CN113553603A - Method, device, equipment and storage medium for managing and serving digital object resources - Google Patents
Method, device, equipment and storage medium for managing and serving digital object resources Download PDFInfo
- Publication number
- CN113553603A CN113553603A CN202110661692.4A CN202110661692A CN113553603A CN 113553603 A CN113553603 A CN 113553603A CN 202110661692 A CN202110661692 A CN 202110661692A CN 113553603 A CN113553603 A CN 113553603A
- Authority
- CN
- China
- Prior art keywords
- block chain
- block
- operation request
- request
- digital object
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/604—Tools and structures for managing or administering access control systems
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/45—Structures or tools for the administration of authentication
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Health & Medical Sciences (AREA)
- Bioethics (AREA)
- Health & Medical Sciences (AREA)
- Automation & Control Theory (AREA)
- Storage Device Security (AREA)
Abstract
The embodiment of the application relates to the technical field of computers, in particular to a method, a device, equipment and a storage medium for managing and serving digital object resources, aiming at improving the safety of DO operation and enhancing the traceability of the DO operation. The method comprises the following steps: the authorization block chain network authorizes the client according to authorization information sent by a resource owner; an operation block chain node on an operation block chain network responds to an operation request sent by the authorized client, and verifies the operation request through an intelligent contract to obtain a verification result; the operating block chain node packs and stores the successfully verified operating request and the verification result corresponding to the successfully verified operating request in a preset time period into a new block to obtain a new operating request block; and the operation block link point sends the operation request block to a digital object source database, and forwards a processing result of the digital object source database for processing the operation request block to the client.
Description
Technical Field
The embodiment of the application relates to the technical field of computers, in particular to a method, a device, equipment and a storage medium for managing and serving digital object resources.
Background
DO (digital object) is different from a traditional data file, the DO comprises metadata and specific data, the traditional data file is searched through an address (such as url), the DO can be directly searched through file contents, the management mode is more flexible, the metadata of DO resources are stored in a DO warehouse, and the DO warehouse uniformly manages and calls the metadata of the resources stored in the DO warehouse. And the source data corresponding to the DO resource is stored in other databases or file systems, and the source data address can be indexed by the metadata of the DO resource. In the prior art, the subject attribute of a user is stored through a block chain, the subject attribute authorization of the user is managed, and the operation and management of the user on a DO resource are realized.
The prior art has the problems that the DO operation request is authenticated and processed by relying on a single center, and traceable safe storage and management of the operation request are lacked.
Disclosure of Invention
Embodiments of the present application provide a method, an apparatus, a device, and a storage medium for managing and serving digital object resources, which aim to improve security of DO operations and enhance traceability of DO operations.
A first aspect of the embodiments of the present application provides a method for managing and servicing digital object resources, where the method includes:
the authorization block chain network authorizes the client according to authorization information sent by a resource owner;
an operation block chain node on an operation block chain network responds to an operation request sent by the authorized client, and verifies the operation request through an intelligent contract to obtain a verification result;
the operating block chain node packs and stores the successfully verified operating request and the verification result corresponding to the successfully verified operating request in a preset time period into a new block to obtain a new operating request block;
and the operation block link point sends the operation request block to a digital object warehouse and forwards a processing result of the digital object warehouse for processing the operation request block to the client.
Optionally, the authorizing the client by the authorization blockchain network according to the authorization information sent by the resource owner includes:
the resource owner generates the authorization information according to the authorization request sent by the client; the authorization information at least includes: the account of the resource owner, the account of the client and the account attribute which needs to be added to the account of the client;
and the authorization block chain network verifies the authorization information, and after the verification is successful, the corresponding operation authority is granted to the client.
Optionally, the verifying, by an intelligent contract, the operation request sent by an authorized client in response to an operation request sent by an operation blockchain node on an operation blockchain network includes:
the operation block chain node obtains main attribute data corresponding to the operation request from the authorization block chain network;
the operating block chain node obtains object attribute data corresponding to the operating request according to the operating request;
and the operation block chain node adopts an intelligent contract to verify the subject attribute data, the object attribute data and the access control strategy to obtain a verification result.
Optionally, the method further comprises:
and recording the verification result in the operation block chain network.
Optionally, the obtaining, by the operating block link point according to the operation request, object attribute data corresponding to the operation request includes:
the operation block chain node requests retrieval from the digital object identity information warehouse according to the digital object identity information corresponding to the operation request to obtain digital object positioning corresponding to the digital object identity information;
and the operation block chain node acquires the object attribute data of the corresponding digital object from the digital object metadata base according to the digital object positioning.
