to be shared from the primary account, and re-encrypting the encrypted information to be shared.

In another aspect, embodiments of the present application provide a blockchain-based platform, the platform comprising:

the receiving module is used for receiving information of an initial account sent by a second platform, wherein the initial account is an account preset in a blockchain, and the initial account is used for storing information to be shared after the encryption of the second platform;

the re-encryption module is used for carrying out re-encryption conversion on the encrypted information to be shared according to the information of the primary account;

the transfer module is used for storing the information to be shared after the re-encryption conversion to a target account, wherein the target account is another account of the blockchain;

the first sending module is used for sending the information of the target account to the third platform, and the information of the target account is used for sharing information to be shared.

In some embodiments, the re-encryption module is configured to locate the primary account in the blockchain according to the information of the primary account, obtain encrypted information to be shared from the primary account, and perform re-encryption conversion on the encrypted information to be shared.

In some embodiments, the receiving module is configured to receive a re-encryption key sent by the second platform;

And the re-encryption module is used for carrying out re-encryption conversion on the encrypted information to be shared according to the information of the primary account and the re-encryption key.

In some embodiments, the re-encrypting module is configured to obtain encrypted information to be shared according to the information of the primary account, encrypt the encrypted information to be shared according to the re-encrypting key, and obtain re-encrypted converted information to be shared based on the private key of the third platform.

The storage module is used for storing the encrypted information to be shared into a preset initial account of the blockchain;

the second sending module is used for sending the information of the primary account to the first platform, the information of the primary account is used for carrying out re-encryption conversion on the encrypted information to be shared and storing the information into a target account of the blockchain, and the information of the target account is used for sharing the information to be shared.

In some embodiments, the second sending module is configured to send a re-encryption key to the first platform, where the re-encryption key is used to perform re-encryption conversion on the encrypted information to be shared.

In some embodiments, the platform further comprises:

the first receiving module is used for receiving a sharing request sent by a third platform, wherein the sharing request comprises a public key of the third platform;

and the generation module is used for generating the re-encryption secret key according to the private key of the second platform and the public key of the third platform.

In some embodiments, the re-encryption key is used to encrypt the encrypted information to be shared, and obtain re-encrypted converted information to be shared that is decrypted based on the private key of the third platform.

the second receiving module is used for receiving information of a target account sent by the first platform, wherein the target account is an account of a preset blockchain;

the acquisition module is used for acquiring the re-encrypted and converted information to be shared according to the information of the target account, wherein the re-encrypted and converted information to be shared is generated by re-encrypting and converting the encrypted information to be shared;

And the decryption module is used for decrypting the information to be shared after the re-encryption conversion to obtain the information to be shared.

In another aspect, an embodiment of the present application provides a blockchain-based information sharing system, including: the platform of any of the embodiments above.

In another aspect, an embodiment of the present application provides an electronic device, including: a memory, a processor;

a memory; a memory for storing the processor-executable instructions;

wherein the processor is configured to: the method as in any one of the embodiments above is performed.

In another aspect, embodiments of the present application provide a computer-readable storage medium having stored therein computer-executable instructions that, when executed by a processor, are configured to implement a method as in any of the embodiments above.

The information sharing method, platform, system, electronic device and storage medium based on blockchain provided by the embodiment of the application comprise the following steps: the first platform receives information of an initial account sent by the second platform, the initial account is one account of a preset blockchain, the initial account is used for storing information to be shared encrypted by the second platform, the first platform carries out re-encryption conversion on the encrypted information to be shared according to the information of the initial account, the first platform stores the information to be shared after the re-encryption conversion to a target account, the target account is the other account of the blockchain, and the first platform is introduced so as to realize sharing of the information to be shared provided by the second platform by means of the third platform, so that on one hand, the defect that in the related art, the private key of the second platform is possibly leaked because the second platform needs to share the private key of the second platform with the third platform is avoided, and therefore the technical effects of ensuring the security of the private key of the second platform in the information sharing process and improving the flexibility and diversity of the information sharing are realized; on the other hand, the defect of larger encryption resource consumption caused by secondary encryption based on the public key of the third platform when the second platform receives the third platform to request to share the information to be shared can be avoided, so that the computing power of the second platform is released, namely the technical effects of saving the computing resource of the second platform, reducing the load of the second platform and improving the running performance (such as running efficiency) of the second platform are realized; in the process of re-encrypting conversion and transfer of the first platform, the information to be shared is in an encrypted state and invisible to the first platform, so that the technical effects of safety and reliability in the process of sharing the information to be shared can be ensured.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description, serve to explain the principles of the disclosure.

Fig. 1 is a schematic diagram of an application scenario of a blockchain-based information sharing method according to an embodiment of the present application;

FIG. 2 is a schematic diagram according to a first embodiment of the present application;

FIG. 3 is a schematic diagram according to a second embodiment of the present application;

FIG. 4 is a schematic diagram according to a third embodiment of the present application;

FIG. 5 is a schematic diagram according to a fourth embodiment of the present application;

FIG. 6 is a schematic diagram according to a fifth embodiment of the present application;

FIG. 7 is a schematic diagram according to a sixth embodiment of the present application;

FIG. 8 is a schematic diagram according to a seventh embodiment of the present application;

FIG. 9 is a schematic diagram according to an eighth embodiment of the present application;

specific embodiments of the present disclosure have been shown by way of the above drawings and will be described in more detail below. These drawings and the written description are not intended to limit the scope of the disclosed concepts in any way, but rather to illustrate the disclosed concepts to those skilled in the art by reference to specific embodiments.

