The content of the invention
It is an object of the invention to provide a kind of permission methods of control and system based on the transaction of block chain, it is intended to block
The permission of issued transaction control effectively in chain network.
To achieve the above object, the present invention provides a kind of permission method of control based on the transaction of block chain, described to be based on area
The permission method of control of block chain transaction includes:
S1 is each node structure of block chain network for the permission processing system of encryption information issue and encryption and decryption processing
System, and dispose in the block chain network to transfer the intelligent contract of encryption and decryption information;
S2 a, if publisher has encrypted information to be transacted that mandate, publisher is decrypted at least one authorized party
Authorization process system on corresponding publisher node obtains public encryption/decryption parameter corresponding with each authorized party, and by with mandate
The corresponding security parameter in side encrypts the secret key of the information to be transacted, is sent out using the intelligent contract in the block chain network
Public encryption/decryption parameter and security parameter described in cloth;
S3, the authorization process system of the publisher node is by the information to be transacted by intelligent contract to the block chain
Each node issue of network;
S4, the corresponding authorization node of the authorized party are described after the information to be transacted is received by intelligent contract
The authorization process system of authorization node is using deciphering parameter corresponding with the security parameter to the secret key of the information to be transacted
It is decrypted, the information to be transacted is decrypted based on the secret key after decryption and the public encryption/decryption parameter, waits to hand over by described
Mandate is decrypted to the authorization node in easy information.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, is further included after the step S4:
S5, after the corresponding feedback information of information to be transacted after authorization node generation is decrypted, the authorization node
Authorization process system be based on the cryptographic protocol and secret key pair described in feedback information be encrypted, and utilize the intelligent contract
Each node of encrypted feedback information to the block chain network is broadcasted;
S6, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S7, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Trade transactions corresponding to the authorization node transaction information to be transacted are performed absolutely.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, is further included after the step S4:
S8, after the corresponding feedback information of information to be transacted after authorization node generation is decrypted, the authorization node
Public key of the authorization process system based on the cryptographic protocol and the publisher node feedback information is encrypted, and profit
Encrypted feedback information is broadcasted to each node of block chain network with intelligent contract;
S9, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S10, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Trade transactions corresponding to the authorization node transaction information to be transacted are performed absolutely.
Preferably, further included after the step S4:
If the intelligent contract of no authorization node sends to publisher node for the encrypted information to be transacted and carries identity
The decryption and authorization request of authentication information, then the authorization process system of the publisher node is used based on the authentication information
Family authentication;
If authentication fails, decryption and authorization described in the publisher node refusal respond is asked;
If authentication success, the publisher node obtain the handling result that user is directed to decryption and authorization request;
If the handling result is asks by the decryption and authorization, the authorization process system of the publisher node utilizes
The corresponding security parameter of the no authorization node encrypts the secret key, and the intelligence that encrypted secret key is passed through to publisher node is closed
Each node of the block chain network is about distributed to, the letter to be transacted is decrypted for the data permission system of the no authorization node
Breath, mandate is decrypted by the information to be transacted to the no authorization node;
If the handling result is refuses the decryption and authorization request, the publisher node refusal is waited to hand over for encrypted
Mandate is decrypted to the no authorization node in easy information.