Optionally, the sending, by the operation block node, the operation request block to a digital object source database, and forwarding a processing result of the digital object source database processing the operation request block to the client, includes:
the operation block link sends the operation request block to the digital object source database;
the digital object source database processes according to each operation request in the operation request block and sends the processing result of each operation request to the operation block chain node;
and the operation block chain node sends the processing result of each operation request to the client.
Optionally, the verifying, by an intelligent contract, the operation block chain node on the operation block chain network, in response to an operation request sent by the authorized client, to obtain a verification result, where the verifying includes:
and the operation block chain node responds to an operation request sent by the authorized client or an operation request sent by the resource owner, and verifies the operation request through an intelligent contract to obtain a verification result.
A second aspect of the embodiments of the present application provides a device for managing and serving digital object resources, where the device includes:
the authorization module is used for authorizing the blockchain network to authorize the client according to the authorization information sent by the resource owner;
the operation verification module is used for responding to an operation request sent by the authorized client by an operation block chain node on the operation block chain network, verifying the operation request through an intelligent contract and obtaining a verification result;
the operation packing module is used for packing and storing the operation request which is successfully verified within a preset time period and the verification result corresponding to the operation request which is successfully verified into a new block by the operation block chain node to obtain a new operation request block;
and the operation returning module is used for sending the operation request block to a digital object source database by the operation block link node, and forwarding a processing result of the operation request block processed by the digital object source database to the client.
Optionally, the authorization module comprises:
an authorization information generation submodule, configured to generate the authorization information according to an authorization request sent by the client by the resource owner; the authorization information at least includes: the account of the resource owner, the account of the client and the account attribute which needs to be added to the account of the client;
and the authorization submodule is used for verifying the authorization information by the authorization block chain network and granting corresponding operation authority to the client after the verification is successful.
Optionally, the operation verification module comprises:
the main attribute determining submodule is used for the operation block chain node to obtain main attribute data corresponding to the operation request from the authorization block chain network;
the object attribute determining submodule is used for the operating block chain node to obtain object attribute data corresponding to the operating request according to the operating request;
and the verification result obtaining submodule is used for verifying the subject attribute data, the object attribute data and the access control strategy by adopting an intelligent contract for the operating block chain link points to obtain a verification result.
Optionally, the erase verification module further includes:
and the verification result recording sub-module is used for recording the verification result in the operation block chain network.
Optionally, the object attribute determining sub-module includes:
the digital object positioning sub-module is used for requesting retrieval from the digital object identity information warehouse by the operating block chain node according to the digital object identity information corresponding to the operating request to obtain digital object positioning corresponding to the digital object identity information;
and the object attribute obtaining submodule is used for obtaining the object attribute data of the corresponding digital object from the digital object metadata base by the operation block chain node according to the digital object positioning.
Optionally, the operation return module includes:
a block sending submodule, configured to send the operation request block to the digital object source database by the operation block link node;
a result sending submodule, configured to process, by the digital object source database, according to each operation request in the operation request block, and send a processing result of each operation request to the operation block chain node;
and the result forwarding submodule is used for sending the processing result of each operation request to the client by the operation block chain node.
Optionally, the operation verification module further comprises:
and the operation block chain node responds to an operation request sent by the authorized client or an operation request sent by the resource owner, and verifies the operation request through an intelligent contract to obtain a verification result.
A third aspect of embodiments of the present application provides a readable storage medium, on which a computer program is stored, which, when executed by a processor, implements the steps in the method according to the first aspect of the present application.
A fourth aspect of the embodiments of the present application provides an electronic device, including a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor executes the computer program to implement the steps of the method according to the first aspect of the present application.
By adopting the management and service method of the digital object resource, the authorization block chain network authorizes the client according to the authorization information sent by the resource owner; the client sends an operation request to an operation block chain network, and operation block chain nodes on the operation block chain network verify the operation request through an intelligent contract to obtain a verification result; the operation block chain node packs and stores the operation request in a preset time period and the verification result corresponding to the operation request into a new block to obtain a new operation request block; and the operation block link point sends the operation request block to a digital object source database, and forwards the processing result of the digital object source database on the operation request block to the client. In the method, the double-chain management scheme is adopted, the authorization block chain network and the operation block chain network are cooperated together, the processing efficiency is increased, the operation is verified by using an intelligent contract, the management safety of the operation of the DO warehouse is enhanced, and the traceability of the DO operation is enhanced by realizing block chain storage on the operation request.
Drawings
In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed to be used in the description of the embodiments of the present application will be briefly introduced below, and it is obvious that the drawings in the following description are only some embodiments of the present application, and it is obvious for those skilled in the art that other drawings can be obtained according to these drawings without inventive exercise.
FIG. 1 is a block diagram of an overall framework of a double-stranded DO management scheme as proposed by an embodiment of the present application;
FIG. 2 is a flowchart of a method for managing and servicing digital object resources according to an embodiment of the present application;
fig. 3 is a schematic diagram of a device for managing and serving digital object resources according to an embodiment of the present application.