Detailed Description

Reference will now be made in detail to exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, the same numbers in different drawings refer to the same or similar elements, unless otherwise indicated. The implementations described in the following exemplary examples are not representative of all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with some aspects of the present disclosure as detailed in the accompanying claims.

Nouns involved in the embodiments of the present application are explained as follows:

blockchain: refers to a database with a data "hash verification" function. The blocks are data blocks, the data blocks are combined into a chain structure according to time sequence, and the reliability of the database is maintained collectively in a distributed accounting mode by utilizing a cryptography algorithm; all data blocks are connected in time order, forming a blockchain.

Secret key: also referred to as a key, in cryptography, a key (also commonly referred to as a key) refers to secret information that is used to perform cryptographic applications such as encryption, decryption, integrity verification, etc.

Private key: refers to private keys, i.e. keys that are known only to themselves.

Public key: refers to the public key.

Key pair: it is meant that the private key and the public key are typically present in pairs, so that a combination that includes both the private key and the public key may be referred to as a key pair.

The embodiment of the application provides an information sharing method (hereinafter referred to as an information sharing method) based on a blockchain, and the information sharing method can be applied to sharing information between two different entities. For example, sharing of information between two different enterprises; or information sharing among different departments of the same enterprise; or the sharing of information between two different users, etc., are not listed here.

An application scenario of the information sharing method of the embodiment of the present application will be exemplarily described with reference to fig. 1, where two different entities are taken as two different enterprises. Fig. 1 is a schematic diagram of an application scenario of a blockchain-based information sharing method according to an embodiment of the present application.

Illustratively, two different enterprises are enterprise a and enterprise B, respectively, and as shown in fig. 1, the platform corresponding to enterprise a may be referred to as platform a, and the platform corresponding to enterprise B may be referred to as platform B.

The platform a and the platform B may be cloud service platforms, or may be platforms provided with local servers, which is not limited in this embodiment.

In the application scenario shown in fig. 1, the platform a is a provider of information to be shared, and the platform B is a receiver of the information to be shared, that is, the platform B shares the information to be shared provided by the platform a.

In addition, as can be seen from fig. 1, the platform a can upload the information to be shared to the blockchain, and the platform B can obtain the information to be shared from the blockchain, so as to realize that the platform B shares the information to be shared provided by the platform a.

It should be noted that, the foregoing examples are merely for exemplary illustration, and are not to be construed as limiting the application scenario of the information sharing method of the embodiment of the present application, for example, the application scenario of the information sharing method of the embodiment of the present application may also be an application scenario of the same enterprise incapable department set forth in the foregoing examples, or the like; and cannot be understood as defining elements in an application scenario of the information sharing method of the embodiment of the present application, for example, in a possible implementation scheme, the platform B may be a provider of information to be shared, and the platform a is a receiver of the information to be shared; as another example, in another possible implementation, a platform C may be added, to implement sharing of information to be shared by three parties, and so on.

In the related art, in order to avoid leakage of information to be shared, a sharing-side platform (such as platform a in the above example) is generally implemented in a manner of encrypting the information to be shared, and in order to avoid leakage of a private key used for encrypting the information to be shared, is implemented by adopting a manner of secondary encryption.

However, the disclosure of the information to be shared and the private key for encrypting the information to be shared is avoided by adopting the secondary encryption manner by the sharing platform in the related art, which may cause a drawback of larger consumption of encryption resources of the sharing platform.

The inventors of the present application have creatively made the inventive concept of the present application: and introducing an intermediate side platform, converting and storing the information to be shared by the intermediate side platform, and sending the information after conversion to a sharing side, so that the sharing side shares the information to be shared based on the information after storage.

The following describes the technical solutions of the present application and how the technical solutions of the present application solve the above technical problems in detail with specific embodiments. The following embodiments may be combined with each other, and the same or similar concepts or processes may not be described in detail in some embodiments. Embodiments of the present application will be described below with reference to the accompanying drawings.

Fig. 2 is a schematic diagram of a first embodiment of the present application, and as shown in fig. 2, the blockchain-based information sharing method provided in the present embodiment includes:

s101: the first platform receives information of an initial account sent by the second platform, wherein the initial account is an account preset in a blockchain, and the initial account is used for storing information to be shared after the second platform is encrypted.

The execution body of the embodiment may be a first platform, and the first platform may be a server, a terminal device, a processor, a chip, or the like, which is not limited in this embodiment.

When the blockchain-based information sharing method in the embodiment of the present application is applied to the application scenario shown in fig. 1, the second platform is equivalent to the platform a providing the information to be shared, and the first platform is an intermediate platform (not shown in the figure) for assisting the platform B to obtain the information to be shared.