To achieve the above object, it is described to be based on the present invention also provides a kind of permission control system based on the transaction of block chain
The permission control system of block chain transaction includes:
Module is built, for what is handled for each node of block chain network structure for encryption information issue and encryption and decryption
Authorization process system, and dispose in the block chain network to transfer the intelligent contract of encryption and decryption information;
First release module, if having encrypted information to be transacted that at least one authorized party is decrypted for a publisher
It authorizes, then the authorization process system on the corresponding publisher node of publisher obtains public encryption and decryption ginseng corresponding with each authorized party
Number, and by the secret key of security parameter corresponding with the authorized party encryption information to be transacted, using the intelligent contract in institute
It states and the public encryption/decryption parameter and security parameter is issued in block chain network;
The information to be transacted is passed through intelligent conjunction by the second release module for the authorization process system of the publisher node
About issued to each node of the block chain network;
Deciphering module is receiving the letter to be transacted for the corresponding authorization node of the authorized party by intelligent contract
After breath, the authorization process system of the authorization node utilizes deciphering parameter corresponding with the security parameter to the letter to be transacted
The secret key of breath is decrypted, and the information to be transacted is decrypted based on the secret key after decryption and the public encryption/decryption parameter, will
Mandate is decrypted to the authorization node in the information to be transacted.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, the permission control system based on the transaction of block chain
System further includes:
First encrypting module, for the corresponding feedback information of information to be transacted after authorization node generation decryption
Afterwards, the authorization process system of the authorization node is encrypted based on feedback information described in the cryptographic protocol and secret key pair, and
Each node of encrypted feedback information to the block chain network is broadcasted using the intelligent contract;
First transaction modules are the corresponding confirmation Transaction Information of the information to be transacted for the feedback information, then institute
It states publisher node and performs trade transactions corresponding to the authorization node transaction information to be transacted;
First refusal module, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
Preferably, the public encryption/decryption parameter includes cryptographic protocol, the permission control system based on the transaction of block chain
System further includes:
Second encrypting module, for the corresponding feedback information of information to be transacted after authorization node generation decryption
Afterwards, public key of the authorization process system of the authorization node based on the cryptographic protocol and the publisher node believes the feedback
Breath is encrypted, and is broadcasted encrypted feedback information to each node of block chain network using intelligent contract;
Second transaction modules, if being the corresponding confirmation Transaction Information of the information to be transacted for the feedback information,
The publisher node performs trade transactions corresponding to the authorization node transaction information to be transacted;
Second refusal module, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
Preferably, the permission control system based on the transaction of block chain further includes:
Authentication module, if being directed to the encrypted information to be transacted to issue for the intelligent contract without authorization node
Node sends the decryption and authorization request for carrying authentication information, then the authorization process system of the publisher node is based on the body
Part authentication information carries out authenticating user identification;
3rd refusal module, if failing for authentication, decryption and authorization described in the publisher node refusal respond please
It asks;
Acquisition module, if for authentication success, the publisher node obtains user please for the decryption and authorization
The handling result asked;
Authorization module, if for the handling result to be asked by the decryption and authorization, the power of the publisher node
Processing system is limited using the no authorization node corresponding security parameter encryption secret key, and encrypted secret key is passed through into hair
The intelligent contract of cloth node is distributed to each node of the block chain network, for the data permission system solution of the no authorization node
Mandate is decrypted to the no authorization node in the information to be transacted by the close information to be transacted;
Refuse authorization module, if being asked for the handling result to refuse the decryption and authorization, the publisher node
Mandate is decrypted to the no authorization node for encrypted information to be transacted in refusal.
The beneficial effects of the invention are as follows:The present invention builds authorization process system and deployment in each node of block chain network
Intelligent contract carries out information sharing, if a hair by the authorization process system processing authority control of each node and by intelligent contract
Cloth side has encrypted information to be transacted that mandate is decrypted at least one authorized party, then publisher node is corresponding using authorized party
Security parameter encrypts the secret key of information to be transacted, then issues public encryption/decryption parameter and security parameter by intelligent contract, awards
The secret key that power node treats Transaction Information using deciphering parameter corresponding with security parameter is decrypted, and may finally pass through secret key
Encryption/decryption parameter decrypts information to be transacted together, realizes and carries out information to be transacted from publisher node at least one authorization node
Decryption and authorization, authorization node can obtain reading information to be transacted and can perform the permission of subsequent transaction, in addition to authorization node
Other nodes there is no relevant permission, can control effectively to the permission of issued transaction in block chain network, improve system
System reliability.
Specific embodiment
The principle and features of the present invention will be described below with reference to the accompanying drawings, and the given examples are served only to explain the present invention, and
It is non-to be used to limit the scope of the present invention.
As shown in Figure 1, Fig. 1 is the flow signal the present invention is based on one embodiment of permission method of control of block chain transaction
Figure should be comprised the following steps based on the permission method of control of block chain transaction:
Step S1 is each node structure of block chain network at the permission of encryption information issue and encryption and decryption processing
Reason system, and dispose in the block chain network to transfer the intelligent contract of encryption and decryption information;
In block chain network, a node corresponds to one or more intelligent contract, when a parameter transaction passes to area
When on the node of block chain, this parameter transaction can be recorded in the corresponding transaction journal of the node and be transmitted to simultaneously and the transaction
The corresponding intelligent contract of parameter goes to run, by the code on the corresponding intelligent contract of the parameter transaction to itself number of intelligent contract
According to being updated.