Detailed Description
The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are some, but not all, embodiments of the present application. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.
In the embodiment of the present application, a set of DO resource object management and service methods is designed, as shown in fig. 1, fig. 1 is an overall framework schematic diagram of a double-chain DO management scheme provided in an embodiment of the present application, as shown in fig. 1:
the whole framework comprises a client, a resource owner, an authorized block chain network, an operation block chain network and a DO warehouse. The DO warehouse comprises a DOI (digital object identity information), a DO source database and a DO metadatabase.
The client is responsible for requesting authorization from the resource owner, and after obtaining the authorization, the corresponding DO resource can be operated. The resource owner has the corresponding user attribute for operating the DO resource, and can authorize the attribute to the client for temporary or long-term operation. The authorization block chain network is responsible for managing the attribute states of all users, recording the authorization initiated by the users and modifying the corresponding user attributes according to the authorization. The operation block chain network is responsible for managing all DO operations, recording the DO operations initiated by the user and sending the packed operations to the DO warehouse. The DOI is responsible for uniformly storing and managing the plurality of DO identity information, and a user can inquire the corresponding DO resource position according to the DO identity information. The DO metadata base is responsible for storing metadata of the DO resource, including DO name, attribute and the like. The DO source database is responsible for storing DO source data including pictures, videos and the like.
The management and service method of the digital object provided by the embodiment of the application is provided based on the framework.
Referring to fig. 2, fig. 2 is a flowchart illustrating a method for managing and servicing digital object resources according to an embodiment of the present application. As shown in fig. 2, the method comprises the steps of:
s11: and the authorization blockchain network authorizes the client according to the authorization information sent by the resource owner.
In this embodiment, when a user needs to operate a DO resource in the DO warehouse, the user needs to operate on the client, and for a new user, the new user does not have the right to operate the corresponding DO resource, and at this time, the user needs to initiate an authorization request through the client, and can perform the corresponding DO operation after obtaining the authorization.
In this embodiment, the specific steps of authorizing, by the authorization blockchain network, the client according to the authorization information sent by the resource owner include:
s11-1: the resource owner generates the authorization information according to the authorization request sent by the client; the authorization information at least includes: the account of the resource owner and the account of the client need account attributes added to the account of the client.
In this embodiment, the resource owner owns the corresponding user attribute for operating the DO resource, and may authorize the attribute to the client for temporary or long-term operation, and when the user needs to operate the DO resource, the user may send the authorization request to the corresponding resource owner through the client.
In this embodiment, the authorized blockchain network is also called an authorized blockchain account book, and the authorized blockchain network manages attribute states of all users, where corresponding permissions are also set for each attribute, for example, an a user has a read permission for a DO resource, and a B user has a read and write permission for a DO resource.
In this embodiment, after receiving an authorization request sent by a client, a resource owner generates corresponding authorization information, where the authorization information includes an account of the resource owner, an account of a client user, and specific attribute authorization content, that is, an account attribute that needs to be added to the client. For example, "user A grants attribute X to user B. "
S11-2: and the authorization block chain network verifies the authorization information, and after the verification is successful, the corresponding operation authority is granted to the client.
In this embodiment, the authorization block chain ledger verifies the authorization information according to an access control policy, where the access control policy is a pre-established policy and mainly specifies an access and control policy for the DO resource, and only requests and instructions that conform to the policy can be verified, and requests and instructions that DO not conform to the access control policy cannot be verified. When the authorization information is received by the authorization block chain account book, whether the attribute is possessed in the attribute set of the user A or not and whether the attribute is not possessed in the user B or not are verified according to the access control strategy, and when the authorization information is determined to be correct, the verification is passed.
The method for granting the corresponding authority to the client is to change the account state of the client user and add an attribute capable of operating the DO resource to the client user. For example, the account attribute of the user A is X, the user A grants the account attribute X to the user B through the authorization block chain network, and the user B also has the account attribute X. The blockchain network completes authorization of the client.
For example, in a campus scenario, a teacher issues a test paper to a student, allowing only the student to read the test paper at a particular time but not modify the test paper.
User a contains the attribute set { "teacher", "student" }, user B initially has no attribute { }.
There are DO resources "2020 end of term test paper" in the DO repository.
DOI:school/1d2ae9582a92b822ec103。
The attribute set is { "test paper" }.
Access control policy set {1, "subject attribute: student or teacher, object attribute: test paper, operation: read, environmental attributes: 2020.11.20-2021.11.21 ", 2" subject attributes: teacher, object attribute: test paper, operation: write, environmental attributes: 2020.11.10-2021.11.19"}
Access control policy 1 indicates that the teacher and student can read "2020 end-of-term test paper" at 2020.11.20-2020.11.21. Access control policy 2 indicates that the teacher may write to "2020 end-of-term test paper" at 2020.11.10-2020.11.19.