That is, the second platform may encrypt the information to be shared and store the encrypted information to be shared into an account of the blockchain, and the account may be referred to as an initial account.

Illustratively, the blockchain is formed by linking blocks that can be used to store information, so the information of the primary account can be understood as the related information of a specific block of the primary account in the blockchain, and in the block, the related information, such as an address, of the encrypted information to be shared is stored specifically.

That is, the first platform receives information about an account in which encrypted information to be shared is stored in an account (i.e., a primary account) of the blockchain.

S102: and the first platform performs re-encryption conversion on the encrypted information to be shared according to the information of the primary account.

Illustratively, the re-encryption conversion can be used for characterization, and the encrypted information to be shared is subjected to re-encryption processing.

That is, this step can be understood as: when the first platform receives the encrypted information to be shared, the encrypted information to be shared can be encrypted again.

S103: and the first platform stores the information to be shared after the re-encryption conversion to a target account, wherein the target account is another account of the blockchain.

For example, the description of the target account may be referred to in the above example, and the description of the primary account is not repeated here.

That is, this step can be understood as: the first platform encrypts the encrypted information to be shared again and stores the encrypted information to another account (namely, a target account) different from the initial account.

S104: and the first platform sends the information of the target account to the third platform, wherein the information of the target account is used for sharing the information to be shared.

For example, the description of the information about the target account may be referred to the description of the information about the primary account, which is not described herein.

The third platform is a platform for sharing information to be shared, and in the application scenario shown in fig. 1, the third platform corresponds to the platform B.

That is, this step can be understood as: after the first platform stores the re-encrypted and converted information to be shared into the target account, the information of the target account can be sent to the third platform, so that the third platform reads the re-encrypted and converted information to be shared from the target account based on the information of the target account, and the third platform shares the information to be shared.

Based on the above analysis, the present embodiment provides a blockchain-based information sharing method, which includes: the method comprises the steps that a first platform receives information of an initial account sent by a second platform, the initial account is one account of a preset blockchain, the initial account is used for storing information to be shared encrypted by the second platform, the first platform carries out re-encryption conversion on the encrypted information to be shared according to the information of the initial account, the first platform stores the information to be shared after the re-encryption conversion to a target account, the target account is the other account of the blockchain, and the first platform is introduced so that the third platform shares the information to be shared provided by the second platform by means of the first platform, so that on one hand, the defect that in the related art, the second platform needs to share a private key of the second platform with the third platform, and the private key of the second platform is possibly leaked can be avoided, and therefore the technical effects of ensuring the safety of the private key of the second platform in an information sharing process and improving the flexibility and diversity of information sharing are achieved; on the other hand, the defect of larger encryption resource consumption caused by secondary encryption based on the public key of the third platform when the second platform receives the third platform to request to share the information to be shared can be avoided, so that the computing power of the second platform is released, namely the technical effects of saving the computing resource of the second platform, reducing the load of the second platform and improving the running performance (such as running efficiency) of the second platform are realized; in the process of re-encrypting conversion and transfer of the first platform, the information to be shared is in an encrypted state and invisible to the first platform, so that the technical effects of safety and reliability in the process of sharing the information to be shared can be ensured.

In order for the reader to more deeply understand the blockchain-based information sharing method of the embodiments of the present application, the blockchain-based information sharing method of the embodiments of the present application will now be described in more detail with reference to fig. 3.

FIG. 3 is a schematic diagram of a second embodiment of the present application, as shown in FIG. 3, a block chain based information sharing method, comprising:

s201: and the second platform encrypts the information to be shared by adopting the public key of the second platform.

Illustratively, the second platform may be understood as a provider of information to be shared, such as the second platform is platform a shown in fig. 1.

That is, the second platform may store a key pair of the second platform, where the key pair of the second platform includes a public key of the second platform and a private key of the second platform, and the second platform stores information to be shared.

S202: and the second platform stores the encrypted information to be shared into a preset initial account of the blockchain.

The description of the primary account may be referred to the above embodiments, and will not be repeated here.

S203: the third platform sends a sharing request to the second platform, the sharing request is used for requesting to share the information to be shared, and the sharing request carries the public key of the third platform.

Similarly, the third platform stores a private key pair of the third platform, wherein the private key pair of the third platform comprises a public key of the third platform and a private key of the third platform.

That is, when the third platform needs to share the information to be shared, a sharing request may be sent to the second platform, and the public key of the third platform is carried.

For example, if the third platform is sending the sharing request to the second platform for the first time, the public key of the third platform may be carried in the sharing request, and if the third platform is not sending the sharing request to the second platform for the first time, the public key of the third platform may not be carried. For example, the public key of the third platform in the sharing request may be extracted and stored by the second platform when the sharing request sent by the third platform is first received by the second platform.

S204: the second platform judges whether to grant the third platform to share the information to be shared, if yes (i.e. the second platform grants the third platform to share the information to be shared), S205 is executed; if not (i.e., the second platform refuses the sharing of the information to be shared by the third platform), then S214 is performed.