In the present embodiment, each node in block chain network builds what is handled for encryption information issue and encryption and decryption
Authorization process system, each authorization process system correspondence is independently of on each node, mainly for the treatment of matters are authorized, and in area
For transferring the intelligent contract of encryption and decryption information, intelligent contract is mainly used to share letter in block chain network the deployment of block chain network
Breath.
Step S2 if a publisher has encrypted information to be transacted that mandate is decrypted at least one authorized party, is sent out
Authorization process system on the corresponding publisher node in cloth side obtains public encryption/decryption parameter corresponding with each authorized party, and by with
The corresponding security parameter of authorized party encrypts the secret key of the information to be transacted, using the intelligent contract in the block chain network
It is upper to issue the public encryption/decryption parameter and security parameter;
In the present embodiment, information to be transacted is encrypted information, and corresponding decryption protocol and secret key is needed to be decrypted.
User can authorize relevant issues by the corresponding publisher node processing of publisher, and there are one the corresponding authorization nodes of authorized party or more
It is a.Authorization process system on the corresponding publisher node of publisher obtains public encryption/decryption parameter corresponding with each authorized party, example
Such as, public encryption/decryption parameter can be stored in a database, the authorization process system on publisher node by it is each it is public plus solution
Close parameter corresponds to the authorization node of an authorized party.In addition, the corresponding security parameter of each authorization node, the security parameter with it is right
The deciphering parameter answered is a pair of, and each node in block chain network can have corresponding security parameter and deciphering parameter, is protected
Close parameter is disclosed part, and deciphering parameter is private part.The security parameter is, for example, the public key of authorization node, each
Public key and private key in node are a key pair, wherein, public key is disclosed part, and private key is then private part.
If publisher has encrypted information to be transacted that mandate is decrypted at least one authorized party, due to security parameter
It is disclosed part, therefore the authorization process system of publisher node can get the security parameter of each authorization node, then
The secret key needed using the security parameter encryption information to be transacted of each authorization node in decryption.Public encryption/decryption parameter includes
Analysis protocol, decryption protocol for example can be DES decryption protocols, AES decryption protocols, RSA decryption protocols etc..It is awarded for utilizing
The encrypted secret key of security parameter of node is weighed, only has the deciphering parameter in the authorization node of the security parameter that could be solved
It is close, and its encrypted secret key cannot be decrypted in other nodes, in such manner, it is possible to ensure that only authorization node could obtain
To secret key.
In the present embodiment, from the intelligent contract of authorization node by public encryption/decryption parameter and security parameter to block chain network
The issue of each node, it is public that all nodes in step 1 as shown in Figure 2, i.e. the block chain network can receive this
Encryption/decryption parameter and security parameter, but only each authorization node could be decrypted to obtain secret key using corresponding deciphering parameter,
Other nodes can not be decrypted due to not corresponding deciphering parameter.
Preferably, the intelligent contract of authorization node issues out public encryption/decryption parameter and security parameter by peer-to-peer network
It goes, the user of each authorization node is then notified to read public encryption/decryption parameter and security parameter.
Step S3, the authorization process system of the publisher node is by the information to be transacted by intelligent contract to the area
Each node issue of block chain network;
Step S4, the corresponding authorization node of the authorized party after the information to be transacted is received by intelligent contract,
The authorization process system of the authorization node is using deciphering parameter corresponding with the security parameter to the information to be transacted
Secret key is decrypted, and the information to be transacted is decrypted based on the secret key after decryption and the public encryption/decryption parameter, by described in
Mandate is decrypted to the authorization node in information to be transacted.
Refering to step 2 shown in Fig. 2,3 and 4, information to be transacted is passed through intelligent conjunction by the authorization process system of publisher node
It is about issued to each node of block chain network, each node can receive the encrypted information to be transacted.
In the present embodiment, if there is authorization node has read the public encryption/decryption parameter of publisher node issue and secrecy ginseng
Number, since authorization node has the corresponding deciphering parameter of security parameter, the authorization process system of authorization node can be by this
Secret key is decrypted in the corresponding deciphering parameter of security parameter.In addition, the authorization process system of authorization node is encrypted in reading
After information to be transacted, it can utilize the secret key after decryption and public encryption/decryption parameter that the information to be transacted of reading is decrypted,
Specifically, the information to be transacted of reading is decrypted using the decryption protocol in secret key and public encryption/decryption parameter so that award
Power node can be decrypted after information to be transacted, realize information to be transacted from publisher node at least one authorization node
Mandate is decrypted, that is to say, that only authorization node just has permission the information to be transacted for knowing publisher node issue, Jin Erneng
Enough handle the relevant affairs of information to be transacted.