In an initial state, a user B cannot access the ' 2020-level end-of-term test paper ', the user A initiates authorization, an attribute ' student ' is granted to the user B, and after the user B obtains the authorization, the user B can read the ' 2020-level end-of-term test paper according to the access control policy 1 within a specific time and cannot write the ' 2020-level end-of-term test paper '.
When a student logs in a client and wants to read a test paper, the student firstly needs to request the teacher for the permission of reading the test paper, and the method specifically comprises the following steps:
the preset state of the authorized block chain network is as follows: { "A": { "teacher", "student" }, "B": { };
operation block chain network preset state: { };
user a initiates authorization { "from": "A", "to": B "," attribute ": student" };
the authorized block chain network packs the authorization to the new block, and the user state is modified in the account book as follows: { "A": { "teacher", "student" }, "B": { "student" } };
s12: and responding to an operation request sent by the authorized client by an operation block chain node on the operation block chain network, and verifying the operation request through an intelligent contract to obtain a verification result.
In this embodiment, after the client is authorized, the user of the client obtains a corresponding right, and the user can send an operation request to the operation block chain network through the client at this time, where the operation block chain is responsible for managing all DO operations, an intelligent contract is a preset contract, and an operation rule agreed by both parties of the contract defines a rule that the operation request passes verification. After the rule is met and the verification is passed, a verification result is obtained.
Illustratively, the operation request includes DOI (digital object resource identity information), operation type and operation signature.
The user B initiates an operation request:
from: "B", "doi": "school/1 d2ae9582a92b822ec 103", "operation": "read", "sig": 0x1ab2f523ac … } "operation" indicates the operation type, and "sig" indicates signature information.
The specific steps of sending out the operation request and passing the verification are as follows:
s12-1: and the operation block chain node obtains the main attribute data corresponding to the operation request from the authorized block chain network.
In this embodiment, the operation block chain node is a service node in an operation block chain network, the operation block chain network is composed of a plurality of service nodes, the whole network allocates a task to each node, and the node is responsible for specific execution. In order to ensure the security of the operation, a body attribute of the operation needs to be authenticated, where the body attribute refers to a user attribute of a user who sends the operation, and the body attribute of an operation object corresponding to the operation request is stored in an authorized blockchain network and needs to be acquired through a cross-chain mechanism, where the cross-chain mechanism refers to data transmission between two different blockchains. And the operation block chain node obtains the main body attribute from the authorization block chain network through a cross-chain mechanism and is used for verifying the operation request.
Specifically, the operation blockchain node requests the authorized blockchain for the subject attribute set of the sender of the operation request according to the from field in the operation request. For example, the subject attribute set is acquired as { "student" }.
S12-2: and the operating block chain node obtains object attribute data corresponding to the operating request according to the operating request.
In this embodiment, the object attribute refers to an attribute of a DO resource corresponding to the operation request, and the object attribute of the digital object is stored in a DO metadata base. The specific steps of the operation block chain node obtaining the object attribute data corresponding to the operation request according to the operation request are as follows:
s12-2-1: and the operation block chain node requests retrieval from the digital object identity information warehouse according to the digital object identity information corresponding to the operation request to obtain digital object positioning corresponding to the digital object identity information.
In this embodiment, the operation block chain node may request the corresponding position of the DO from the DOI according to the DOI field in the operation request, the DOI may send the url (address) and the id of the DO resource in the DO repository to the block chain node, and the block chain node may locate the DO resource according to the url and the id.
Illustratively, the url obtained by the operation block chain node is { "url": www.school.com "," id ": 1d2ae9582a92b822ec 103" }.
S12-2-2: and the operation block chain node obtains the object attribute data of the corresponding digital object from the digital object warehouse according to the digital object positioning.
In this embodiment, after the position of the DO resource in the DO warehouse is located, the operation block chain accesses the corresponding DO warehouse through url and id according to the object attribute of the DO corresponding to the location request, and the DO warehouse sends the object attribute field of the corresponding DO to the operation block chain node according to the id of the DO.
Illustratively, the operation block chain node accesses a corresponding DO warehouse according to the url and the id, and acquires an object attribute set { "test paper" } of the DO.
S12-3: and the operating block chain node adopts an intelligent contract to verify the subject attribute data, the object attribute data and the access control strategy to obtain a verification result.
In this embodiment, in order to ensure the security of the operation, the operation request needs to be verified according to the received subject attribute data, object attribute data, and access control policy set. It is verified whether the subject attribute of the operation has rights to the DO operation. The verification of the operation request can be realized by running the intelligent contract program.