For example, the sharing request may carry an identifier of the third platform, where the identifier is used to distinguish from other platforms. When the second platform receives the sharing request, whether to grant the third platform to share the information to be shared may be determined based on identifying a blacklist and/or a whitelist that are set in advance, and setting of the blacklist and/or the whitelist may be set by the second platform based on the request, the history, and the like, which is not limited in this embodiment.

For example, take the blacklist set by the second platform as an example: when receiving the sharing request sent by the third platform, whether the third platform is a platform in the blacklist or not can be determined according to the identification, if so, the second platform can determine to reject the authorization, and if not, the second platform can determine to agree with the authorization.

As another example, take the white list set by the second platform as an example: when receiving the sharing request sent by the third platform, whether the third platform is a platform in the white list or not can be determined according to the identification, if so, the second platform can determine to grant authorization, and if not, the second platform can determine to reject the authorization.

As another example, take a black-and-white list set by the second platform as an example: when a sharing request sent by the third platform is received, whether the third platform is a platform in the blacklist or a platform in the whitelist can be determined according to the identification, if the third platform is the platform in the whitelist can be identified, the second platform can determine to grant authorization, and if the third platform is the platform in the blacklist can be identified, the second platform can determine to deny authorization.

It should be noted that, in this embodiment, the dynamic authorization of the sharing request by the second platform may be implemented. For example, in the related art, the second platform stores the encrypted information to be shared into the blockchain, and the second platform needs to set the platform authorized to share the information to be shared, while in the present embodiment, the third platform dynamically determines the platform sending the sharing request, so as to achieve the technical effects of flexibility and diversity of sharing.

S205: the second platform generates a re-encryption key according to the private key of the second platform and the public key of the third platform.

Illustratively, a re-encryption key may be used for characterization, the second platform converts one ciphertext into a key for another ciphertext, and the third platform may decrypt the converted other ciphertext based on the third platform's private key.

In this embodiment, if the second platform is platform a, the private key of the second platform is a1, the third platform is platform B, the public key of the third platform is B2, and g is a preset generator of elliptic curve group, then the re-encryption key rk can be generated based on equation 1 _A→B Formula 1:

rk _A→B ＝(g ^a1b2 )。

s206: the second platform sends the information of the primary account and the re-encryption key to the first platform.

For example, the description of the information about the primary account may be referred to the above embodiments, and will not be repeated here. And in combination with the above embodiment, the first platform may be understood as an intermediate platform, which is used to support the third platform to share the information to be shared provided by the first platform.

That is, when the second platform stores the encrypted information to be shared in the primary account in the blockchain and generates the re-encryption key, both the information of the primary account and the re-encryption key may be sent to the first platform, so that the first platform learns the information of the primary account, thereby performing a subsequent re-encryption conversion operation based on the re-encryption key.

Based on the above example, if the third platform is sending the sharing request to the second platform for the first time, the public key of the third platform may be carried in the request, and if the third platform is not sending the sharing request to the second platform for the first time, the public key of the third platform may not be carried. Similarly, for example, if the second platform is to receive the sharing request sent by the third platform for the first time, the second platform may generate a re-encryption key based on the public key of the third platform and the private key of the second platform, and send the re-encryption key to the first platform, and correspondingly, the first platform may store the re-encryption key, and if the second platform is not to receive the sharing request sent by the third platform for the first time, the third platform may send the information of the initial account to the first platform, without calculating the re-encryption key again.

S207: the first platform determines an initial account in the blockchain according to the information of the initial account.

Illustratively, the first platform determines a location of the primary account in the blockchain from the information of the primary account and locates the primary account based on the location.

S208: the first platform extracts the encrypted information to be shared from the primary account, and performs re-encryption conversion on the encrypted information to be shared according to the re-encryption key.

Illustratively, a re-encryption transformation may be used for characterization, where a given ciphertext provided by one platform is re-encrypted with a re-encryption key, the ciphertext is transformed into another ciphertext, and the other ciphertext may be decrypted by the other platform in accordance with the private key of the other platform.

Illustratively, if the first platform is platform C, the first platform may perform the re-encryption transformation based on equation 2, equation 2:

c _A *f _C *(g ^a1b2 )。

in formula 2, c _A F, as the encrypted information to be shared _C Preset coefficients for the first platform.

It is worth to say that, in the process of executing the re-encryption conversion by the first platform, the encrypted information to be shared after executing the re-encryption conversion is invisible to the first platform, so that leakage of the encrypted information to be shared can be avoided, and the technical effect of ensuring the safety of the encrypted information to be shared is achieved.

S209: and the first platform stores the information to be shared after the re-encryption conversion to the target account.

For example, the description of the target account may be referred to the above examples, and will not be repeated here.

S210: and the first platform sends the information of the target account to the third platform.

For example, the description of the information about the target account may be referred to the above examples, and will not be repeated here.

S211: and the third platform determines the target account in the blockchain according to the information of the target account.

Illustratively, the third platform determines a location of the target account in the blockchain from the information of the target account and locates the target account based on the location.

S212: and the third platform acquires the information to be shared after the re-encryption conversion from the target account.