Compared with prior art, the present embodiment builds authorization process system and deployment intelligence in each node of block chain network
Energy contract carries out information sharing, if an issue by the authorization process system processing authority control of each node and by intelligent contract
Side has encrypted information to be transacted that mandate is decrypted at least one authorized party, then publisher node utilizes the corresponding guarantor of authorized party
Close parameter encrypts the secret key of information to be transacted, then issues public encryption/decryption parameter and security parameter by intelligent contract, authorizes
The secret key that node treats Transaction Information using deciphering parameter corresponding with security parameter is decrypted, may finally by secret key with
Encryption/decryption parameter decrypts information to be transacted altogether, realizes and solves information to be transacted from publisher node at least one authorization node
Close mandate, authorization node can obtain reading information to be transacted and can perform the permission of subsequent transaction, in addition to authorization node
Other nodes do not have relevant permission, can control effectively to the permission of issued transaction in block chain network, improve system
Reliability.
In a preferred embodiment, as shown in figure 3, on the basis of the embodiment of above-mentioned Fig. 1, public encryption/decryption parameter
Including cryptographic protocol, further included after above-mentioned steps S4:
S5, after the corresponding feedback information of information to be transacted after authorization node generation is decrypted, the authorization node
Authorization process system be based on the cryptographic protocol and secret key pair described in feedback information be encrypted, and utilize the intelligent contract
Each node of encrypted feedback information to the block chain network is broadcasted;
S6, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S7, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Trade transactions corresponding to the authorization node transaction information to be transacted are performed absolutely.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (such as reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node generates
Corresponding feedback information.In order to which the feedback information is only disclosed to publisher node and each authorization node, so as to publisher node and
Other each authorization nodes can know which node possesses the associated rights of information to be transacted, the permission processing of the authorization node
System is encrypted based on the cryptographic protocol in public encryption/decryption parameter and secret key pair feedback information, cryptographic protocol be, for example, with it is upper
The corresponding des encryption agreement of DES decryption protocols, AES decryption protocols, RSA decryption protocols stated, AES encryption agreement, rsa encryption
Agreement etc..Then encrypted feedback information is broadcasted to each node of block chain network using intelligent contract, for
Publisher node and other each authorization nodes read and decrypt feedback information.If feedback information corresponds to really for information to be transacted
Recognize Transaction Information, then publisher node performs trade transactions corresponding with authorization node transaction information to be transacted;If feedback information
For the corresponding refusal Transaction Information of information to be transacted, then the execution of publisher node refusal is corresponding with authorization node transaction information to be transacted
Trade transactions.
The present embodiment encrypts feedback information in the management and control of permission, using secret key and cryptographic protocol so that only issue section
Point and other each authorization nodes can know which node possesses the associated rights of information to be transacted, can be to block chain network
The permission of middle issued transaction further carries out effective management and control.
In a preferred embodiment, as shown in figure 4, on the basis of the embodiment of above-mentioned Fig. 1, public encryption/decryption parameter
Including cryptographic protocol, further included after above-mentioned steps S4:
S8, after the corresponding feedback information of information to be transacted after authorization node generation is decrypted, the authorization node
Public key of the authorization process system based on the cryptographic protocol and the publisher node feedback information is encrypted, and profit
Encrypted feedback information is broadcasted to each node of block chain network with intelligent contract;
S9, if the feedback information is the corresponding confirmation Transaction Information of the information to be transacted, the publisher node is held
Row is to the corresponding trade transactions of the authorization node transaction information to be transacted;
S10, if the feedback information is the corresponding refusal Transaction Information of the information to be transacted, the publisher node is refused
Trade transactions corresponding to the authorization node transaction information to be transacted are performed absolutely.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (such as reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node generates
Corresponding feedback information.In order to which the feedback information is only disclosed to publisher node, without disclosing authorization node and other nodes,
So that publisher node can know which node possesses the associated rights of information to be transacted, the authorization process system of the authorization node
Feedback information is encrypted based on the cryptographic protocol in public encryption/decryption parameter and the public key of publisher node, cryptographic protocol is for example
Be des encryption agreement corresponding with above-mentioned DES decryption protocols, AES decryption protocols, RSA decryption protocols, AES encryption agreement,
Rsa encryption agreement etc..Then encrypted feedback information is carried out to each node of block chain network using intelligent contract wide
It broadcasts, so that publisher node is read and utilizes the corresponding private key of public key of publisher node and decryption protocol decryption feedback information.If
Feedback information is the corresponding confirmation Transaction Information of information to be transacted, then publisher node performs and authorization node transaction information to be transacted
Corresponding trade transactions;If feedback information is the corresponding refusal Transaction Information of information to be transacted, publisher node refusal performs
Trade transactions corresponding with authorization node transaction information to be transacted.