Illustratively, for the access control policy of policy 1, "subject attribute: student or teacher, object attribute: test paper, operation: read, environmental attributes: 2020.11.20-2021.11.21', the subject attribute of the user B who sends the operation request is student, the object attribute of the DO which wants to operate is test paper, the operation is reading, the time is 2020.11.20, the operation request conforms to the access control strategy, and the verification is successful. For example, the generated verification result is "authentication": True, which represents the success of the verification.
S13: and the operating block chain node stores the successfully verified operating request in a preset time period and the verification result corresponding to the successfully verified operating request in a new block in a packaging manner to obtain a new operating request block.
In this embodiment, after the verification is successful, the operation request and the verification result corresponding to the operation request are packed and stored in a new block, so as to facilitate the packing processing. The new operation request block is a block newly divided in the block chain network and is specially used for storing the operation request and the corresponding verification result. For batch processing, the operation requests within a time period are uniformly packed and packed into a new block, and the preset time period may be set by itself, for example, 5 seconds or 10 seconds, which is not limited herein.
Illustratively, the operation request of the user B stored in the new block is:
{ blocknum:0, operations [ { "from": "B", "do": "2020-level end-of-term test paper", "op _ code": "read", "sig": 0x1ab2f523ac … }, "authentication": True ] } a
Wherein, blocknum is a block number, operations are authorization information, op _ code is an operation type, sig is a digital signature, and authentication represents a verification result.
In another embodiment of the present application, the operation blockchain network records each operation request, and the operation records can be called and viewed at any time.
S14: and the operation block link point sends the operation request block to a digital object source database, and forwards a processing result of the digital object source database for processing the operation request block to the client.
In this embodiment, the specific steps of sending the packaged operation request block to the digital object source database, and forwarding the processing result of the operation request block by the digital object source database to the client include:
s14-1: the operation block link sends the operation request block to the digital object source database.
In this embodiment, all operation requests and corresponding verification results within a preset time period are recorded in the operation request block, and the operation request block is directly sent to the corresponding DO source database.
S14-2: and the digital object source database processes according to each operation request in the operation request block and sends the processing result of each operation request to the operation block chain node.
In this embodiment, the DO source database calls corresponding DO source data in the DO source database according to each operation request in the operation request block, and sends the DO source data to the block chain node.
For example, if one operation request in the operation request block is "B user's read request for 2020-level end test paper", the DO source database finds a "2020-level end test paper, pdf" file in the DO source database according to the request, and sends the file to the block chain node.
S14-3: and the operation block chain node sends the processing result of each operation request to the client.
In this embodiment, after the DO source database sends the processing result to the operation block chain node, the operation block chain node forwards the processing result to the client, and the user B implements the operation on the DO resource.
Illustratively, the operation block link point sends "2020 end-of-term test paper" in S14-2 to the client of user B, and user B realizes the reading operation of the test paper.
In the embodiment of the scheme, the complete steps of the students for checking the test paper are as follows:
1. the DO warehouse presets an access control strategy set: { "subject Properties: student or teacher, object attribute: test paper, operation: read, environmental attributes: 2020.11.20-2021.11.21 "," subject attribute: teacher, object attribute: test paper, operation: write, environmental attributes: 2020.11.10-2021.11.19"}.
2. The preset state of the authorized block chain network is as follows: { "A": { "teacher", "student" }, "B": { };
operation block chain network preset state: {}.
3. User a initiates authorization { "from": "A", "to": B "," attribute ": student" }.
4. The grant block chain network packs the grant to the new block and modifies the user state in the network to: { "A" { "teacher", "student" }, "B" { "student" }.
5. User B initiates an operation request { "from": "B", "doi": "school/1 d2ae9582a92b822ec 103", "operation": "read", "sig": 0x1ab2f523ac … }.
7. And the operation blockchain node requests the main attribute set of the sender from the authorized blockchain network according to the from field in the operation request, and acquires the attribute set { "student" }.
8. And the operation block chain node requests the corresponding position of the DO from the DOI warehouse according to the DOI field in the operation request, and acquires url, { "url": www.school.com "," id ": 1d2ae9582a92b822ec 103" } of the DO warehouse.
9. And the operation block chain node accesses a corresponding DO warehouse according to the url and the id, and acquires an object attribute set { "test paper" } of the DO.
10. The intelligent contract verifies the operation request according to the acquired data and the access control strategy, packs the verification result in a new block and records the result in an operation block chain network [ { blocknum:0, operations [ { "from": "B", "do": "2020 grade end-of-term test paper", "operation": "read", "sig": 0x1ab2f523ac …), "authentication": True ] }.