S213: and the third platform decrypts the re-encrypted and converted information to be shared according to the private key of the third platform to obtain the information to be shared.

Illustratively, based on the above examples, the re-encryption transformation can be understood as: the first platform encrypts the encrypted information to be shared of the second platform again based on the re-encryption key to generate information which can be analyzed by the third platform based on the private key of the third platform, so in this embodiment, when the third platform obtains the re-encrypted and converted information to be shared, the re-encrypted and converted information to be shared can be decrypted based on the private key of the third platform to obtain the information to be shared.

In some embodiments, the key pair of the second platform is a key pair in the form of a bilinear pair.

The private key of the second platform is illustratively in the form of (a 1, a 2), the public key of the second platform is in the form of

Wherein a1 and a2 are random numbers, g is a preset generating element of an elliptic curve group, and Z represents e (g, g) operation.

Similarly, in some embodiments, the key pair of the third platform is a key pair in the form of a bilinear pair.

The private key of the third platform is illustratively in the form of (b 1, b 2), the public key of the third platform is in the form of

Wherein b1 and b2 are random numbers, g is a preset generator of elliptic curve groups, and Z represents e (g, g) operation.

It should be noted that, by setting the key pair (including the key pair of the first platform and the key pair of the second platform) to be a bilinear key pair, the technical effects of security and reliability of the encryption and decryption process can be improved.

S214: the second platform sends a message to the third platform rejecting the authorization.

Fig. 4 is a schematic diagram according to a third embodiment of the present application, as shown in fig. 4, a blockchain-based information sharing method provided in the present embodiment includes:

s301: and the second platform stores the encrypted information to be shared into a preset initial account of the blockchain.

For example, in conjunction with the description of the above example, the second platform may be a platform that provides information to be shared, and the description of the primary account may refer to the above example, which is not repeated herein.

S302: and sending the information of the primary account to a first platform, wherein the information of the primary account is used for re-encrypting and converting the encrypted information to be shared and storing the information into a target account of a blockchain, and the information of the target account is used for sharing the information to be shared.

For example, as can be seen in conjunction with the above examples, the first platform may be an intermediate platform, and descriptions of the primary account information, the target account, and the target account information may be referred to the above examples, which are not repeated herein.

Illustratively, this embodiment may be understood as: after the second platform encrypts the information to be shared, the encrypted information to be shared is stored in a certain account (namely, an initial account) of the blockchain, the encrypted information to be shared is prevented from being tampered by storing the encrypted information to be shared in the blockchain, the technical effects of safety and reliability of the encrypted information to be shared are improved, the second platform sends the information (such as address information and the like) of the initial account (namely, the account in which the information to be shared is stored in the blockchain) to the first platform, so that the first platform carries out re-encryption processing on the encrypted information to be shared, and the target account in the blockchain is transferred, so that the information to be shared is shared through the information of the target account.

In some embodiments, when the second platform sends the information of the primary account to the first platform, the second platform may send a re-encryption key to the first platform, where the re-encryption key is used to perform re-encryption conversion on the encrypted information to be shared.

That is, the embodiment adds the re-encryption key based on the above example, that is, after the second platform stores the encrypted information to be shared into the primary account, the information of the primary account and the re-encryption key are both sent to the first platform, so that the first platform obtains the encrypted information to be shared stored in the primary account according to the information of the primary account, and performs re-encryption conversion on the encrypted information to be shared based on the re-encryption key.

In some embodiments, based on the above example, the second platform receives a sharing request sent by the third platform, where the sharing request includes a public key of the third platform, and generates a re-encryption key according to the private key of the second platform and the public key of the third platform.

That is, the re-encryption key generated by the second platform is generated based on the private key of the second platform and the public key of the third platform.

In some embodiments, based on the above example, the re-encryption transformation can be understood as: and encrypting the encrypted information to be shared according to the re-encryption key to obtain re-encrypted and converted information to be shared, wherein the re-encrypted and converted information to be shared is decrypted based on the private key of the third platform.

the encrypted information to be shared is encrypted information based on a public key of a second platform, and the public key of the second platform and a private key of the second platform are key pairs based on bilinear pair forms.

Wherein the ticket information includes information of tickets generated based on online shopping or the like.

Fig. 5 is a schematic diagram according to a fourth embodiment of the present application, as shown in fig. 5, a blockchain-based information sharing method provided in the present embodiment includes:

s401: and the third platform receives the information of the target account sent by the first platform, wherein the target account is one account of a preset blockchain.

For example, the third platform may be a platform for sharing information to be shared, and the information about the target account and the description of the target account may be referred to the above examples, which are not repeated herein.

S402: and the third platform acquires the re-encrypted and converted information to be shared according to the information of the target account, and the re-encrypted and converted information to be shared is obtained by re-encrypting and converting the encrypted information to be shared in the primary account and is transferred to the target account.

S403: and decrypting the re-encrypted and converted information to be shared to obtain the information to be shared.