The present embodiment encrypts feedback information in the management and control of permission, using the public key and cryptographic protocol of publisher node so that
Only publisher node can know which node possesses the associated rights of information to be transacted, can be to office in block chain network
The permission of reason further carries out effective management and control.
In a preferred embodiment, on the basis of the embodiment of above-mentioned Fig. 1, further included after above-mentioned steps S4:
If the intelligent contract of no authorization node sends to publisher node for the encrypted information to be transacted and carries identity
The decryption and authorization request of authentication information, then the authorization process system of the publisher node is used based on the authentication information
Family authentication;
If authentication fails, decryption and authorization described in the publisher node refusal respond is asked;
If authentication success, the publisher node obtain the handling result that user is directed to decryption and authorization request;
If the handling result is asks by the decryption and authorization, the authorization process system of the publisher node utilizes
The corresponding security parameter of the no authorization node encrypts the secret key, and the intelligence that encrypted secret key is passed through to publisher node is closed
Each node of the block chain network is about distributed to, the letter to be transacted is decrypted for the data permission system of the no authorization node
Breath, mandate is decrypted by the information to be transacted to the no authorization node;
If the handling result is refuses the decryption and authorization request, the publisher node refusal is waited to hand over for encrypted
Mandate is decrypted to the no authorization node in easy information.
In the present embodiment, no authorization node is the node in addition to publisher node and authorization node, as without decryption and authorization
Mandate relief is decrypted in order to read information to be transacted to no authorization node in node, and the intelligent contract of no authorization node is directed to
The encrypted information generation to be transacted carries the decryption and authorization request of authentication information, and publisher node in acquisition, award by the decryption
Authentication is carried out after power request, authentication information is, for example, digital certificate etc., and the authorization process system of publisher node is based on
The authentication information carries out authentication to no authorization node, that is, analysing whether can be to be transacted without authorization node reading to this
Mandate is decrypted in information.The authorization process system of publisher node can be stored with other nodes and the identity of corresponding user is recognized
Information is demonstrate,proved, specifically, if one of authentication information of authorization process system storage of publisher node is awarded with the nothing
It weighs node and corresponding user's ID authentication information is identical, then authentication success, then decryption and authorization is asked by publisher
It is handled, that is, grants this is decrypted mandate or do not granted without authorization node reading information to be transacted and this is saved without mandate
Point reads information to be transacted and mandate is decrypted, to obtain the handling result of corresponding decryption and authorization.
If for handling result to be asked by decryption and authorization, the authorization process system of publisher node utilizes no authorization node
Corresponding security parameter encrypts secret key, and encrypted secret key is distributed to the block link network by the intelligent contract of publisher node
Each node of network decrypts the information to be transacted for the data permission system of no authorization node, realizes the permission of publisher node
Mandate is decrypted to no authorization node for encrypted information to be transacted in processing system;If handling result is awarded for refusal decryption
Power request, then the authorization process system refusal of publisher node, which is decrypted no authorization node for encrypted information to be transacted, awards
Power.
No authorization node can be decrypted the authorization process system base of the relief of mandate, i.e. publisher node in the present embodiment
In no authorization node authentication information carry out authentication, and authentication by when obtain publisher to decryption and authorization
Corresponding handling result is asked, if the handling result is asks by decryption and authorization, publisher node is realized to being saved without mandate
Point reads the decryption and authorization of the information to be transacted, that is, realizes the relief of the decryption and authorization to no authorization node, improves block chain power
Limit the flexibility of management and control.