11. And the DO warehouse carries out corresponding operation according to the received blocks.
12. The DO warehouse returns the result "2020 end-of-term test paper" to the blockchain node for further forwarding to user B.
In another embodiment of the present application, the resource owner may also operate on the digital object resource through the chain of operation blocks.
The operation procedure of the resource owner on the DO resource is the same as the processing procedure of the operation initiated by the client, and is not described here.
Based on the same inventive concept, an embodiment of the present application provides a device for managing and serving digital object resources. Referring to fig. 3, fig. 3 is a schematic diagram of a device 300 for managing and serving digital object resources according to an embodiment of the present application. As shown in fig. 3, the apparatus includes:
an authorization module 301, configured to authorize the blockchain network to authorize the client according to authorization information sent by the resource owner;
an operation verification module 302, configured to verify, by an intelligent contract, an operation block chain node on an operation block chain network in response to an operation request sent by an authorized client, to obtain a verification result;
an operation packing module 303, configured to pack and store, by the operation block link point, the operation request that is successfully verified within a preset time period and the verification result corresponding to the operation request that is successfully verified into a new block, so as to obtain a new operation request block;
an operation returning module 304, configured to send the operation request block to the digital object source database by the operation block node, and forward a processing result of the operation request block processed by the digital object source database to the client.
Optionally, the authorization module comprises:
an authorization information generation submodule, configured to generate the authorization information according to an authorization request sent by the client by the resource owner; the authorization information at least includes: the account of the resource owner, the account of the client and the account attribute which needs to be added to the account of the client;
and the authorization submodule is used for verifying the authorization information by the authorization block chain network and granting corresponding operation authority to the client after the verification is successful.
Optionally, the operation verification module comprises:
the main attribute determining submodule is used for the operation block chain node to obtain main attribute data corresponding to the operation request from the authorization block chain network;
the object attribute determining submodule is used for the operating block chain node to obtain object attribute data corresponding to the operating request according to the operating request;
and the verification result obtaining submodule is used for verifying the subject attribute data, the object attribute data and the access control strategy by adopting an intelligent contract for the operating block chain link points to obtain a verification result.
Optionally, the erase verification module further includes:
and the verification result recording sub-module is used for recording the verification result in the operation block chain network.
Optionally, the object attribute determining sub-module includes:
the digital object positioning sub-module is used for requesting retrieval from the digital object identity information warehouse by the operating block chain node according to the digital object identity information corresponding to the operating request to obtain digital object positioning corresponding to the digital object identity information;
and the object attribute obtaining submodule is used for obtaining the object attribute data of the corresponding digital object from the digital object metadata base by the operation block chain node according to the digital object positioning.
Optionally, the operation return module includes:
a block sending submodule, configured to send the operation request block to the digital object source database by the operation block link node;
the result sending submodule is used for processing according to each operation request in the operation request block by using one digital object source database and sending the processing result of each operation request to the operation block chain node;
and the result forwarding submodule is used for sending the processing result of each operation request to the client by the operation block chain node.
Optionally, the operation verification module further comprises:
and the operation block chain node responds to an operation request sent by the authorized client or an operation request sent by the resource owner, and verifies the operation request through an intelligent contract to obtain a verification result.
Based on the same inventive concept, another embodiment of the present application provides a readable storage medium, on which a computer program is stored, which when executed by a processor implements the steps in the method for managing and serving digital object resources according to any of the above embodiments of the present application.
Based on the same inventive concept, another embodiment of the present application provides an electronic device, which includes a memory, a processor, and a computer program stored in the memory and running on the processor, and when the processor executes the computer program, the electronic device implements the steps in the method for managing and serving digital object resources according to any of the above embodiments of the present application.
For the device embodiment, since it is basically similar to the method embodiment, the description is simple, and for the relevant points, refer to the partial description of the method embodiment.
The embodiments in the present specification are described in a progressive manner, each embodiment focuses on differences from other embodiments, and the same and similar parts among the embodiments are referred to each other.
As will be appreciated by one skilled in the art, embodiments of the present application may be provided as a method, apparatus, or computer program product. Accordingly, embodiments of the present application may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, embodiments of the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and the like) having computer-usable program code embodied therein.
Embodiments of the present application are described with reference to flowchart illustrations and/or block diagrams of methods, terminal devices (systems), and computer program products according to embodiments of the application. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing terminal to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing terminal, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing terminal to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing terminal to cause a series of operational steps to be performed on the computer or other programmable terminal to produce a computer implemented process such that the instructions which execute on the computer or other programmable terminal provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
While preferred embodiments of the present application have been described, additional variations and modifications of these embodiments may occur to those skilled in the art once they learn of the basic inventive concepts. Therefore, it is intended that the appended claims be interpreted as including the preferred embodiment and all such alterations and modifications as fall within the true scope of the embodiments of the application.