In this embodiment, it may be understood that after receiving the information of the target account sent by the first platform, the third platform may determine the target account in the blockchain based on the information of the target account, extract the information to be shared after the re-encryption conversion from the target account, and decrypt the extracted information to be shared after the re-encryption conversion to obtain the information to be shared, where in the process that the third platform obtains the information to be shared, the third platform does not need to learn the private key of the second platform in advance, so that leakage of the private key of the second platform can be avoided, and in the related art, the second platform needs to actively initiate authorization to the third platform on line, and the third platform can share the information to be shared, thereby avoiding the drawbacks of time and resource consumption and improving the technical effect of flexibility of information sharing.

In some embodiments, the re-encrypting the transformed information to be shared is encrypting the encrypted information to be shared according to an encryption key, and the obtained information to be shared is decrypted based on the private key of the third platform.

In some embodiments, the encrypted information to be shared is information obtained by encrypting the ticket information based on a public key of the second platform.

Fig. 6 is a schematic diagram of a fifth embodiment of the present application, as shown in fig. 6, where the blockchain-based information sharing platform (corresponding to the platform corresponding to the first embodiment, that is, the first platform) provided in the present embodiment is configured to perform a method corresponding to the first embodiment, for example, to perform a method shown in fig. 2, and includes:

the receiving module 11 is configured to receive information of an initial account sent by a second platform, where the initial account is an account preset in a blockchain, and the initial account is used to store information to be shared after the encryption of the second platform;

the re-encryption module 12 is configured to re-encrypt and convert the encrypted information to be shared according to the information of the primary account;

the transfer module 13 is configured to store the re-encrypted and converted information to be shared to a target account, where the target account is another account of the blockchain;

the first sending module 14 is configured to send information of the target account to the third platform, where the information of the target account is used for sharing information to be shared.

In some embodiments, the re-encrypting module 12 is configured to locate the primary account in the blockchain according to the information of the primary account, obtain encrypted information to be shared from the primary account, and perform re-encryption conversion on the encrypted information to be shared.

In some embodiments, the receiving module 11 is configured to receive a re-encryption key sent by the second platform;

and the re-encryption module 12 is configured to re-encrypt and convert the encrypted information to be shared according to the information of the primary account and the re-encryption key.

In some embodiments, the re-encrypting module 12 is configured to obtain encrypted information to be shared according to the information of the primary account, encrypt the encrypted information to be shared according to the re-encrypting key, and obtain re-encrypted converted information to be shared decrypted based on the private key of the third platform.

Fig. 7 is a schematic diagram of a sixth embodiment of the present application, as shown in fig. 7, where the blockchain-based information sharing platform (corresponding to the platform corresponding to the third embodiment, that is, the second platform) provided in the present embodiment is configured to perform a method corresponding to the third embodiment, for example, to perform a method shown in fig. 4, and includes:

the storage module 21 is configured to store the encrypted information to be shared into a preset initial account of the blockchain;

the second sending module 22 is configured to send the information of the primary account to the first platform, where the information of the primary account is used to re-encrypt and convert the encrypted information to be shared, and store the encrypted information into a target account of the blockchain, where the information of the target account is used to share the information to be shared.

In some embodiments, the second sending module 22 is configured to send a re-encryption key to the first platform, where the re-encryption key is used to re-encrypt and convert the encrypted information to be shared.

As can be seen in conjunction with fig. 7, in some embodiments, the platform further comprises:

A first receiving module 23, configured to receive a sharing request sent by a third platform, where the sharing request includes a public key of the third platform;

a generating module 24, configured to generate the re-encryption key according to the private key of the second platform and the public key of the third platform.

Fig. 8 is a schematic diagram of a seventh embodiment of the present application, as shown in fig. 8, where the blockchain-based information sharing platform (corresponding to the platform corresponding to the fourth embodiment, that is, the third platform) provided in the present embodiment is configured to perform a method corresponding to the fourth embodiment, for example, to perform the method shown in fig. 5, and includes:

The second receiving module 31 is configured to receive information of a target account sent by the first platform, where the target account is an account of a preset blockchain;

the obtaining module 32 is configured to obtain, according to the information of the target account, the re-encrypted and converted information to be shared, where the re-encrypted and converted information to be shared is obtained by re-encrypting and converting the encrypted information to be shared in the primary account, and then the encrypted information to be shared is transferred to the target account;

and the decryption module 33 is configured to decrypt the re-encrypted and converted information to be shared to obtain the information to be shared.

According to another aspect of the embodiments of the present application, there is further provided a blockchain-based information sharing system, including: the platform according to the fifth embodiment (i.e., the first platform), the platform according to the sixth embodiment (i.e., the second platform), and the platform according to the seventh embodiment (i.e., the third platform).

That is, the present embodiment provides a method including: the intermediate platform for executing the information to be shared according to the first embodiment, the provider platform for executing the information to be shared according to the third embodiment, and the sharing platform for executing the information to be shared according to the fourth embodiment.

Fig. 9 is a schematic diagram according to an eighth embodiment of the present application, and fig. 9 is a block diagram of an electronic device for implementing the blockchain-based information sharing method of the present embodiment, such as the method for implementing any of the second to fifth embodiments.