As shown in figure 5, Fig. 5 is that the present invention is based on the structural representations of one embodiment of permission control system of block chain transaction
Figure should be included based on the permission control system of block chain transaction:
Module 101 is built, at for each node of block chain network structure for encryption information issue and encryption and decryption
The authorization process system of reason, and dispose in the block chain network to transfer the intelligent contract of encryption and decryption information;
In block chain network, a node corresponds to one or more intelligent contract, when a parameter transaction passes to area
When on the node of block chain, this parameter transaction can be recorded in the corresponding transaction journal of the node and be transmitted to simultaneously and the transaction
The corresponding intelligent contract of parameter goes to run, by the code on the corresponding intelligent contract of the parameter transaction to itself number of intelligent contract
According to being updated.
In the present embodiment, each node in block chain network builds what is handled for encryption information issue and encryption and decryption
Authorization process system, each authorization process system correspondence is independently of on each node, mainly for the treatment of matters are authorized, and in area
For transferring the intelligent contract of encryption and decryption information, intelligent contract is mainly used to share letter in block chain network the deployment of block chain network
Breath.
First release module 102, if thering is encrypted information to be transacted to carry out at least one authorized party for a publisher
Decryption and authorization, then authorization process system on the corresponding publisher node of publisher obtain public encryption and decryption corresponding with each authorized party
Parameter, and by the secret key of security parameter corresponding with the authorized party encryption information to be transacted, existed using the intelligent contract
The public encryption/decryption parameter and security parameter are issued in the block chain network;
In the present embodiment, information to be transacted is encrypted information, and corresponding decryption protocol and secret key is needed to be decrypted.
User can authorize relevant issues by the corresponding publisher node processing of publisher, and there are one the corresponding authorization nodes of authorized party or more
It is a.Authorization process system on the corresponding publisher node of publisher obtains public encryption/decryption parameter corresponding with each authorized party, example
Such as, public encryption/decryption parameter can be stored in a database, the authorization process system on publisher node by it is each it is public plus solution
Close parameter corresponds to the authorization node of an authorized party.In addition, the corresponding security parameter of each authorization node, the security parameter with it is right
The deciphering parameter answered is a pair of, and each node in block chain network can have corresponding security parameter and deciphering parameter, is protected
Close parameter is disclosed part, and deciphering parameter is private part.The security parameter is, for example, the public key of authorization node, each
Public key and private key in node are a key pair, wherein, public key is disclosed part, and private key is then private part.
If publisher has encrypted information to be transacted that mandate is decrypted at least one authorized party, due to security parameter
It is disclosed part, therefore the authorization process system of publisher node can get the security parameter of each authorization node, then
The secret key needed using the security parameter encryption information to be transacted of each authorization node in decryption.Public encryption/decryption parameter includes
Analysis protocol, decryption protocol for example can be DES decryption protocols, AES decryption protocols, RSA decryption protocols etc..It is awarded for utilizing
The encrypted secret key of security parameter of node is weighed, only has the deciphering parameter in the authorization node of the security parameter that could be solved
It is close, and its encrypted secret key cannot be decrypted in other nodes, in such manner, it is possible to ensure that only authorization node could obtain
To secret key.
In the present embodiment, from the intelligent contract of authorization node by public encryption/decryption parameter and security parameter to block chain network
Each node issue, i.e., all nodes in the block chain network can receive the public encryption/decryption parameter and secrecy join
Number, but only each authorization node could decrypt to obtain secret key using corresponding deciphering parameter, other nodes are not due to having
Corresponding deciphering parameter, therefore can not be decrypted.
Preferably, the intelligent contract of authorization node issues out public encryption/decryption parameter and security parameter by peer-to-peer network
It goes, the user of each authorization node is then notified to read public encryption/decryption parameter and security parameter.
The information to be transacted is passed through intelligence by the second release module 103 for the authorization process system of the publisher node
It can each node issue of the contract to the block chain network;
Deciphering module 104 described is waited to hand over receiving by intelligent contract for the corresponding authorization node of the authorized party
After easy information, the authorization process system of the authorization node is waited to hand over using deciphering parameter corresponding with the security parameter to described
The secret key of easy information is decrypted, and the information to be transacted is decrypted based on the secret key after decryption and the public encryption/decryption parameter,
The information to be transacted is decrypted mandate to the authorization node.
In the present embodiment, the authorization process system of publisher node is by information to be transacted by intelligent contract to block chain network
The issue of each node, each node can receive the encrypted information to be transacted.