Finally, it should also be noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or terminal that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or terminal. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other like elements in a process, method, article, or terminal that comprises the element.
The method, apparatus, device and storage medium for managing and serving digital object resources provided by the present application are introduced in detail, and a specific example is applied in the present application to explain the principle and implementation manner of the present application, and the description of the above embodiment is only used to help understand the method and core ideas of the present application; meanwhile, for a person skilled in the art, according to the idea of the present application, there may be variations in the specific embodiments and the application scope, and in summary, the content of the present specification should not be construed as a limitation to the present application.
Claims (10)
1. A method for managing and servicing digital object resources, the method comprising:
the authorization block chain network authorizes the client according to authorization information sent by a resource owner;
an operation block chain node on an operation block chain network responds to an operation request sent by the authorized client, and verifies the operation request through an intelligent contract to obtain a verification result;
the operating block chain node packs and stores the successfully verified operating request and the verification result corresponding to the successfully verified operating request in a preset time period into a new block to obtain a new operating request block;
and the operation block link point sends the operation request block to a digital object source database, and forwards a processing result of the digital object source database for processing the operation request block to the client.
2. The method of claim 1, wherein authorizing the client by the grant blockchain network according to the authorization information sent by the resource owner comprises:
the resource owner generates the authorization information according to the authorization request sent by the client; the authorization information at least includes: the account of the resource owner, the account of the client and the account attribute which needs to be added to the account of the client;
and the authorization block chain network verifies the authorization information, and after the verification is successful, the corresponding operation authority is granted to the client.
3. The method of claim 1, wherein verifying, by an intelligent contract, an operation blockchain node on an operation blockchain network in response to an operation request sent by an authorized client comprises:
the operation block chain node obtains main attribute data corresponding to the operation request from the authorization block chain network;
the operating block chain node obtains object attribute data corresponding to the operating request according to the operating request;
and the operation block chain node adopts an intelligent contract to verify the subject attribute data, the object attribute data and the access control strategy to obtain a verification result.
4. The method of claim 3, further comprising:
and recording the verification result in the operation block chain network.
5. The method according to claim 3, wherein the obtaining, by the operating block node, object attribute data corresponding to the operation request according to the operation request comprises:
the operation block chain node requests retrieval from the digital object identity information warehouse according to the digital object identity information corresponding to the operation request to obtain digital object positioning corresponding to the digital object identity information;
and the operation block chain node acquires the object attribute data of the corresponding digital object from the digital object metadata base according to the digital object positioning.
6. The method according to claim 1, wherein the operation block node sends the operation request block to a digital object source database, and forwards a processing result of the operation request block processed by the digital object source database to the client, including:
the operation block link sends the operation request block to the digital object source database;
the digital object source database processes according to each operation request in the operation request block and sends the processing result of each operation request to the operation block chain node;
and the operation block chain node sends the processing result of each operation request to the client.
7. The method of claim 1, wherein an operation blockchain node on an operation blockchain network verifies an operation request sent by an authorized client through an intelligent contract to obtain a verification result in response to the operation request, and the method comprises:
and the operation block chain node responds to an operation request sent by the authorized client or an operation request sent by the resource owner, and verifies the operation request through an intelligent contract to obtain a verification result.
8. An apparatus for managing and servicing digital object resources, the apparatus comprising:
the authorization module is used for authorizing the blockchain network to authorize the client according to the authorization information sent by the resource owner;
the operation verification module is used for responding to an operation request sent by the authorized client by an operation block chain node on the operation block chain network, verifying the operation request through an intelligent contract and obtaining a verification result;
the operation packing module is used for packing and storing the operation request which is successfully verified within a preset time period and the verification result corresponding to the operation request which is successfully verified into a new block by the operation block chain node to obtain a new operation request block;
and the operation returning module is used for sending the operation request block to the digital object warehouse by the operation block link point and forwarding a processing result of the digital object warehouse for processing the operation request block to the client.
9. A computer-readable storage medium, on which a computer program is stored which, when being executed by a processor, carries out the steps of the method according to any one of claims 1 to 7.
10. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the steps of the method according to any of claims 1 to 7 are implemented when the computer program is executed by the processor.