Wherein the electronic device is intended to represent various forms of digital computers, such as laptops, desktops, workstations, personal digital assistants, servers, blade servers, mainframes, and other appropriate computers. The electronic device may also represent various forms of mobile devices, such as personal digital processing, cellular telephones, smartphones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions, are meant to be exemplary only, and are not meant to limit implementations of the application described and/or claimed herein.

As shown in fig. 9, the electronic device includes: one or more processors 101, memory 102, and interfaces for connecting the components, including high-speed interfaces and low-speed interfaces. The various components are interconnected using different buses and may be mounted on a common motherboard or in other manners as desired. The processor may process instructions executing within the electronic device, including instructions stored in or on memory to display graphical information of the GUI on an external input/output device, such as a display device coupled to the interface. In other embodiments, multiple processors and/or multiple buses may be used, if desired, along with multiple memories and multiple memories. Also, multiple electronic devices may be connected, each providing a portion of the necessary operations (e.g., as a server array, a set of blade servers, or a multiprocessor system). In fig. 9, a processor 101 is taken as an example.

Memory 102 is a non-transitory computer-readable storage medium provided herein. Wherein the memory stores instructions executable by the at least one processor to cause the at least one processor to perform the blockchain-based information sharing methods provided herein. The non-transitory computer readable storage medium of the present application stores computer instructions for causing a computer to perform the blockchain-based information sharing method provided herein.

Memory 102 is used as a non-transitory computer readable storage medium to store non-transitory software programs, non-transitory computer executable programs, and modules. The processor 101 executes various functional applications of the server and data processing by running non-transitory software programs, instructions, and modules stored in the memory 102, i.e., implementing the blockchain-based information sharing method in the above-described method embodiments.

The memory 102 may include a storage program area that may store an operating system, at least one application program required for functions, and a storage data area; the storage data area may store data created according to the use of the electronic device, etc. In addition, the memory 102 may include high-speed random access memory, and may also include non-transitory memory, such as at least one magnetic disk storage device, flash memory device, or other non-transitory solid-state storage device. In some embodiments, memory 102 may optionally include memory located remotely from processor 101, which may be connected to the electronic device via a network. Examples of such networks include, but are not limited to, the internet, intranets, local area networks, mobile communication networks, and combinations thereof.

The electronic device may further include: an input device 103 and an output device 104. The processor 101, memory 102, input device 103, and output device 104 may be connected by a bus or otherwise, for example in fig. 9.

The input device 103 may receive input numeric or character information and generate key signal inputs related to user settings and function control of the electronic device, such as a touch screen, keypad, mouse, trackpad, touchpad, pointer stick, one or more mouse buttons, trackball, joystick, and like input devices. The output device 104 may include a display apparatus, auxiliary lighting devices (e.g., LEDs), haptic feedback devices (e.g., vibration motors), and the like. The display device may include, but is not limited to, a Liquid Crystal Display (LCD), a Light Emitting Diode (LED) display, and a plasma display. In some implementations, the display device may be a touch screen.

Various implementations of the systems and techniques described here can be realized in digital electronic circuitry, integrated circuitry, application specific ASIC (application specific integrated circuit), computer hardware, firmware, software, and/or combinations thereof. These various embodiments may include: implemented in one or more computer programs, the one or more computer programs may be executed and/or interpreted on a programmable system including at least one programmable processor, which may be a special purpose or general-purpose programmable processor, that may receive data and instructions from, and transmit data and instructions to, a storage system, at least one input device, and at least one output device.

These computing programs (also referred to as programs, software applications, or code) include machine instructions for a programmable processor, and may be implemented in a high-level procedural and/or object-oriented programming language, and/or in assembly/machine language. As used herein, the terms "machine-readable medium" and "computer-readable medium" refer to any computer program product, apparatus, and/or device (e.g., magnetic discs, optical disks, memory, programmable Logic Devices (PLDs)) used to provide machine instructions and/or data to a programmable processor, including a machine-readable medium that receives machine instructions as a machine-readable signal. The term "machine-readable signal" refers to any signal used to provide machine instructions and/or data to a programmable processor.

To provide for interaction with a user, the systems and techniques described here can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to a user; and a keyboard and pointing device (e.g., a mouse or trackball) by which a user can provide input to the computer. Other kinds of devices may also be used to provide for interaction with a user; for example, feedback provided to the user may be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user may be received in any form, including acoustic input, speech input, or tactile input.

The systems and techniques described here can be implemented in a computing system that includes a background component (e.g., as a data server), or that includes a middleware component (e.g., an application server), or that includes a front-end component (e.g., a user computer having a graphical user interface or a web browser through which a user can interact with an implementation of the systems and techniques described here), or any combination of such background, middleware, or front-end components. The components of the system can be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: local Area Networks (LANs), wide Area Networks (WANs), and the internet.

The computer system may include a client and a server. The client and server are typically remote from each other and typically interact through a communication network. The relationship of client and server arises by virtue of computer programs running on the respective computers and having a client-server relationship to each other.

Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any adaptations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It is to be understood that the present disclosure is not limited to the precise arrangements and instrumentalities shown in the drawings, and that various modifications and changes may be effected without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A blockchain-based information sharing method applied to a first platform, the method comprising:

transmitting the information of the target account to a third platform, wherein the information of the target account is used for sharing information to be shared;

and carrying out re-encryption conversion on the encrypted information to be shared according to the information of the primary account, wherein the re-encryption conversion comprises the following steps:

acquiring encrypted information to be shared from the primary account;

2. The method of claim 1, wherein the method further comprises:

receiving a re-encryption key sent by the second platform;

3. The method of claim 2, wherein the re-encryption key is generated based on a private key of the second platform and a public key of the third platform.

4. The method of claim 3, wherein the re-encrypting the encrypted information to be shared according to the information of the primary account and the re-encrypting key comprises:

5. The method of claim 4, wherein,

the public key of the third platform and the private key of the third platform are key pairs based on bilinear pair forms;

6. The method of any of claims 1 to 5, wherein the encrypted information to be shared is information obtained by encrypting ticket information based on a public key of the second platform.

7. A blockchain-based information sharing method applied to a second platform, the method comprising:

the information of the primary account is sent to a first platform, the information of the primary account is used for carrying out re-encryption conversion on the encrypted information to be shared, and the information is stored in a target account of the blockchain, wherein the information of the target account is used for sharing the information to be shared;

and the information of the primary account is used for positioning the primary account in the blockchain and acquiring encrypted information to be shared from the primary account.

8. The method of claim 7, wherein the method further comprises:

9. The method of claim 8, wherein the method further comprises:

10. The method of claim 9, wherein the re-encryption of the encrypted information to be shared comprises: and encrypting the encrypted information to be shared according to the re-encryption key to obtain re-encrypted and converted information to be shared which is decrypted based on the private key of the third platform.

11. The method of claim 10, wherein the public key of the third platform and the private key of the third platform are a key pair based on a bilinear pair form;

12. The method according to any one of claims 7 to 11, wherein the encrypted information to be shared is information obtained by encrypting ticket information based on a public key of the second platform.

13. A blockchain-based information sharing method applied to a third platform, the method comprising:

the method comprises the steps of obtaining re-encrypted and converted information to be shared according to information of a target account, positioning an initial account according to the information of the initial account, obtaining encrypted information to be shared from the initial account, carrying out re-encryption and conversion on the encrypted information to be shared, and transferring the encrypted information to the target account; the information of the initial account is received by the first platform from the second platform, and the initial account is preset in one account of a blockchain and is used for storing information to be shared after the encryption of the second platform;

14. The method of claim 13, wherein the re-encrypting the information to be converted is generated by re-encrypting the encrypted information to be shared based on a re-encryption key.

15. The method of claim 14, wherein the re-encryption key is generated based on a private key of a second platform and a public key of the third platform.

16. The method of claim 15, wherein the re-encrypting the transformed information to be shared is encrypting the encrypted information to be shared according to the re-encryption key, and obtaining the information to be shared decrypted based on the private key of the third platform.

17. The method of claim 16, wherein,

18. The method of any of claims 13 to 17, wherein the encrypted information to be shared is information obtained by encrypting ticket information based on a public key of the second platform.

19. A blockchain-based information sharing platform, the platform comprising:

the first sending module is used for sending the information of the target account to a third platform, wherein the information of the target account is used for sharing information to be shared;

the re-encryption module is specifically configured to locate the primary account in the blockchain according to the information of the primary account, obtain encrypted information to be shared from the primary account, and perform re-encryption conversion on the encrypted information to be shared.

20. A blockchain-based information sharing platform, the platform comprising:

the second sending module is used for sending the information of the primary account to the first platform, wherein the information of the primary account is used for carrying out re-encryption conversion on the encrypted information to be shared and storing the information into a target account of the blockchain, and the information of the target account is used for sharing the information to be shared;

21. A blockchain-based information sharing platform, the platform comprising:

the acquisition module is used for acquiring re-encrypted and converted information to be shared according to the information of the target account, positioning the initial account according to the information of the initial account, acquiring encrypted information to be shared from the initial account, and re-encrypting and converting the encrypted information to be shared to generate and transfer the encrypted information to the target account; the information of the initial account is received by the first platform from the second platform, and the initial account is preset in one account of a blockchain and is used for storing information to be shared after the encryption of the second platform;

22. A blockchain-based information sharing system, comprising:

the platform of claim 19;

the platform of claim 20;

the platform of claim 21.

23. An electronic device, comprising: a memory, a processor;

a memory; a memory for storing the processor-executable instructions;

wherein the processor is configured to: performing the method of any one of claims 1 to 6; or,

performing the method of any one of claims 7 to 12; or,

performing the method of any one of claims 13 to 18.

24. A computer readable storage medium having stored therein computer executable instructions which when executed by a processor are for implementing the method of any one of claims 1 to 6; or,

the computer-executable instructions, when executed by a processor, for implementing the method of any of claims 7 to 12; or,

the computer-executable instructions, when executed by a processor, are for implementing the method of any of claims 13 to 18.