In the present embodiment, if there is authorization node has read the public encryption/decryption parameter of publisher node issue and secrecy ginseng
Number, since authorization node has the corresponding deciphering parameter of security parameter, the authorization process system of authorization node can be by this
Secret key is decrypted in the corresponding deciphering parameter of security parameter.In addition, the authorization process system of authorization node is encrypted in reading
After information to be transacted, it can utilize the secret key after decryption and public encryption/decryption parameter that the information to be transacted of reading is decrypted,
Specifically, the information to be transacted of reading is decrypted using the decryption protocol in secret key and public encryption/decryption parameter so that award
Power node can be decrypted after information to be transacted, realize information to be transacted from publisher node at least one authorization node
Mandate is decrypted, that is to say, that only authorization node just has permission the information to be transacted for knowing publisher node issue, Jin Erneng
Enough handle the relevant affairs of information to be transacted.
In a preferred embodiment, it is above-mentioned to be based on block chain as shown in fig. 6, on the basis of the embodiment of above-mentioned Fig. 5
The permission control system of transaction further includes:
First encrypting module 105, for the corresponding feedback letter of information to be transacted after authorization node generation decryption
After breath, the authorization process system of the authorization node is encrypted based on feedback information described in the cryptographic protocol and secret key pair,
And each node of encrypted feedback information to the block chain network is broadcasted using the intelligent contract;
First transaction modules 106 are the corresponding confirmation Transaction Information of the information to be transacted for the feedback information, then
The publisher node performs trade transactions corresponding to the authorization node transaction information to be transacted;
First refusal module 107, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Then publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (such as reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node generates
Corresponding feedback information.In order to which the feedback information is only disclosed to publisher node and each authorization node, so as to publisher node and
Other each authorization nodes can know which node possesses the associated rights of information to be transacted, the permission processing of the authorization node
System is encrypted based on the cryptographic protocol in public encryption/decryption parameter and secret key pair feedback information, cryptographic protocol be, for example, with it is upper
The corresponding des encryption agreement of DES decryption protocols, AES decryption protocols, RSA decryption protocols stated, AES encryption agreement, rsa encryption
Agreement etc..Then encrypted feedback information is broadcasted to each node of block chain network using intelligent contract, for
Publisher node and other each authorization nodes read and decrypt feedback information.If feedback information corresponds to really for information to be transacted
Recognize Transaction Information, then publisher node performs trade transactions corresponding with authorization node transaction information to be transacted;If feedback information
For the corresponding refusal Transaction Information of information to be transacted, then the execution of publisher node refusal is corresponding with authorization node transaction information to be transacted
Trade transactions.
The present embodiment encrypts feedback information in the management and control of permission, using secret key and cryptographic protocol so that only issue section
Point and other each authorization nodes can know which node possesses the associated rights of information to be transacted, can be to block chain network
The permission of middle issued transaction further carries out effective management and control.
In a preferred embodiment, it is above-mentioned to be based on block chain as shown in fig. 7, on the basis of the embodiment of above-mentioned Fig. 5
The permission control system of transaction further includes:
Second encrypting module 108, for the corresponding feedback letter of information to be transacted after authorization node generation decryption
After breath, the authorization process system of the authorization node is based on the public key of the cryptographic protocol and the publisher node to the feedback
Information is encrypted, and is broadcasted encrypted feedback information to each node of block chain network using intelligent contract;
Second transaction modules 109, if being the corresponding confirmation Transaction Information of the information to be transacted for the feedback information,
Then the publisher node performs trade transactions corresponding to the authorization node transaction information to be transacted;
Second refusal module 110, if being the corresponding refusal Transaction Information of the information to be transacted for the feedback information,
Then publisher node refusal performs trade transactions corresponding to the authorization node transaction information to be transacted.
In the present embodiment, after authorization node decrypts information to be transacted, that is, show that authorization node has obtained the letter to be transacted
The associated rights (such as reading power etc.) of breath, and determine whether to be traded with regard to the associated rights, at this moment authorization node generates
Corresponding feedback information.In order to which the feedback information is only disclosed to publisher node, without disclosing authorization node and other nodes,
So that publisher node can know which node possesses the associated rights of information to be transacted, the authorization process system of the authorization node
Feedback information is encrypted based on the cryptographic protocol in public encryption/decryption parameter and the public key of publisher node, cryptographic protocol is for example
Be des encryption agreement corresponding with above-mentioned DES decryption protocols, AES decryption protocols, RSA decryption protocols, AES encryption agreement,
Rsa encryption agreement etc..Then encrypted feedback information is carried out to each node of block chain network using intelligent contract wide
It broadcasts, so that publisher node is read and utilizes the corresponding private key of public key of publisher node and decryption protocol decryption feedback information.If
Feedback information is the corresponding confirmation Transaction Information of information to be transacted, then publisher node performs and authorization node transaction information to be transacted
Corresponding trade transactions;If feedback information is the corresponding refusal Transaction Information of information to be transacted, publisher node refusal performs
Trade transactions corresponding with authorization node transaction information to be transacted.