Priority Applications (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202110661692.4A CN113553603A (en) | 2021-06-15 | 2021-06-15 | Method, device, equipment and storage medium for managing and serving digital object resources |
CN202210490545.XA CN114780980A (en) | 2021-06-15 | 2022-05-07 | Digital object operation evidence storing and tracing management method, device, equipment and medium |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202110661692.4A CN113553603A (en) | 2021-06-15 | 2021-06-15 | Method, device, equipment and storage medium for managing and serving digital object resources |
Publications (1)
Publication Number | Publication Date |
---|---|
CN113553603A true CN113553603A (en) | 2021-10-26 |
Family
ID=78102129
Family Applications (2)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202110661692.4A Withdrawn CN113553603A (en) | 2021-06-15 | 2021-06-15 | Method, device, equipment and storage medium for managing and serving digital object resources |
CN202210490545.XA Pending CN114780980A (en) | 2021-06-15 | 2022-05-07 | Digital object operation evidence storing and tracing management method, device, equipment and medium |
Family Applications After (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202210490545.XA Pending CN114780980A (en) | 2021-06-15 | 2022-05-07 | Digital object operation evidence storing and tracing management method, device, equipment and medium |
Country Status (1)
Country | Link |
---|---|
CN (2) | CN113553603A (en) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114021090A (en) * | 2021-10-13 | 2022-02-08 | 北京大数据先进技术研究院 | Digital object operation evidence storing and tracing management method, device, equipment and medium |
Family Cites Families (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN107332847B (en) * | 2017-07-05 | 2019-04-26 | 武汉凤链科技有限公司 | A kind of access control method and system based on block chain |
CN108123936B (en) * | 2017-12-13 | 2021-04-13 | 北京科技大学 | Access control method and system based on block chain technology |
CN108632268B (en) * | 2018-04-28 | 2021-04-09 | 腾讯科技(深圳)有限公司 | Authentication method and device for block chain access, storage medium and electronic device |
CN109117668A (en) * | 2018-08-10 | 2019-01-01 | 广东工业大学 | A kind of identification authorization safety access method based on block chain building |
CN110109930B (en) * | 2019-05-15 | 2020-07-03 | 山东省计算中心(国家超级计算济南中心) | Government affair data storage and query method and system based on block chain double-chain structure |
CN111931140A (en) * | 2020-07-31 | 2020-11-13 | 支付宝(杭州)信息技术有限公司 | Authority management method, resource access control method and device and electronic equipment |
CN112543105B (en) * | 2020-11-26 | 2022-11-29 | 齐鲁工业大学 | Complete access control method based on roles under intelligent contract |
CN112688927B (en) * | 2020-12-18 | 2022-06-24 | 重庆大学 | Block chain-based distributed access control method |
-
2021
- 2021-06-15 CN CN202110661692.4A patent/CN113553603A/en not_active Withdrawn
-
2022
- 2022-05-07 CN CN202210490545.XA patent/CN114780980A/en active Pending
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN114021090A (en) * | 2021-10-13 | 2022-02-08 | 北京大数据先进技术研究院 | Digital object operation evidence storing and tracing management method, device, equipment and medium |
Also Published As
Publication number | Publication date |
---|---|
CN114780980A (en) | 2022-07-22 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US11050750B2 (en) | Recording and verification method and apparatus of internet of things device, and identity authentication method and apparatus | |
US20200228574A1 (en) | Policy management for data migration | |
CN110096857B (en) | Authority management method, device, equipment and medium for block chain system | |
CN110784433B (en) | User access processing method, device and equipment | |
EP3905078A1 (en) | Identity verification method and system therefor | |
CN110414268B (en) | Access control method, device, equipment and storage medium | |
US11303626B2 (en) | Secure token passing via hash chains | |
KR20190042567A (en) | Dynamic access control on block chaining | |
CN106991298B (en) | Access method of application program to interface, authorization request method and device | |
US20140380058A1 (en) | Process Authentication and Resource Permissions | |
CN110222531A (en) | A kind of method, system and equipment accessing database | |
CN113656780B (en) | Cross-chain access control method and device | |
CN109981650B (en) | Transfer method and system for general certificates in block chain | |
CN105337925A (en) | User account management method and apparatus | |
CN110300104B (en) | User authority control and transfer method and system under edge cloud scene | |
CN114417287B (en) | Data processing method, system, device and storage medium | |
CN112861102B (en) | Method and system for processing electronic file based on block chain | |
WO2022205965A1 (en) | Cross-chain access control method and apparatus | |
WO2014150753A2 (en) | Method and system for restricting the operation of applications to authorized domains | |
WO2022206431A1 (en) | Method and apparatus for querying ledger data of fabric blockchain | |
CN114780980A (en) | Digital object operation evidence storing and tracing management method, device, equipment and medium | |
WO2008013656A2 (en) | Content control system and method using certificate chains | |
CN113065153B (en) | Digital object resource control and authorization method, device, equipment and storage medium | |
JP6575052B2 (en) | Access control system and program | |
CN114021090A (en) | Digital object operation evidence storing and tracing management method, device, equipment and medium |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
WW01 | Invention patent application withdrawn after publication | ||
WW01 | Invention patent application withdrawn after publication |
Application publication date: 20211026 |