The present embodiment encrypts feedback information in the management and control of permission, using the public key and cryptographic protocol of publisher node so that
Only publisher node can know which node possesses the associated rights of information to be transacted, can be to office in block chain network
The permission of reason further carries out effective management and control.
In a preferred embodiment, on the basis of the embodiment of above-mentioned Fig. 5, the above-mentioned permission based on the transaction of block chain
Control system further includes:
Authentication module, if being directed to the encrypted information to be transacted to issue for the intelligent contract without authorization node
Node sends the decryption and authorization request for carrying authentication information, then the authorization process system of the publisher node is based on the body
Part authentication information carries out authenticating user identification;
3rd refusal module, if failing for authentication, decryption and authorization described in the publisher node refusal respond please
It asks;
Acquisition module, if for authentication success, the publisher node obtains user please for the decryption and authorization
The handling result asked;
Authorization module, if for the handling result to be asked by the decryption and authorization, the power of the publisher node
Processing system is limited using the no authorization node corresponding security parameter encryption secret key, and encrypted secret key is passed through into hair
The intelligent contract of cloth node is distributed to each node of the block chain network, for the data permission system solution of the no authorization node
Mandate is decrypted to the no authorization node in the information to be transacted by the close information to be transacted;
Refuse authorization module, if being asked for the handling result to refuse the decryption and authorization, the publisher node
Mandate is decrypted to the no authorization node for encrypted information to be transacted in refusal.
In the present embodiment, no authorization node is the node in addition to publisher node and authorization node, as without decryption and authorization
Mandate relief is decrypted in order to read information to be transacted to no authorization node in node, and the intelligent contract of no authorization node is directed to
The encrypted information generation to be transacted carries the decryption and authorization request of authentication information, and publisher node in acquisition, award by the decryption
Authentication is carried out after power request, authentication information is, for example, digital certificate etc., and the authorization process system of publisher node is based on
The authentication information carries out authentication to no authorization node, that is, analysing whether can be to be transacted without authorization node reading to this
Mandate is decrypted in information.The authorization process system of publisher node can be stored with other nodes and the identity of corresponding user is recognized
Information is demonstrate,proved, specifically, if one of authentication information of authorization process system storage of publisher node is awarded with the nothing
It weighs node and corresponding user's ID authentication information is identical, then authentication success, then decryption and authorization is asked by publisher
It is handled, that is, grants this is decrypted mandate or do not granted without authorization node reading information to be transacted and this is saved without mandate
Point reads information to be transacted and mandate is decrypted, to obtain the handling result of corresponding decryption and authorization.
If for handling result to be asked by decryption and authorization, the authorization process system of publisher node utilizes no authorization node
Corresponding security parameter encrypts secret key, and encrypted secret key is distributed to the block link network by the intelligent contract of publisher node
Each node of network decrypts the information to be transacted for the data permission system of no authorization node, realizes the permission of publisher node
Mandate is decrypted to no authorization node for encrypted information to be transacted in processing system;If handling result is awarded for refusal decryption
Power request, then the authorization process system refusal of publisher node, which is decrypted no authorization node for encrypted information to be transacted, awards
Power.
No authorization node can be decrypted the authorization process system base of the relief of mandate, i.e. publisher node in the present embodiment
In no authorization node authentication information carry out authentication, and authentication by when obtain publisher to decryption and authorization
Corresponding handling result is asked, if the handling result is asks by decryption and authorization, publisher node is realized to being saved without mandate
Point reads the decryption and authorization of the information to be transacted, that is, realizes the relief of the decryption and authorization to no authorization node, improves block chain power
Limit the flexibility of management and control.
The foregoing is merely presently preferred embodiments of the present invention, is not intended to limit the invention, it is all the present invention spirit and
Within principle, any modifications, equivalent replacements and improvements are made should all be included in the protection scope of the present invention.